Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f0f902bc-375f-4a20-8a11-fddade1087e4/e40da19db1722e0325f1d34c59ad6c0ba4c07782.roa
File:                     e40da19db1722e0325f1d34c59ad6c0ba4c07782.roa (raw, json)
Hash identifier:          3Y4Gy0lQM4VDTl5F2KbvlI8+OoqXuwO6avoYkkSXggc=
Subject key identifier:   D7:EC:5D:1C:AF:CC:4D:1A:73:32:74:39:C1:F3:06:39:A0:3F:22:25
Certificate issuer:       /CN=ef2e68f970c76de5428fef89a267a117e2763fcd
Certificate serial:       0B8129
Authority key identifier: 5A:69:8B:B2:96:83:9D:70:63:82:99:6D:75:91:A7:D4:E0:6D:D7:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef2e68f970c76de5428fef89a267a117e2763fcd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f0f902bc-375f-4a20-8a11-fddade1087e4/e40da19db1722e0325f1d34c59ad6c0ba4c07782.roa
Signing time:             Wed 24 Mar 2021 14:33:18 +0000
ROA not before:           Wed 24 Mar 2021 14:33:18 +0000
ROA not after:            Tue 24 Mar 2026 14:33:18 +0000
asID:                     267859
IP address blocks:        45.176.116.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 753961 (0xb8129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef2e68f970c76de5428fef89a267a117e2763fcd
        Validity
            Not Before: Mar 24 14:33:18 2021 GMT
            Not After : Mar 24 14:33:18 2026 GMT
        Subject: CN=e40da19db1722e0325f1d34c59ad6c0ba4c07782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bc:2e:05:37:5d:18:1a:7b:85:0a:08:4d:15:
                    bd:10:9a:87:dd:04:90:c9:68:23:a3:9a:38:55:ed:
                    60:65:7b:d7:80:06:74:b4:32:df:76:34:1d:0e:7d:
                    fe:32:96:07:b0:66:9b:d9:af:84:3c:a5:71:35:8f:
                    59:71:89:ae:78:de:b4:96:e6:e8:52:b0:eb:89:f0:
                    80:a9:21:ed:ab:0b:d3:0d:c3:b1:11:99:76:8c:c0:
                    e0:ee:e9:5b:66:af:22:f0:4d:e1:fa:63:52:ea:1f:
                    f3:35:c5:7d:da:5b:12:19:3a:33:00:f6:eb:7f:47:
                    3c:37:1b:c4:44:d9:ba:5b:f5:ea:11:b0:2c:6e:23:
                    04:10:40:a8:ca:ae:47:0b:1c:4f:33:ba:e9:a9:76:
                    ad:2a:19:f4:59:32:9d:07:ab:3f:c2:21:7e:b5:93:
                    92:80:62:f4:b6:63:e4:f1:2c:e0:cc:7c:7a:bd:56:
                    e5:d2:3c:e4:bd:58:db:1d:6e:c1:37:52:6c:b9:47:
                    59:eb:f6:c3:42:11:2c:e1:cb:0c:f1:38:81:b0:2f:
                    92:eb:a9:6f:02:15:ea:b3:2d:11:7d:5b:3e:2a:f6:
                    c3:55:90:d0:a8:64:20:e3:0a:55:8c:b7:a8:6d:ab:
                    5b:c9:71:e9:11:25:ff:21:09:d7:8a:c3:64:1d:ed:
                    fe:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:EC:5D:1C:AF:CC:4D:1A:73:32:74:39:C1:F3:06:39:A0:3F:22:25
            X509v3 Authority Key Identifier:
