Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f4d6c2c3-65c4-4fd5-aaff-e39ab37c780b/d3790bdd94b8b29f398ca66f161685bab33795d1.roa
File:                     d3790bdd94b8b29f398ca66f161685bab33795d1.roa (raw, json)
Hash identifier:          vTo302Frbg5Ba7j/wkihQTyxSxs1X5fL3zWpoO11X9k=
Subject key identifier:   1A:6C:75:BF:02:D9:BD:23:CC:9E:07:42:C1:FD:8A:2F:A9:BD:7E:8E
Certificate issuer:       /CN=90727e944be40b95d0b417719399933d286f880f
Certificate serial:       0C873C
Authority key identifier: B5:9C:50:BF:59:E5:5A:AA:96:BC:1D:2B:7F:81:FA:E4:95:D3:C7:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90727e944be40b95d0b417719399933d286f880f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f4d6c2c3-65c4-4fd5-aaff-e39ab37c780b/d3790bdd94b8b29f398ca66f161685bab33795d1.roa
Signing time:             Wed 24 Mar 2021 14:31:22 +0000
ROA not before:           Wed 24 Mar 2021 14:31:22 +0000
ROA not after:            Tue 24 Mar 2026 14:31:22 +0000
asID:                     27983
IP address blocks:        45.160.196.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 821052 (0xc873c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90727e944be40b95d0b417719399933d286f880f
        Validity
            Not Before: Mar 24 14:31:22 2021 GMT
            Not After : Mar 24 14:31:22 2026 GMT
        Subject: CN=d3790bdd94b8b29f398ca66f161685bab33795d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0e:10:6c:76:6a:34:ce:8d:94:58:ce:ec:65:
                    3b:e4:4f:94:20:3f:f1:e0:55:9b:09:63:92:9a:67:
                    20:72:1e:3f:22:9d:2f:a5:e0:bb:c7:29:e0:69:6c:
                    1c:c8:7d:50:a0:97:d1:e9:ab:26:78:32:b3:7b:f4:
                    4e:bc:53:55:69:d1:3e:bf:33:2e:d7:ff:29:c5:4e:
                    34:c7:16:13:96:2d:70:ff:1f:9e:8e:b3:35:3d:71:
                    1a:c8:fe:7e:30:64:ba:ee:05:fa:df:b7:94:f3:94:
                    8d:77:65:a9:12:79:3e:8b:d8:bd:05:0b:cf:cd:54:
                    b9:20:8a:a9:32:32:3d:49:fd:b9:10:c7:d8:f1:de:
                    15:91:ed:81:ee:d9:e2:57:76:b5:1d:97:73:36:ca:
                    f8:74:bd:e9:32:72:44:0a:1c:45:c0:7f:b9:a6:34:
                    7d:31:e6:91:78:84:f8:e1:73:86:07:0c:4c:87:1a:
                    60:e4:fa:12:2d:e6:1c:11:86:c7:f0:f1:9f:53:a5:
                    52:56:f0:33:ec:e1:fb:0b:ba:d5:e0:7b:29:bd:73:
                    d7:3c:2b:bf:d4:85:c0:96:fe:6a:99:9a:04:a9:47:
                    3a:f7:41:99:98:2b:8c:4c:57:01:6e:c0:af:4f:3f:
                    15:bc:79:31:7f:eb:f0:38:29:9e:d1:ec:15:49:eb:
                    db:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:6C:75:BF:02:D9:BD:23:CC:9E:07:42:C1:FD:8A:2F:A9:BD:7E:8E
            X509v3 Authority Key Identifier:
