Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ec5e7406-512d-40a0-9e35-224270cd1c91/64498df4f35277277c3a777ab289c9b3a4006d96.roa
File:                     64498df4f35277277c3a777ab289c9b3a4006d96.roa (raw, json)
Hash identifier:          AoAq3oMdnmlMJXVd/AmiD2LTl+wHEe2jMnZaYCpAqSI=
Subject key identifier:   10:9C:20:93:B0:E8:18:4E:D8:17:D3:2E:2E:46:96:57:08:6E:F5:F9
Certificate issuer:       /CN=5b7146c3e3e3bf5adde231a7c701d0d97fff5cbd
Certificate serial:       0BF5EF
Authority key identifier: 71:DF:AD:5C:AD:F2:87:3F:3B:5F:A1:00:4C:89:FC:B8:90:3F:DB:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7146c3e3e3bf5adde231a7c701d0d97fff5cbd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ec5e7406-512d-40a0-9e35-224270cd1c91/64498df4f35277277c3a777ab289c9b3a4006d96.roa
Signing time:             Wed 24 Mar 2021 14:38:44 +0000
ROA not before:           Wed 24 Mar 2021 14:38:43 +0000
ROA not after:            Tue 24 Mar 2026 14:38:43 +0000
asID:                     27855
IP address blocks:        45.235.212.0/24 maxlen: 24
                          45.235.213.0/24 maxlen: 24
                          45.235.214.0/24 maxlen: 24
                          45.235.215.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 783855 (0xbf5ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7146c3e3e3bf5adde231a7c701d0d97fff5cbd
        Validity
            Not Before: Mar 24 14:38:43 2021 GMT
            Not After : Mar 24 14:38:43 2026 GMT
        Subject: CN=64498df4f35277277c3a777ab289c9b3a4006d96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:57:b8:14:9e:ef:4d:d8:2d:cd:61:bd:61:96:
                    7c:48:0f:dd:e3:34:7d:c9:92:76:c9:69:01:b2:bb:
                    5d:46:18:7a:b5:6f:33:41:f9:eb:e2:f6:b2:98:e9:
                    69:8a:1c:a5:51:81:f0:c8:55:ac:28:06:f1:0c:d1:
                    e8:57:8f:17:f3:4e:a7:5d:f7:c2:6b:de:b0:3d:da:
                    4f:c7:52:c4:30:b1:af:1d:78:41:05:06:07:c6:d5:
                    04:65:50:f7:d0:18:b9:f6:b9:4b:6d:08:5e:5c:d5:
                    9e:33:fc:df:a9:7e:a8:15:14:7f:76:eb:06:ea:61:
                    47:56:9d:f5:15:f5:0e:91:ed:b2:c2:39:84:e6:83:
                    f7:f1:c6:46:d0:1b:19:03:0d:6b:d4:7e:e1:25:bb:
                    d3:7d:e6:bd:07:aa:61:04:16:f4:24:f3:85:ee:a6:
                    06:62:cc:aa:9e:12:74:89:61:e4:93:c6:20:1b:78:
                    92:fc:b5:8a:b5:05:f4:99:59:04:c1:cf:12:ad:ad:
                    84:cd:5b:75:26:8e:64:f1:9d:2e:bf:40:e1:a1:44:
                    05:c3:8a:c4:a4:f6:5b:07:e7:a9:60:62:58:de:c7:
                    fc:14:34:ef:a1:c7:b6:eb:d4:17:61:75:64:01:59:
                    bc:e7:eb:02:44:81:e6:c8:b9:3b:99:5e:84:83:21:
                    76:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:9C:20:93:B0:E8:18:4E:D8:17:D3:2E:2E:46:96:57:08:6E:F5:F9
            X509v3 Authority Key Identifier:
                keyid:71:DF:AD:5C:AD:F2:87:3F:3B:5F:A1:00:4C:89:FC:B8:90:3F:DB:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7146c3e3e3bf5adde231a7c701d0d97fff5cbd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ec5e7406-512d-40a0-9e35-224270cd1c91/64498df4f35277277c3a777ab289c9b3a4006d96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ec5e7406-512d-40a0-9e35-224270cd1c91/5b7146c3e3e3bf5adde231a7c701d0d97fff5cbd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:92:f0:aa:85:0e:b9:c7:bc:6b:e5:8a:bf:61:d9:e8:eb:ee:
         95:99:17:0c:08:aa:08:bb:01:8b:27:fb:e1:69:75:c2:dc:2b:
         ba:94:84:7d:2a:07:69:06:cd:cf:2a:47:b6:de:4d:66:52:ef:
         f8:f6:0f:7b:cf:06:af:34:32:8e:83:f7:17:91:f1:6f:d7:fa:
         19:c0:81:5f:d7:52:1f:ab:a8:8a:13:ec:12:ee:ad:f5:9b:66:
         25:42:72:ce:8b:68:64:46:7b:57:6b:d0:ab:53:04:7b:24:bb:
         9a:0d:f2:14:ef:6f:b5:35:49:37:e9:83:a2:40:53:bf:8d:20:
         c2:4d:70:51:91:fa:81:13:b5:b1:3e:c5:8e:f1:22:50:06:2e:
         44:72:64:14:c1:16:a3:5c:db:22:b6:74:de:f1:65:1e:d4:4e:
         cf:b1:80:26:ae:57:cd:b8:7e:3a:e5:bf:9b:68:d0:37:e1:64:
         15:74:f7:00:df:63:0e:0a:8d:4c:ec:3b:ae:e1:d8:5f:f1:91:
         e4:1e:18:e7:56:6f:47:42:0b:b8:2f:0b:95:d0:9d:df:51:79:
         9e:df:c2:ef:8b:d7:f7:9e:04:82:e4:d1:48:2a:5a:04:eb:33:
         16:0e:fc:a2:d2:0e:a2:1f:30:60:81:25:d8:ac:e1:5a:09:24:
         1f:84:b5:ba
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDC/XvMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVi
NzE0NmMzZTNlM2JmNWFkZGUyMzFhN2M3MDFkMGQ5N2ZmZjVjYmQwHhcNMjEwMzI0
MTQzODQzWhcNMjYwMzI0MTQzODQzWjAzMTEwLwYDVQQDEyg2NDQ5OGRmNGYzNTI3
NzI3N2MzYTc3N2FiMjg5YzliM2E0MDA2ZDk2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwVe4FJ7vTdgtzWG9YZZ8SA/d4zR9yZJ2yWkBsrtdRhh6tW8z
Qfnr4vaymOlpihylUYHwyFWsKAbxDNHoV48X806nXffCa96wPdpPx1LEMLGvHXhB
BQYHxtUEZVD30Bi59rlLbQheXNWeM/zfqX6oFRR/dusG6mFHVp31FfUOke2ywjmE
5oP38cZG0BsZAw1r1H7hJbvTfea9B6phBBb0JPOF7qYGYsyqnhJ0iWHkk8YgG3iS
/LWKtQX0mVkEwc8Sra2EzVt1Jo5k8Z0uv0DhoUQFw4rEpPZbB+epYGJY3sf8FDTv
oce269QXYXVkAVm85+sCRIHmyLk7mV6EgyF2pwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBCcIJOw6BhO2BfTLi5GllcIbvX5MB8GA1UdIwQYMBaAFHHfrVyt8oc/O1+h
AEyJ/LiQP9trMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWI3MTQ2
YzNlM2UzYmY1YWRkZTIzMWE3YzcwMWQwZDk3ZmZmNWNiZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWM1ZTc0MDYtNTEyZC00MGEwLTllMzUtMjI0Mjcw
Y2QxYzkxLzY0NDk4ZGY0ZjM1Mjc3Mjc3YzNhNzc3YWIyODljOWIzYTQwMDZkOTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lYzVlNzQwNi01MTJkLTQwYTAtOWUzNS0yMjQy
NzBjZDFjOTEvNWI3MTQ2YzNlM2UzYmY1YWRkZTIzMWE3YzcwMWQwZDk3ZmZmNWNi
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi3r1DANBgkqhkiG9w0BAQsFAAOCAQEAjJLwqoUOuce8a+WK
v2HZ6OvulZkXDAiqCLsBiyf74Wl1wtwrupSEfSoHaQbNzypHtt5NZlLv+PYPe88G
rzQyjoP3F5Hxb9f6GcCBX9dSH6uoihPsEu6t9ZtmJUJyzotoZEZ7V2vQq1MEeyS7
mg3yFO9vtTVJN+mDokBTv40gwk1wUZH6gRO1sT7FjvEiUAYuRHJkFMEWo1zbIrZ0
3vFlHtROz7GAJq5Xzbh+OuW/m2jQN+FkFXT3AN9jDgqNTOw7ruHYX/GR5B4Y51Zv
R0ILuC8LldCd31F5nt/C74vX954EguTRSCpaBOszFg78otIOoh8wYIEl2KzhWgkk
H4S1ug==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:33 2024 by rpki-client on console-fra.rpki-client.org