                keyid:5A:69:8B:B2:96:83:9D:70:63:82:99:6D:75:91:A7:D4:E0:6D:D7:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef2e68f970c76de5428fef89a267a117e2763fcd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f0f902bc-375f-4a20-8a11-fddade1087e4/e40da19db1722e0325f1d34c59ad6c0ba4c07782.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f0f902bc-375f-4a20-8a11-fddade1087e4/ef2e68f970c76de5428fef89a267a117e2763fcd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:98:34:b9:e0:78:67:b5:3d:7d:0f:e3:9a:d6:dc:e9:62:4c:
         9e:75:f2:17:88:b8:7b:e1:23:e4:d4:1e:9d:30:d2:bd:d9:b7:
         83:72:f3:13:76:c7:5f:0c:a2:72:08:52:7b:8c:90:24:38:d8:
         67:a3:2e:c8:72:36:13:aa:03:56:aa:5a:ff:4b:5c:c6:b6:12:
         4c:3e:de:76:19:eb:c7:34:ee:59:48:7d:21:58:be:04:3d:15:
         b3:ea:da:dc:81:42:5d:8d:30:e5:01:7d:8f:d5:76:dc:78:75:
         61:a6:64:a0:06:24:90:ef:07:8c:0d:d1:d4:52:58:4d:7a:c8:
         ec:b3:ff:20:8d:eb:e6:12:88:b4:a0:99:52:72:b0:2c:d5:c7:
         47:28:5d:f7:f8:09:20:b8:86:2c:e3:f6:0a:10:21:f0:2c:96:
         5e:d4:52:98:46:32:83:10:6e:26:06:dc:16:d0:64:c5:e7:eb:
         fe:51:e6:9b:43:00:78:3c:05:0e:22:8e:74:c8:46:a6:89:c1:
         bf:f0:fb:0d:b1:2f:5a:e5:70:cf:65:35:4f:2c:b9:f0:f9:00:
         59:d4:ad:33:a7:6a:78:48:72:3f:94:96:40:7b:54:0d:2e:fc:
         10:2b:7e:6f:d3:3d:1e:2a:1a:50:37:cb:03:6b:a2:65:bd:7d:
         56:86:3d:59
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDC4EpMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGVm
MmU2OGY5NzBjNzZkZTU0MjhmZWY4OWEyNjdhMTE3ZTI3NjNmY2QwHhcNMjEwMzI0
MTQzMzE4WhcNMjYwMzI0MTQzMzE4WjAzMTEwLwYDVQQDEyhlNDBkYTE5ZGIxNzIy
ZTAzMjVmMWQzNGM1OWFkNmMwYmE0YzA3NzgyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAurwuBTddGBp7hQoITRW9EJqH3QSQyWgjo5o4Ve1gZXvXgAZ0
tDLfdjQdDn3+MpYHsGab2a+EPKVxNY9ZcYmueN60luboUrDrifCAqSHtqwvTDcOx
EZl2jMDg7ulbZq8i8E3h+mNS6h/zNcV92lsSGTozAPbrf0c8NxvERNm6W/XqEbAs
biMEEECoyq5HCxxPM7rpqXatKhn0WTKdB6s/wiF+tZOSgGL0tmPk8SzgzHx6vVbl
0jzkvVjbHW7BN1JsuUdZ6/bDQhEs4csM8TiBsC+S66lvAhXqsy0RfVs+KvbDVZDQ
qGQg4wpVjLeobatbyXHpESX/IQnXisNkHe3+aQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNfsXRyvzE0aczJ0OcHzBjmgPyIlMB8GA1UdIwQYMBaAFFppi7KWg51wY4KZ
bXWRp9TgbdccMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZWYyZTY4
Zjk3MGM3NmRlNTQyOGZlZjg5YTI2N2ExMTdlMjc2M2ZjZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjBmOTAyYmMtMzc1Zi00YTIwLThhMTEtZmRkYWRl
MTA4N2U0L2U0MGRhMTlkYjE3MjJlMDMyNWYxZDM0YzU5YWQ2YzBiYTRjMDc3ODIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mMGY5MDJiYy0zNzVmLTRhMjAtOGExMS1mZGRh
ZGUxMDg3ZTQvZWYyZTY4Zjk3MGM3NmRlNTQyOGZlZjg5YTI2N2ExMTdlMjc2M2Zj
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi2wdDANBgkqhkiG9w0BAQsFAAOCAQEAG5g0ueB4Z7U9fQ/j
mtbc6WJMnnXyF4i4e+Ej5NQenTDSvdm3g3LzE3bHXwyicghSe4yQJDjYZ6MuyHI2
E6oDVqpa/0tcxrYSTD7edhnrxzTuWUh9IVi+BD0Vs+ra3IFCXY0w5QF9j9V23Hh1
YaZkoAYkkO8HjA3R1FJYTXrI7LP/II3r5hKItKCZUnKwLNXHRyhd9/gJILiGLOP2
ChAh8CyWXtRSmEYygxBuJgbcFtBkxefr/lHmm0MAeDwFDiKOdMhGponBv/D7DbEv
WuVwz2U1Tyy58PkAWdStM6dqeEhyP5SWQHtUDS78ECt+b9M9HioaUDfLA2uiZb19
VoY9WQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:53 2024 by rpki-client on console-ams.rpki-client.org