Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f29e18ad-e195-45ef-be92-88e7194884df/bd17831fedb1b586ced21921114e3c2d2b19450e.roa
File:                     bd17831fedb1b586ced21921114e3c2d2b19450e.roa (raw, json)
Hash identifier:          k/14qoGOkvWtn5Ic1mRQm0CwBI1cO0KwWU33X5iqgII=
Subject key identifier:   A5:F5:BC:EF:3F:A1:A5:CA:1D:5C:C2:63:DE:AC:4E:F3:9C:A3:64:E9
Certificate issuer:       /CN=f02a84420e5b011e20166eecfe35fb948df48f47
Certificate serial:       03D485
Authority key identifier: 89:9C:98:0D:48:C3:75:81:2B:0B:16:D3:8D:E5:48:C1:93:B0:20:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f02a84420e5b011e20166eecfe35fb948df48f47.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f29e18ad-e195-45ef-be92-88e7194884df/bd17831fedb1b586ced21921114e3c2d2b19450e.roa
Signing time:             Tue 31 Oct 2023 12:59:16 +0000
ROA not before:           Tue 31 Oct 2023 12:59:15 +0000
ROA not after:            Fri 31 Oct 2025 12:59:15 +0000
asID:                     263756
IP address blocks:        45.188.212.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251013 (0x3d485)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f02a84420e5b011e20166eecfe35fb948df48f47
        Validity
            Not Before: Oct 31 12:59:15 2023 GMT
            Not After : Oct 31 12:59:15 2025 GMT
        Subject: CN=bd17831fedb1b586ced21921114e3c2d2b19450e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9e:a8:07:90:9d:ee:8e:5c:7b:67:ba:c5:a3:
                    0d:7f:22:23:29:2b:01:16:76:3e:71:59:29:58:06:
                    cc:7b:a4:fa:4f:97:3b:3f:b7:9b:ff:ab:d4:b0:a9:
                    3c:42:be:ad:da:d7:7b:bd:0c:49:e9:db:b3:76:6c:
                    aa:34:91:68:95:13:e2:98:39:d0:d7:69:5e:fb:cc:
                    61:f8:86:18:d5:ee:72:ac:1e:20:18:88:44:9c:d5:
                    37:61:2e:2a:13:ec:81:c1:1d:ef:23:6a:cf:70:2f:
                    aa:08:21:27:ff:42:97:55:cc:d8:44:f7:96:e1:d9:
                    fc:af:28:81:0a:f7:8f:66:3f:27:ca:c9:19:83:91:
                    82:04:49:7f:43:9d:44:fe:29:9d:b8:ef:f1:50:24:
                    0b:c4:17:64:ce:d5:c7:67:2b:fb:4e:7b:4b:f0:1b:
                    74:5a:27:e2:fe:79:c1:47:39:4d:f6:82:0f:a5:e7:
                    c1:b9:a6:38:f4:94:39:36:5f:18:a9:c8:73:cb:de:
                    b4:0e:de:82:ab:3c:85:72:d5:c8:f3:94:64:c7:b5:
                    a8:54:06:d7:28:9d:96:d7:3e:ee:a1:a5:e7:96:40:
                    dc:71:9d:96:a2:e4:66:b9:71:2c:7f:73:da:a3:db:
                    4c:9c:91:7a:e9:54:b4:f6:02:8b:e6:15:d7:c2:77:
                    e5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F5:BC:EF:3F:A1:A5:CA:1D:5C:C2:63:DE:AC:4E:F3:9C:A3:64:E9
            X509v3 Authority Key Identifier:
