Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/eff30749-fdf0-466e-8ec5-0e8556d826bc/aeec798a12d4d44224a540fd15e083c830175129.roa
File:                     aeec798a12d4d44224a540fd15e083c830175129.roa (raw, json)
Hash identifier:          ugYRq90tSXBDYAwXo5lSZRlRpYmDHUcmwpXb1GT3OCs=
Subject key identifier:   6C:23:1A:3C:48:D8:9C:A7:69:B9:5D:BB:6A:6A:65:D1:23:DD:31:6F
Certificate issuer:       /CN=fc6091a171764c5580404ef6c3191061870281ff
Certificate serial:       11D626
Authority key identifier: 2E:35:E9:47:CF:2E:58:C0:F7:90:02:B1:A8:3B:8D:93:20:8E:B6:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc6091a171764c5580404ef6c3191061870281ff.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/eff30749-fdf0-466e-8ec5-0e8556d826bc/aeec798a12d4d44224a540fd15e083c830175129.roa
Signing time:             Sat 15 Apr 2023 08:30:02 +0000
ROA not before:           Fri 14 Apr 2023 08:30:02 +0000
ROA not after:            Sun 13 Apr 2025 08:30:02 +0000
asID:                     267878
IP address blocks:        45.175.149.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1168934 (0x11d626)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc6091a171764c5580404ef6c3191061870281ff
        Validity
            Not Before: Apr 14 08:30:02 2023 GMT
            Not After : Apr 13 08:30:02 2025 GMT
        Subject: CN=aeec798a12d4d44224a540fd15e083c830175129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ad:d3:11:ff:d5:b1:e1:c7:45:d5:a0:71:1d:
                    24:45:ad:89:4f:7c:0e:69:67:b9:fb:63:ba:f6:34:
                    eb:a4:4e:45:9f:fc:1a:1b:60:cb:3a:08:30:72:18:
                    00:b4:1c:8e:e9:05:9d:03:b8:6f:92:9a:a8:c4:25:
                    32:eb:44:10:83:4d:73:d2:20:b5:b6:8b:1d:eb:8a:
                    70:60:5d:24:a4:88:51:46:3f:00:7a:ed:c7:8a:dd:
                    b8:ee:ae:d9:9e:6c:f6:42:0d:86:6a:74:c2:1e:0b:
                    e1:06:e8:9d:c0:5d:25:83:ab:9e:21:66:51:9d:7c:
                    42:c6:e1:37:16:6c:f5:34:09:f2:eb:7e:72:ba:39:
                    7b:59:8e:2d:1d:0a:ba:ca:1b:1d:e4:17:6e:3b:9d:
                    8d:ee:f1:f6:62:4e:ff:30:d0:0b:2a:4f:43:4d:93:
                    74:1d:43:18:a2:d0:16:b3:a7:b5:b0:b6:ef:51:80:
                    49:cb:5b:77:7f:bc:fe:a9:86:30:82:bb:8c:02:26:
                    ae:57:b4:aa:ee:2c:9c:2e:d5:42:11:0e:fe:db:76:
                    b3:ca:7d:ec:bc:08:73:ca:c1:e3:bc:6f:65:01:4c:
                    06:ee:21:ff:4b:02:33:d2:d8:54:07:e3:37:06:9f:
                    71:6a:5d:2a:ee:ec:5c:3a:7b:16:6e:43:40:a7:55:
                    bb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:23:1A:3C:48:D8:9C:A7:69:B9:5D:BB:6A:6A:65:D1:23:DD:31:6F
            X509v3 Authority Key Identifier:
                keyid:2E:35:E9:47:CF:2E:58:C0:F7:90:02:B1:A8:3B:8D:93:20:8E:B6:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc6091a171764c5580404ef6c3191061870281ff.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/eff30749-fdf0-466e-8ec5-0e8556d826bc/aeec798a12d4d44224a540fd15e083c830175129.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/eff30749-fdf0-466e-8ec5-0e8556d826bc/fc6091a171764c5580404ef6c3191061870281ff.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:7a:2d:89:f0:f0:f4:85:a0:74:98:98:58:1d:75:34:41:02:
         08:d5:f6:db:7b:48:d5:7f:24:a1:af:72:4b:b6:72:c6:8a:76:
         d8:5a:8d:98:c0:c5:67:a1:c1:e4:aa:f4:b7:fa:00:6e:b2:77:
         2b:76:dc:3d:00:65:dc:54:d9:f6:99:c8:f4:00:43:d6:3c:f5:
         2a:d9:2e:79:a7:bf:31:0e:b8:94:c4:4f:a7:ab:6a:89:8c:f5:
         15:c9:38:22:83:e8:13:27:8b:cb:ed:20:eb:61:ac:a9:b9:f1:
         ec:6f:eb:b3:37:21:1d:49:f7:57:55:de:94:8f:71:e9:b0:c2:
         8f:f8:52:ea:2d:68:29:fa:23:2f:3e:ac:b8:fc:08:dc:2a:95:
         29:81:69:ba:30:a3:48:e2:89:6b:03:a6:80:3e:1b:79:2c:9b:
         bb:0d:d7:f1:3a:27:e7:84:f9:f8:ba:5e:e5:30:31:00:48:59:
         94:e8:54:c1:04:4e:eb:37:30:d6:45:83:97:22:89:f6:b7:e8:
         74:63:72:ae:5b:33:af:56:e6:0a:45:d8:f6:48:19:21:ba:f3:
         7a:a8:30:09:57:eb:93:fd:4a:da:00:f7:c8:7a:18:0d:a8:0a:
         64:5e:6e:41:fc:af:9c:9c:03:87:bd:35:6a:7c:1a:a4:be:1b:
         12:c1:f2:e3
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEdYmMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGZj
NjA5MWExNzE3NjRjNTU4MDQwNGVmNmMzMTkxMDYxODcwMjgxZmYwHhcNMjMwNDE0
MDgzMDAyWhcNMjUwNDEzMDgzMDAyWjAzMTEwLwYDVQQDEyhhZWVjNzk4YTEyZDRk
NDQyMjRhNTQwZmQxNWUwODNjODMwMTc1MTI5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwK3TEf/VseHHRdWgcR0kRa2JT3wOaWe5+2O69jTrpE5Fn/wa
G2DLOggwchgAtByO6QWdA7hvkpqoxCUy60QQg01z0iC1tosd64pwYF0kpIhRRj8A
eu3Hit247q7Znmz2Qg2GanTCHgvhBuidwF0lg6ueIWZRnXxCxuE3Fmz1NAny635y
ujl7WY4tHQq6yhsd5BduO52N7vH2Yk7/MNALKk9DTZN0HUMYotAWs6e1sLbvUYBJ
y1t3f7z+qYYwgruMAiauV7Sq7iycLtVCEQ7+23azyn3svAhzysHjvG9lAUwG7iH/
SwIz0thUB+M3Bp9xal0q7uxcOnsWbkNAp1W7WQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGwjGjxI2Jynabldu2pqZdEj3TFvMB8GA1UdIwQYMBaAFC416UfPLljA95AC
sag7jZMgjrYjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmM2MDkx
YTE3MTc2NGM1NTgwNDA0ZWY2YzMxOTEwNjE4NzAyODFmZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWZmMzA3NDktZmRmMC00NjZlLThlYzUtMGU4NTU2
ZDgyNmJjL2FlZWM3OThhMTJkNGQ0NDIyNGE1NDBmZDE1ZTA4M2M4MzAxNzUxMjku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lZmYzMDc0OS1mZGYwLTQ2NmUtOGVjNS0wZTg1
NTZkODI2YmMvZmM2MDkxYTE3MTc2NGM1NTgwNDA0ZWY2YzMxOTEwNjE4NzAyODFm
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC2vlTANBgkqhkiG9w0BAQsFAAOCAQEAUXotifDw9IWgdJiY
WB11NEECCNX223tI1X8koa9yS7Zyxop22FqNmMDFZ6HB5Kr0t/oAbrJ3K3bcPQBl
3FTZ9pnI9ABD1jz1Ktkueae/MQ64lMRPp6tqiYz1Fck4IoPoEyeLy+0g62Gsqbnx
7G/rszchHUn3V1XelI9x6bDCj/hS6i1oKfojLz6suPwI3CqVKYFpujCjSOKJawOm
gD4beSybuw3X8Ton54T5+Lpe5TAxAEhZlOhUwQRO6zcw1kWDlyKJ9rfodGNyrlsz
r1bmCkXY9kgZIbrzeqgwCVfrk/1K2gD3yHoYDagKZF5uQfyvnJwDh701anwapL4b
EsHy4w==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org