Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/eff30749-fdf0-466e-8ec5-0e8556d826bc/4a96f6cc69b06ae51dd0f0c9d340a74657dfc86c.roa
File:                     4a96f6cc69b06ae51dd0f0c9d340a74657dfc86c.roa (raw, json)
Hash identifier:          wGle+P08wJC1Uu7uDNoJHIOV7Gn2eAetxT1ARrdHqHg=
Subject key identifier:   F7:E6:4C:34:A8:FF:02:1E:EA:5A:67:6A:1B:0C:BE:B9:AC:9E:4B:E9
Certificate issuer:       /CN=fc6091a171764c5580404ef6c3191061870281ff
Certificate serial:       11CE3A
Authority key identifier: 2E:35:E9:47:CF:2E:58:C0:F7:90:02:B1:A8:3B:8D:93:20:8E:B6:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc6091a171764c5580404ef6c3191061870281ff.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/eff30749-fdf0-466e-8ec5-0e8556d826bc/4a96f6cc69b06ae51dd0f0c9d340a74657dfc86c.roa
Signing time:             Sat 15 Apr 2023 08:30:00 +0000
ROA not before:           Fri 14 Apr 2023 08:30:00 +0000
ROA not after:            Sun 13 Apr 2025 08:30:00 +0000
asID:                     267878
IP address blocks:        45.175.151.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1166906 (0x11ce3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc6091a171764c5580404ef6c3191061870281ff
        Validity
            Not Before: Apr 14 08:30:00 2023 GMT
            Not After : Apr 13 08:30:00 2025 GMT
        Subject: CN=4a96f6cc69b06ae51dd0f0c9d340a74657dfc86c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b8:53:42:63:10:4d:c9:e8:c3:8a:f0:34:bb:
                    00:e9:90:f3:02:6c:39:65:4f:72:7e:ea:0a:a6:11:
                    20:70:62:0d:73:ce:6b:22:55:b8:4f:45:94:70:e4:
                    8b:9f:99:d0:4f:26:e3:42:5d:73:c0:bf:50:30:f2:
                    36:14:23:dc:4e:c2:2f:e6:f7:d2:c2:5d:dc:a6:6a:
                    af:f1:af:43:ec:23:b5:2d:dd:0e:6f:d3:7a:80:b4:
                    75:2c:f1:90:e2:34:28:c7:4d:cd:7b:95:ac:4d:c7:
                    59:60:1c:20:0e:70:59:0f:c0:2e:a2:8c:05:a2:52:
                    24:2f:ab:6c:7f:c0:00:c2:c3:d4:1c:7e:72:1f:93:
                    06:61:fd:20:38:29:a1:a4:af:db:85:ac:e0:71:02:
                    bc:b2:5e:e6:00:b1:e8:8e:f5:b4:66:d6:32:cd:56:
                    42:fa:de:79:c8:e2:9b:aa:6f:21:77:8a:08:1f:60:
                    90:ec:45:a0:9e:a7:b1:c4:69:f9:26:93:fd:be:7d:
                    f5:33:41:f9:c1:4e:1f:ac:42:a4:d5:55:d2:00:e1:
                    d7:a7:e4:a2:1b:fd:54:7f:4e:e9:0d:ff:0f:6d:52:
                    e6:eb:da:97:13:c7:cf:9e:e6:c1:bc:c4:49:e8:9a:
                    51:fd:db:51:51:7f:38:66:8b:ed:21:25:e1:83:5e:
                    88:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E6:4C:34:A8:FF:02:1E:EA:5A:67:6A:1B:0C:BE:B9:AC:9E:4B:E9
            X509v3 Authority Key Identifier:
                keyid:2E:35:E9:47:CF:2E:58:C0:F7:90:02:B1:A8:3B:8D:93:20:8E:B6:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc6091a171764c5580404ef6c3191061870281ff.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/eff30749-fdf0-466e-8ec5-0e8556d826bc/4a96f6cc69b06ae51dd0f0c9d340a74657dfc86c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/eff30749-fdf0-466e-8ec5-0e8556d826bc/fc6091a171764c5580404ef6c3191061870281ff.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:2e:0c:a3:d2:9d:32:47:8e:07:bd:12:30:73:1a:36:5b:ae:
         7e:34:ad:91:a4:7c:90:21:c0:24:c1:ac:ba:f2:31:fb:cc:e5:
         cf:d8:e8:0d:2e:a1:d1:29:c1:71:66:98:0f:48:ff:ed:ec:f9:
         fa:4f:02:5f:a2:49:1b:e1:36:95:ce:c5:aa:7f:0b:6e:81:58:
         fe:82:fa:3b:94:5e:31:f0:a0:59:4b:f5:5d:c6:b3:0e:89:ad:
         5e:92:1d:46:f9:45:9d:76:72:99:5e:c3:33:5c:8e:e8:65:f8:
         59:49:35:f0:2e:89:fb:b3:76:16:df:fa:d1:43:f0:76:37:e5:
         08:23:2d:de:b8:12:aa:0e:3c:1b:7e:e4:c5:42:31:c3:2a:f8:
         81:47:eb:0c:7b:bc:5d:67:b0:68:87:ef:3e:1a:55:9e:5b:4a:
         94:81:e7:b2:bd:ff:99:f8:9d:12:35:3e:2a:fb:fc:e9:3a:2d:
         da:bb:41:99:bc:6f:d9:c1:0f:70:68:52:8a:22:ce:19:11:38:
         a5:ae:5b:24:69:66:35:c1:5b:a8:b6:d2:09:44:5a:d2:00:22:
         2f:d1:d7:fe:fd:c1:f9:3e:02:85:f9:f6:3e:45:bf:25:a3:0c:
         c6:6c:ee:58:ea:53:0f:f2:62:09:85:ac:c8:d9:38:38:cd:f9:
         36:62:49:d2
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEc46MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGZj
NjA5MWExNzE3NjRjNTU4MDQwNGVmNmMzMTkxMDYxODcwMjgxZmYwHhcNMjMwNDE0
MDgzMDAwWhcNMjUwNDEzMDgzMDAwWjAzMTEwLwYDVQQDEyg0YTk2ZjZjYzY5YjA2
YWU1MWRkMGYwYzlkMzQwYTc0NjU3ZGZjODZjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAx7hTQmMQTcnow4rwNLsA6ZDzAmw5ZU9yfuoKphEgcGINc85r
IlW4T0WUcOSLn5nQTybjQl1zwL9QMPI2FCPcTsIv5vfSwl3cpmqv8a9D7CO1Ld0O
b9N6gLR1LPGQ4jQox03Ne5WsTcdZYBwgDnBZD8AuoowFolIkL6tsf8AAwsPUHH5y
H5MGYf0gOCmhpK/bhazgcQK8sl7mALHojvW0ZtYyzVZC+t55yOKbqm8hd4oIH2CQ
7EWgnqexxGn5JpP9vn31M0H5wU4frEKk1VXSAOHXp+SiG/1Uf07pDf8PbVLm69qX
E8fPnubBvMRJ6JpR/dtRUX84ZovtISXhg16I3wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPfmTDSo/wIe6lpnahsMvrmsnkvpMB8GA1UdIwQYMBaAFC416UfPLljA95AC
sag7jZMgjrYjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmM2MDkx
YTE3MTc2NGM1NTgwNDA0ZWY2YzMxOTEwNjE4NzAyODFmZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWZmMzA3NDktZmRmMC00NjZlLThlYzUtMGU4NTU2
ZDgyNmJjLzRhOTZmNmNjNjliMDZhZTUxZGQwZjBjOWQzNDBhNzQ2NTdkZmM4NmMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lZmYzMDc0OS1mZGYwLTQ2NmUtOGVjNS0wZTg1
NTZkODI2YmMvZmM2MDkxYTE3MTc2NGM1NTgwNDA0ZWY2YzMxOTEwNjE4NzAyODFm
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC2vlzANBgkqhkiG9w0BAQsFAAOCAQEABi4Mo9KdMkeOB70S
MHMaNluufjStkaR8kCHAJMGsuvIx+8zlz9joDS6h0SnBcWaYD0j/7ez5+k8CX6JJ
G+E2lc7Fqn8LboFY/oL6O5ReMfCgWUv1XcazDomtXpIdRvlFnXZymV7DM1yO6GX4
WUk18C6J+7N2Ft/60UPwdjflCCMt3rgSqg48G37kxUIxwyr4gUfrDHu8XWewaIfv
PhpVnltKlIHnsr3/mfidEjU+Kvv86Tot2rtBmbxv2cEPcGhSiiLOGRE4pa5bJGlm
NcFbqLbSCURa0gAiL9HX/v3B+T4Chfn2PkW/JaMMxmzuWOpTD/JiCYWsyNk4OM35
NmJJ0g==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org