Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/eff30749-fdf0-466e-8ec5-0e8556d826bc/731b4acf45b5da034c9ba1a4a493172e2b40cfa7.roa
File:                     731b4acf45b5da034c9ba1a4a493172e2b40cfa7.roa (raw, json)
Hash identifier:          gqLzRzRKisTUMPMGAOtrK0xLXDJ0xIPxadjLLTm1OrQ=
Subject key identifier:   53:07:13:85:D4:CD:3C:33:FF:05:A1:CC:6F:86:3A:C1:41:96:80:18
Certificate issuer:       /CN=fc6091a171764c5580404ef6c3191061870281ff
Certificate serial:       11CF24
Authority key identifier: 2E:35:E9:47:CF:2E:58:C0:F7:90:02:B1:A8:3B:8D:93:20:8E:B6:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc6091a171764c5580404ef6c3191061870281ff.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/eff30749-fdf0-466e-8ec5-0e8556d826bc/731b4acf45b5da034c9ba1a4a493172e2b40cfa7.roa
Signing time:             Sat 15 Apr 2023 08:30:01 +0000
ROA not before:           Fri 14 Apr 2023 08:30:01 +0000
ROA not after:            Sun 13 Apr 2025 08:30:01 +0000
asID:                     267878
IP address blocks:        45.175.148.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1167140 (0x11cf24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc6091a171764c5580404ef6c3191061870281ff
        Validity
            Not Before: Apr 14 08:30:01 2023 GMT
            Not After : Apr 13 08:30:01 2025 GMT
        Subject: CN=731b4acf45b5da034c9ba1a4a493172e2b40cfa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:30:a4:8c:cd:aa:82:a7:63:c3:d8:c9:84:e0:
                    9b:07:2d:0b:35:66:30:7f:76:57:10:18:7c:ff:7b:
                    76:e4:a3:89:8a:5a:05:db:2d:4b:bf:e3:75:bd:15:
                    95:24:f7:5f:68:88:3c:73:82:26:f1:bd:02:a0:f9:
                    0b:db:11:e7:3a:a4:60:2f:1b:59:51:1d:f5:78:7c:
                    44:62:af:b4:30:6d:5f:69:c2:d4:b6:08:72:75:e4:
                    4a:fa:66:67:c0:51:70:06:53:63:51:7b:fa:b4:ea:
                    00:4e:1e:1f:8a:68:a3:22:d7:42:72:a4:3e:3a:36:
                    2d:bd:e1:9e:16:f7:e2:2c:39:2c:32:5a:d8:58:66:
                    1d:ce:d0:d6:3d:98:10:e0:d2:6c:16:bb:cc:f0:c7:
                    b3:03:15:f2:88:ab:f4:2a:f9:c9:b2:a2:a9:c3:96:
                    10:b5:f2:88:23:a7:83:b6:84:68:12:91:d0:da:35:
                    95:6e:69:f9:36:95:1b:06:66:c2:83:51:0b:a8:aa:
                    cf:96:89:d3:da:48:bb:28:8e:48:33:40:2c:af:30:
                    f6:c7:ac:2b:bd:a8:f1:23:e5:88:3c:25:3e:eb:4d:
                    a8:6a:4c:5f:73:ab:5d:1a:e1:ee:66:5a:d0:f7:06:
                    6e:6f:ae:64:f0:59:62:0b:1f:3a:4c:0f:96:d8:9a:
                    43:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:07:13:85:D4:CD:3C:33:FF:05:A1:CC:6F:86:3A:C1:41:96:80:18
            X509v3 Authority Key Identifier:
                keyid:2E:35:E9:47:CF:2E:58:C0:F7:90:02:B1:A8:3B:8D:93:20:8E:B6:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc6091a171764c5580404ef6c3191061870281ff.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/eff30749-fdf0-466e-8ec5-0e8556d826bc/731b4acf45b5da034c9ba1a4a493172e2b40cfa7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/eff30749-fdf0-466e-8ec5-0e8556d826bc/fc6091a171764c5580404ef6c3191061870281ff.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:78:bc:fa:00:34:ca:48:c7:bd:38:40:13:df:84:bc:63:c5:
         a7:38:87:b2:2b:f9:ed:9f:68:fd:c8:54:79:9d:72:05:6f:b7:
         58:42:eb:1d:b0:d5:43:4c:6a:ef:00:fd:c7:7b:ae:6f:13:13:
         52:c0:d8:3b:0b:f7:9d:28:0e:5f:7d:af:13:f0:a9:2d:44:f7:
         5d:05:51:d1:ee:04:9f:93:61:9f:15:81:83:31:52:5d:a8:1e:
         48:fb:ed:6b:a8:80:14:01:04:d8:ee:1d:2e:33:6b:dc:5c:ba:
         d8:86:f9:3e:58:5b:d5:3a:5a:7d:9d:d5:99:7d:fb:49:8a:09:
         03:a2:e2:60:6a:c2:d5:33:0f:d1:f4:b3:82:55:1d:a6:c8:45:
         3a:df:78:31:91:b5:1f:ff:ae:03:ee:e4:a9:93:52:79:5e:7b:
         be:54:59:03:38:55:1f:03:42:e1:a0:a6:c6:d6:92:9b:79:48:
         ce:a1:f5:d1:64:5a:f1:c5:d8:8b:c0:76:74:95:eb:59:d7:e9:
         47:f5:99:d2:13:24:c5:25:f2:5d:85:78:97:1d:13:b1:fe:64:
         dd:b8:cd:37:b4:5c:99:2f:59:91:aa:88:48:63:9a:37:1b:58:
         1b:84:63:18:f7:96:87:f4:da:72:1a:f3:a3:c2:72:e0:78:86:
         5d:16:61:5b
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEc8kMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGZj
NjA5MWExNzE3NjRjNTU4MDQwNGVmNmMzMTkxMDYxODcwMjgxZmYwHhcNMjMwNDE0
MDgzMDAxWhcNMjUwNDEzMDgzMDAxWjAzMTEwLwYDVQQDEyg3MzFiNGFjZjQ1YjVk
YTAzNGM5YmExYTRhNDkzMTcyZTJiNDBjZmE3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuDCkjM2qgqdjw9jJhOCbBy0LNWYwf3ZXEBh8/3t25KOJiloF
2y1Lv+N1vRWVJPdfaIg8c4Im8b0CoPkL2xHnOqRgLxtZUR31eHxEYq+0MG1facLU
tghydeRK+mZnwFFwBlNjUXv6tOoATh4fimijItdCcqQ+OjYtveGeFvfiLDksMlrY
WGYdztDWPZgQ4NJsFrvM8MezAxXyiKv0KvnJsqKpw5YQtfKII6eDtoRoEpHQ2jWV
bmn5NpUbBmbCg1ELqKrPlonT2ki7KI5IM0AsrzD2x6wrvajxI+WIPCU+602oakxf
c6tdGuHuZlrQ9wZub65k8FliCx86TA+W2JpDCwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFMHE4XUzTwz/wWhzG+GOsFBloAYMB8GA1UdIwQYMBaAFC416UfPLljA95AC
sag7jZMgjrYjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmM2MDkx
YTE3MTc2NGM1NTgwNDA0ZWY2YzMxOTEwNjE4NzAyODFmZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWZmMzA3NDktZmRmMC00NjZlLThlYzUtMGU4NTU2
ZDgyNmJjLzczMWI0YWNmNDViNWRhMDM0YzliYTFhNGE0OTMxNzJlMmI0MGNmYTcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lZmYzMDc0OS1mZGYwLTQ2NmUtOGVjNS0wZTg1
NTZkODI2YmMvZmM2MDkxYTE3MTc2NGM1NTgwNDA0ZWY2YzMxOTEwNjE4NzAyODFm
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC2vlDANBgkqhkiG9w0BAQsFAAOCAQEAl3i8+gA0ykjHvThA
E9+EvGPFpziHsiv57Z9o/chUeZ1yBW+3WELrHbDVQ0xq7wD9x3uubxMTUsDYOwv3
nSgOX32vE/CpLUT3XQVR0e4En5NhnxWBgzFSXageSPvta6iAFAEE2O4dLjNr3Fy6
2Ib5Plhb1TpafZ3VmX37SYoJA6LiYGrC1TMP0fSzglUdpshFOt94MZG1H/+uA+7k
qZNSeV57vlRZAzhVHwNC4aCmxtaSm3lIzqH10WRa8cXYi8B2dJXrWdfpR/WZ0hMk
xSXyXYV4lx0Tsf5k3bjNN7RcmS9ZkaqISGOaNxtYG4RjGPeWh/Tachrzo8Jy4HiG
XRZhWw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:53 2024 by rpki-client on console-ams.rpki-client.org