                keyid:B5:9C:50:BF:59:E5:5A:AA:96:BC:1D:2B:7F:81:FA:E4:95:D3:C7:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90727e944be40b95d0b417719399933d286f880f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f4d6c2c3-65c4-4fd5-aaff-e39ab37c780b/d3790bdd94b8b29f398ca66f161685bab33795d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f4d6c2c3-65c4-4fd5-aaff-e39ab37c780b/90727e944be40b95d0b417719399933d286f880f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:24:e3:07:64:0c:c6:99:55:3f:78:d5:ab:89:d2:9f:ec:fe:
         f4:09:52:a3:37:67:53:3a:b6:6b:00:81:58:ea:b6:0c:1a:f9:
         62:7d:bc:ce:2f:d7:83:2a:ac:65:ee:05:5b:30:45:8d:9c:50:
         d9:57:61:2a:e7:de:74:bd:3a:e0:64:de:2b:83:73:5f:a2:16:
         57:72:72:92:1a:3e:44:ed:e7:1e:20:f2:08:f6:9b:81:23:54:
         7a:f0:ad:62:a6:77:28:dd:b2:5a:b6:69:38:1b:58:fd:83:70:
         40:e0:e1:e3:f8:37:e7:9c:94:50:c9:33:03:d8:a8:b3:4a:0c:
         2e:26:60:fe:04:4d:53:80:ce:08:8d:b3:a2:ff:bc:c4:87:a4:
         ee:17:e4:34:23:7e:39:a4:6e:cd:f6:5f:c0:69:3d:09:fd:b9:
         88:f9:3e:9d:c5:c7:db:48:9b:80:86:d5:7b:72:a2:46:55:e3:
         e6:9d:7e:bb:ef:06:16:1b:02:92:d4:ea:50:ff:97:88:96:30:
         b6:98:53:9f:b4:82:00:a6:b7:24:37:95:99:78:22:72:19:d8:
         25:fd:15:de:4d:d8:4e:93:4b:23:d4:eb:b1:5f:2a:24:97:95:
         65:4d:c1:4e:6d:21:a0:0a:ae:6f:a2:ad:ef:f4:7f:c2:2c:e7:
         8c:f1:12:f8
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDIc8MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDkw
NzI3ZTk0NGJlNDBiOTVkMGI0MTc3MTkzOTk5MzNkMjg2Zjg4MGYwHhcNMjEwMzI0
MTQzMTIyWhcNMjYwMzI0MTQzMTIyWjAzMTEwLwYDVQQDEyhkMzc5MGJkZDk0Yjhi
MjlmMzk4Y2E2NmYxNjE2ODViYWIzMzc5NWQxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlA4QbHZqNM6NlFjO7GU75E+UID/x4FWbCWOSmmcgch4/Ip0v
peC7xyngaWwcyH1QoJfR6asmeDKze/ROvFNVadE+vzMu1/8pxU40xxYTli1w/x+e
jrM1PXEayP5+MGS67gX637eU85SNd2WpEnk+i9i9BQvPzVS5IIqpMjI9Sf25EMfY
8d4Vke2B7tniV3a1HZdzNsr4dL3pMnJEChxFwH+5pjR9MeaReIT44XOGBwxMhxpg
5PoSLeYcEYbH8PGfU6VSVvAz7OH7C7rV4HspvXPXPCu/1IXAlv5qmZoEqUc690GZ
mCuMTFcBbsCvTz8VvHkxf+vwOCme0ewVSevbPQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBpsdb8C2b0jzJ4HQsH9ii+pvX6OMB8GA1UdIwQYMBaAFLWcUL9Z5Vqqlrwd
K3+B+uSV08d+MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTA3Mjdl
OTQ0YmU0MGI5NWQwYjQxNzcxOTM5OTkzM2QyODZmODgwZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjRkNmMyYzMtNjVjNC00ZmQ1LWFhZmYtZTM5YWIz
N2M3ODBiL2QzNzkwYmRkOTRiOGIyOWYzOThjYTY2ZjE2MTY4NWJhYjMzNzk1ZDEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mNGQ2YzJjMy02NWM0LTRmZDUtYWFmZi1lMzlh
YjM3Yzc4MGIvOTA3MjdlOTQ0YmU0MGI5NWQwYjQxNzcxOTM5OTkzM2QyODZmODgw
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi2gxDANBgkqhkiG9w0BAQsFAAOCAQEAFyTjB2QMxplVP3jV
q4nSn+z+9AlSozdnUzq2awCBWOq2DBr5Yn28zi/XgyqsZe4FWzBFjZxQ2VdhKufe
dL064GTeK4NzX6IWV3Jykho+RO3nHiDyCPabgSNUevCtYqZ3KN2yWrZpOBtY/YNw
QODh4/g355yUUMkzA9ios0oMLiZg/gRNU4DOCI2zov+8xIek7hfkNCN+OaRuzfZf
wGk9Cf25iPk+ncXH20ibgIbVe3KiRlXj5p1+u+8GFhsCktTqUP+XiJYwtphTn7SC
AKa3JDeVmXgichnYJf0V3k3YTpNLI9TrsV8qJJeVZU3BTm0hoAqub6Kt7/R/wizn
jPES+A==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org