Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f0bf68af-dd7d-4179-b477-6f66f34ace24/a4f6684316d974bb0544687e4e2aefb9d5962114.roa
File:                     a4f6684316d974bb0544687e4e2aefb9d5962114.roa (raw, json)
Hash identifier:          Ch5FFlHC5cDNMQ4xQdLmmcObqosdQFn6ztWMb526Qxg=
Subject key identifier:   21:7A:D4:C1:F7:10:1B:A7:7C:FD:2D:4E:83:8F:9C:54:0A:DB:F2:55
Certificate issuer:       /CN=ebb017c1df077b19e8bccbd657ed63e5ed1e37df
Certificate serial:       05DD
Authority key identifier: 58:8E:67:62:FD:A5:70:B4:A7:29:B9:1A:7B:04:84:BF:EC:AB:2A:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ebb017c1df077b19e8bccbd657ed63e5ed1e37df.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f0bf68af-dd7d-4179-b477-6f66f34ace24/a4f6684316d974bb0544687e4e2aefb9d5962114.roa
Signing time:             Wed 30 Jun 2021 17:51:42 +0000
ROA not before:           Wed 30 Jun 2021 03:00:00 +0000
ROA not after:            Fri 30 Jun 2023 03:00:00 +0000
asID:                     52449
IP address blocks:        45.6.48.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1501 (0x5dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebb017c1df077b19e8bccbd657ed63e5ed1e37df
        Validity
            Not Before: Jun 30 03:00:00 2021 GMT
            Not After : Jun 30 03:00:00 2023 GMT
        Subject: CN=a4f6684316d974bb0544687e4e2aefb9d5962114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:80:13:4a:0c:f6:2b:cc:eb:82:26:3b:d1:41:
                    a9:6b:41:85:7c:3b:82:d8:4a:2b:6c:78:3e:27:d9:
                    7f:1e:ff:3f:28:8b:df:7e:79:a9:ab:8f:32:63:7b:
                    50:83:a8:a3:d4:3f:0b:12:50:b3:2b:0c:68:91:b4:
                    e7:7f:2b:aa:88:05:99:2e:59:fe:31:a5:76:38:84:
                    de:6c:c8:90:90:ec:a0:1f:e3:24:b9:d8:35:a1:75:
                    ab:ee:68:46:dc:2e:b7:ae:bd:7d:a4:b9:ed:c8:42:
                    a5:7a:41:2d:91:cd:6f:ce:0b:4b:77:99:ee:58:6b:
                    06:1b:1e:2e:50:23:4d:51:1d:93:e2:4a:8a:e1:97:
                    cf:e7:9a:82:15:24:c3:66:e3:df:59:38:59:30:d7:
                    e3:96:49:73:12:41:ed:5f:59:5d:1b:a4:3b:5c:d2:
                    5d:80:00:58:96:d7:15:eb:d2:76:a7:4a:ac:00:45:
                    4c:be:78:5a:23:cc:ca:b2:f6:72:51:da:24:74:d4:
                    76:5b:10:ce:a0:b8:0a:8b:eb:f6:c7:25:98:a9:84:
                    fe:d8:ed:27:09:79:76:be:50:2e:a9:2c:5a:3e:81:
                    2a:75:6a:22:cd:67:3c:8a:10:fd:60:1c:7c:41:2d:
                    02:70:96:c5:2d:bf:98:e1:b8:65:2d:82:bb:19:49:
                    ac:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:7A:D4:C1:F7:10:1B:A7:7C:FD:2D:4E:83:8F:9C:54:0A:DB:F2:55
            X509v3 Authority Key Identifier:
                keyid:58:8E:67:62:FD:A5:70:B4:A7:29:B9:1A:7B:04:84:BF:EC:AB:2A:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ebb017c1df077b19e8bccbd657ed63e5ed1e37df.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f0bf68af-dd7d-4179-b477-6f66f34ace24/a4f6684316d974bb0544687e4e2aefb9d5962114.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f0bf68af-dd7d-4179-b477-6f66f34ace24/ebb017c1df077b19e8bccbd657ed63e5ed1e37df.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:40:63:9b:e8:e1:90:e6:26:5b:bb:b1:86:78:00:f5:3f:0d:
         99:d9:0e:35:3b:d2:ec:2d:82:87:8c:e4:47:89:f0:c7:76:4e:
         2e:4f:ed:bf:e8:1e:66:b9:44:f9:79:39:6a:35:c0:4c:36:11:
         a5:00:9f:78:aa:0a:fc:a7:6e:e4:d0:0b:13:b8:a0:d6:6c:bd:
         9e:1a:d6:25:89:34:34:48:8e:2a:ff:9c:eb:b0:bd:82:df:19:
         14:8d:7d:c0:9c:13:d2:e7:10:a5:0e:a6:d8:d0:c3:e2:7d:f5:
         b6:ce:5b:d9:4a:48:79:7d:b4:57:1d:19:b3:7b:f3:76:e0:c7:
         85:f7:90:3c:66:40:f9:fc:00:1c:c6:4f:e5:d0:8c:a7:88:13:
         31:d8:da:13:d9:a2:80:d4:1a:33:95:80:7b:be:72:54:75:c5:
         ec:de:62:a8:c1:6c:3f:c2:b1:51:f2:bc:8a:0c:59:bc:51:68:
         e6:98:14:0d:15:88:97:3c:59:aa:86:84:1c:df:c1:94:f2:36:
         12:a6:22:03:6d:f6:f2:51:a5:a9:41:6a:b2:c3:de:7c:09:aa:
         36:7e:3c:a9:4a:a3:8f:63:43:03:c8:a6:15:4f:82:44:b0:00:
         db:e7:09:7a:aa:58:02:05:73:a8:c7:93:b9:bf:6e:f1:24:0f:
         34:40:56:0a
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICBd0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoZWJi
MDE3YzFkZjA3N2IxOWU4YmNjYmQ2NTdlZDYzZTVlZDFlMzdkZjAeFw0yMTA2MzAw
MzAwMDBaFw0yMzA2MzAwMzAwMDBaMDMxMTAvBgNVBAMTKGE0ZjY2ODQzMTZkOTc0
YmIwNTQ0Njg3ZTRlMmFlZmI5ZDU5NjIxMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCcgBNKDPYrzOuCJjvRQalrQYV8O4LYSitseD4n2X8e/z8oi99+
eamrjzJje1CDqKPUPwsSULMrDGiRtOd/K6qIBZkuWf4xpXY4hN5syJCQ7KAf4yS5
2DWhdavuaEbcLreuvX2kue3IQqV6QS2RzW/OC0t3me5YawYbHi5QI01RHZPiSorh
l8/nmoIVJMNm499ZOFkw1+OWSXMSQe1fWV0bpDtc0l2AAFiW1xXr0nanSqwARUy+
eFojzMqy9nJR2iR01HZbEM6guAqL6/bHJZiphP7Y7ScJeXa+UC6pLFo+gSp1aiLN
ZzyKEP1gHHxBLQJwlsUtv5jhuGUtgrsZSaytAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUIXrUwfcQG6d8/S1Og4+cVArb8lUwHwYDVR0jBBgwFoAUWI5nYv2lcLSnKbka
ewSEv+yrKtMwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9lYmIwMTdj
MWRmMDc3YjE5ZThiY2NiZDY1N2VkNjNlNWVkMWUzN2RmLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9mMGJmNjhhZi1kZDdkLTQxNzktYjQ3Ny02ZjY2ZjM0
YWNlMjQvYTRmNjY4NDMxNmQ5NzRiYjA1NDQ2ODdlNGUyYWVmYjlkNTk2MjExNC5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2YwYmY2OGFmLWRkN2QtNDE3OS1iNDc3LTZmNjZm
MzRhY2UyNC9lYmIwMTdjMWRmMDc3YjE5ZThiY2NiZDY1N2VkNjNlNWVkMWUzN2Rm
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQCLQYwMA0GCSqGSIb3DQEBCwUAA4IBAQB/QGOb6OGQ5iZbu7GG
eAD1Pw2Z2Q41O9LsLYKHjORHifDHdk4uT+2/6B5muUT5eTlqNcBMNhGlAJ94qgr8
p27k0AsTuKDWbL2eGtYliTQ0SI4q/5zrsL2C3xkUjX3AnBPS5xClDqbY0MPiffW2
zlvZSkh5fbRXHRmze/N24MeF95A8ZkD5/AAcxk/l0IyniBMx2NoT2aKA1BozlYB7
vnJUdcXs3mKowWw/wrFR8ryKDFm8UWjmmBQNFYiXPFmqhoQc38GU8jYSpiIDbfby
UaWpQWqyw958Cao2fjypSqOPY0MDyKYVT4JEsADb5wl6qlgCBXOox5O5v27xJA80
QFYK
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-fra.rpki-client.org