                keyid:89:9C:98:0D:48:C3:75:81:2B:0B:16:D3:8D:E5:48:C1:93:B0:20:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f02a84420e5b011e20166eecfe35fb948df48f47.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f29e18ad-e195-45ef-be92-88e7194884df/bd17831fedb1b586ced21921114e3c2d2b19450e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f29e18ad-e195-45ef-be92-88e7194884df/f02a84420e5b011e20166eecfe35fb948df48f47.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:bd:72:68:ae:c2:fd:ad:1e:bc:f8:df:c5:7f:9e:54:f7:f1:
         17:2f:d5:ca:47:d8:49:61:5b:b5:3a:2e:25:e8:d2:a7:12:4f:
         c4:77:3b:3d:87:ec:dd:e5:04:72:39:6f:fc:5d:f5:4c:71:49:
         76:43:56:57:e0:a9:35:79:55:a1:f6:fb:ad:e6:77:fe:ab:c4:
         3b:d7:e1:90:1e:43:e7:0d:41:23:8a:c7:b1:67:5a:68:ab:da:
         24:f1:d3:69:74:8f:0f:64:6a:ec:d1:8f:ae:ea:dc:14:dd:c8:
         55:54:7f:07:46:11:cd:bc:cd:d0:23:3b:04:4f:d1:cf:e8:b9:
         b8:f8:1d:be:14:de:19:31:b4:37:08:35:2d:ce:7e:8a:37:d6:
         72:2a:16:82:8b:3b:2a:0f:7e:eb:71:30:e0:8a:46:a5:55:cb:
         16:75:83:89:2f:28:5f:c3:c6:0c:b9:ee:3c:cb:ae:9e:56:1b:
         9b:f0:84:74:42:d3:74:14:59:31:2a:34:01:c1:18:d1:9f:d9:
         b4:b2:4f:50:4f:e7:eb:0f:0d:b8:9b:36:b8:7b:81:3c:f8:c1:
         8d:8c:62:30:ff:41:73:39:75:dd:c3:15:2d:40:b1:fe:7a:a7:
         7c:f5:80:9c:79:ae:17:f5:78:f3:1c:97:a9:eb:a8:92:ec:d9:
         45:4f:b4:f9
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDA9SFMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGYw
MmE4NDQyMGU1YjAxMWUyMDE2NmVlY2ZlMzVmYjk0OGRmNDhmNDcwHhcNMjMxMDMx
MTI1OTE1WhcNMjUxMDMxMTI1OTE1WjAzMTEwLwYDVQQDEyhiZDE3ODMxZmVkYjFi
NTg2Y2VkMjE5MjExMTRlM2MyZDJiMTk0NTBlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAi56oB5Cd7o5ce2e6xaMNfyIjKSsBFnY+cVkpWAbMe6T6T5c7
P7eb/6vUsKk8Qr6t2td7vQxJ6duzdmyqNJFolRPimDnQ12le+8xh+IYY1e5yrB4g
GIhEnNU3YS4qE+yBwR3vI2rPcC+qCCEn/0KXVczYRPeW4dn8ryiBCvePZj8nyskZ
g5GCBEl/Q51E/imduO/xUCQLxBdkztXHZyv7TntL8Bt0Wifi/nnBRzlN9oIPpefB
uaY49JQ5Nl8Yqchzy960Dt6CqzyFctXI85Rkx7WoVAbXKJ2W1z7uoaXnlkDccZ2W
ouRmuXEsf3Pao9tMnJF66VS09gKL5hXXwnflVQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFKX1vO8/oaXKHVzCY96sTvOco2TpMB8GA1UdIwQYMBaAFImcmA1Iw3WBKwsW
043lSMGTsCCJMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjAyYTg0
NDIwZTViMDExZTIwMTY2ZWVjZmUzNWZiOTQ4ZGY0OGY0Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjI5ZTE4YWQtZTE5NS00NWVmLWJlOTItODhlNzE5
NDg4NGRmL2JkMTc4MzFmZWRiMWI1ODZjZWQyMTkyMTExNGUzYzJkMmIxOTQ1MGUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mMjllMThhZC1lMTk1LTQ1ZWYtYmU5Mi04OGU3
MTk0ODg0ZGYvZjAyYTg0NDIwZTViMDExZTIwMTY2ZWVjZmUzNWZiOTQ4ZGY0OGY0
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC281DANBgkqhkiG9w0BAQsFAAOCAQEALr1yaK7C/a0evPjf
xX+eVPfxFy/VykfYSWFbtTouJejSpxJPxHc7PYfs3eUEcjlv/F31THFJdkNWV+Cp
NXlVofb7reZ3/qvEO9fhkB5D5w1BI4rHsWdaaKvaJPHTaXSPD2Rq7NGPrurcFN3I
VVR/B0YRzbzN0CM7BE/Rz+i5uPgdvhTeGTG0Nwg1Lc5+ijfWcioWgos7Kg9+63Ew
4IpGpVXLFnWDiS8oX8PGDLnuPMuunlYbm/CEdELTdBRZMSo0AcEY0Z/ZtLJPUE/n
6w8NuJs2uHuBPPjBjYxiMP9Bczl13cMVLUCx/nqnfPWAnHmuF/V48xyXqeuokuzZ
RU+0+Q==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org