Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ed3239a3-c6a1-4dfb-bd3a-cc2f5b637bcc/046e91b29c3eff6a2fb6e379b5c682d665329f4b.roa
File:                     046e91b29c3eff6a2fb6e379b5c682d665329f4b.roa (raw, json)
Hash identifier:          U8k4ZxCIxGRV5MsOUtpTfyBUSySSK3Dvy9oxIU9seaE=
Subject key identifier:   6D:87:83:98:36:1E:93:6B:67:0A:A3:5C:F2:44:B3:53:B3:A8:1B:72
Certificate issuer:       /CN=4da24f95f9e14009eadf64141dc9a803fece4656
Certificate serial:       1199D2
Authority key identifier: 03:1E:4E:7D:08:6D:12:2E:55:02:C5:99:53:92:85:D1:D1:14:CC:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4da24f95f9e14009eadf64141dc9a803fece4656.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ed3239a3-c6a1-4dfb-bd3a-cc2f5b637bcc/046e91b29c3eff6a2fb6e379b5c682d665329f4b.roa
Signing time:             Sat 20 May 2023 08:30:02 +0000
ROA not before:           Fri 19 May 2023 08:30:02 +0000
ROA not after:            Sun 18 May 2025 08:30:02 +0000
asID:                     265768
IP address blocks:        45.173.212.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1153490 (0x1199d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4da24f95f9e14009eadf64141dc9a803fece4656
        Validity
            Not Before: May 19 08:30:02 2023 GMT
            Not After : May 18 08:30:02 2025 GMT
        Subject: CN=046e91b29c3eff6a2fb6e379b5c682d665329f4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:93:05:af:47:a0:a5:c9:73:40:34:9c:bf:69:
                    4a:fb:0e:1a:0f:f2:5a:e9:45:d1:bf:bd:06:21:96:
                    ff:eb:d7:dd:5b:e6:40:e6:b8:2e:71:04:73:41:f0:
                    48:e6:a4:94:bc:87:32:8f:c4:fe:90:3a:74:4b:9c:
                    b0:14:8c:a3:14:5b:85:65:ae:d9:2c:38:39:eb:de:
                    1c:9d:5a:9c:8f:28:40:30:3f:23:29:39:9f:f7:0c:
                    45:19:21:1b:8c:ab:0a:24:9c:a5:4c:14:2f:2f:8d:
                    5f:f0:4e:32:ff:f6:2e:c5:97:ca:2f:95:be:f7:be:
                    59:ef:69:65:8b:8f:3d:ac:30:7c:d9:8e:21:81:36:
                    dd:fa:ac:3a:89:6c:b6:32:6c:50:fd:26:6e:87:79:
                    5e:52:02:d1:6d:3c:4a:f7:df:54:6f:e9:a6:9e:bc:
                    99:f4:4b:ce:69:35:ea:df:a2:f8:b3:84:25:37:6d:
                    1b:8a:e6:43:7e:2c:97:be:e6:51:94:6e:fd:6f:5b:
                    32:55:52:7f:fd:0d:da:3e:5e:49:8a:49:dd:97:a6:
                    9c:30:f1:8c:cd:6a:3a:0b:d1:c4:04:aa:ae:3b:05:
                    d2:35:db:67:64:20:d2:c8:37:9c:ba:aa:fe:07:30:
                    02:0e:54:1a:31:70:a2:f5:d0:34:d2:5f:dc:ed:7a:
                    58:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:87:83:98:36:1E:93:6B:67:0A:A3:5C:F2:44:B3:53:B3:A8:1B:72
            X509v3 Authority Key Identifier:
                keyid:03:1E:4E:7D:08:6D:12:2E:55:02:C5:99:53:92:85:D1:D1:14:CC:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4da24f95f9e14009eadf64141dc9a803fece4656.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ed3239a3-c6a1-4dfb-bd3a-cc2f5b637bcc/046e91b29c3eff6a2fb6e379b5c682d665329f4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ed3239a3-c6a1-4dfb-bd3a-cc2f5b637bcc/4da24f95f9e14009eadf64141dc9a803fece4656.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:21:6c:30:0d:bc:48:60:b6:40:c6:dd:4a:dc:8d:53:aa:99:
         36:44:e6:39:c8:c7:a5:64:9c:d7:2a:fc:eb:4b:1a:70:bb:9a:
         ad:de:0b:02:89:52:1f:f6:5b:95:38:62:44:c0:85:7a:fa:e6:
         fb:a3:ee:87:ff:d4:f1:85:94:1f:02:fa:30:3a:e5:6b:8b:93:
         c9:1a:da:fc:1e:61:29:b1:48:2e:4d:c8:17:b2:97:06:ad:08:
         22:2b:e2:89:07:b3:e2:45:81:47:73:d7:3e:2a:d6:96:94:95:
         ab:a1:b8:5e:9e:11:b4:41:9e:2e:ee:b9:1d:ad:b0:27:ee:9e:
         e3:13:01:41:84:5b:0f:29:2f:7a:d2:bb:6e:89:f6:1e:41:95:
         44:31:68:c7:98:ba:bd:da:5e:cc:f4:27:85:4f:e2:fb:58:1e:
         d3:81:f2:35:66:39:f0:bc:d7:a5:67:79:ff:96:42:f1:eb:77:
         15:37:9a:7d:bb:6e:b4:26:95:1f:51:89:a7:a7:9f:af:01:ee:
         54:75:03:26:78:a7:d0:96:9d:e2:61:50:0a:36:68:6a:d0:0a:
         04:5f:d6:6e:81:e7:9b:d5:6c:dd:7b:71:d0:67:f1:09:d8:fa:
         a0:f3:b2:4c:f5:94:10:a1:91:47:3d:7a:b8:97:4c:d3:d1:96:
         5a:07:e8:c6
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEZnSMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRk
YTI0Zjk1ZjllMTQwMDllYWRmNjQxNDFkYzlhODAzZmVjZTQ2NTYwHhcNMjMwNTE5
MDgzMDAyWhcNMjUwNTE4MDgzMDAyWjAzMTEwLwYDVQQDEygwNDZlOTFiMjljM2Vm
ZjZhMmZiNmUzNzliNWM2ODJkNjY1MzI5ZjRiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApJMFr0egpclzQDScv2lK+w4aD/Ja6UXRv70GIZb/69fdW+ZA
5rgucQRzQfBI5qSUvIcyj8T+kDp0S5ywFIyjFFuFZa7ZLDg5694cnVqcjyhAMD8j
KTmf9wxFGSEbjKsKJJylTBQvL41f8E4y//YuxZfKL5W+975Z72lli489rDB82Y4h
gTbd+qw6iWy2MmxQ/SZuh3leUgLRbTxK999Ub+mmnryZ9EvOaTXq36L4s4QlN20b
iuZDfiyXvuZRlG79b1syVVJ//Q3aPl5Jikndl6acMPGMzWo6C9HEBKquOwXSNdtn
ZCDSyDecuqr+BzACDlQaMXCi9dA00l/c7XpY3wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFG2Hg5g2HpNrZwqjXPJEs1OzqBtyMB8GA1UdIwQYMBaAFAMeTn0IbRIuVQLF
mVOShdHRFMxgMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGRhMjRm
OTVmOWUxNDAwOWVhZGY2NDE0MWRjOWE4MDNmZWNlNDY1Ni5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWQzMjM5YTMtYzZhMS00ZGZiLWJkM2EtY2MyZjVi
NjM3YmNjLzA0NmU5MWIyOWMzZWZmNmEyZmI2ZTM3OWI1YzY4MmQ2NjUzMjlmNGIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lZDMyMzlhMy1jNmExLTRkZmItYmQzYS1jYzJm
NWI2MzdiY2MvNGRhMjRmOTVmOWUxNDAwOWVhZGY2NDE0MWRjOWE4MDNmZWNlNDY1
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi2t1DANBgkqhkiG9w0BAQsFAAOCAQEAUCFsMA28SGC2QMbd
StyNU6qZNkTmOcjHpWSc1yr860sacLuard4LAolSH/ZblThiRMCFevrm+6Puh//U
8YWUHwL6MDrla4uTyRra/B5hKbFILk3IF7KXBq0IIiviiQez4kWBR3PXPirWlpSV
q6G4Xp4RtEGeLu65Ha2wJ+6e4xMBQYRbDykvetK7bon2HkGVRDFox5i6vdpezPQn
hU/i+1ge04HyNWY58LzXpWd5/5ZC8et3FTeafbtutCaVH1GJp6efrwHuVHUDJnin
0Jad4mFQCjZoatAKBF/WboHnm9Vs3Xtx0GfxCdj6oPOyTPWUEKGRRz16uJdM09GW
Wgfoxg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:11 2024 by rpki-client on console-fra.rpki-client.org