Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f719ec2f-1f7e-44c3-8629-5688d74e16ea/477ee191c9f166ec24316c114d1560643bc21cb4.roa
File:                     477ee191c9f166ec24316c114d1560643bc21cb4.roa (raw, json)
Hash identifier:          xbHKxWKsvaH8yX5+npJTJhiMJXFq2M1GxtzUMxkB6To=
Subject key identifier:   A8:BA:A0:18:38:04:83:63:FB:46:B5:3B:87:2A:4C:F6:58:58:E2:2F
Certificate issuer:       /CN=a5925846ddd27521ce64527a50820075bbf1e5b7
Certificate serial:       1EFF76
Authority key identifier: 77:E6:D8:1F:38:23:AD:63:AF:9B:02:A5:F4:0C:A6:7C:6B:E2:B1:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5925846ddd27521ce64527a50820075bbf1e5b7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f719ec2f-1f7e-44c3-8629-5688d74e16ea/477ee191c9f166ec24316c114d1560643bc21cb4.roa
Signing time:             Wed 10 Jan 2024 20:14:41 +0000
ROA not before:           Wed 10 Jan 2024 20:14:41 +0000
ROA not after:            Sat 10 Jan 2026 20:14:41 +0000
asID:                     267798
IP address blocks:        45.181.44.0/22 maxlen: 22
                          45.181.44.0/24 maxlen: 24
                          45.181.45.0/24 maxlen: 24
                          45.181.46.0/24 maxlen: 24
                          45.181.47.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2031478 (0x1eff76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5925846ddd27521ce64527a50820075bbf1e5b7
        Validity
            Not Before: Jan 10 20:14:41 2024 GMT
            Not After : Jan 10 20:14:41 2026 GMT
        Subject: CN=477ee191c9f166ec24316c114d1560643bc21cb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ab:fd:7e:76:69:5c:16:17:9e:04:38:0d:0e:
                    fb:97:0d:67:6b:76:df:41:24:2e:9b:0d:08:79:7f:
                    a5:15:51:96:58:3c:19:59:76:fb:9d:27:5b:9d:e1:
                    4e:4f:7f:96:a2:03:5f:05:fc:a7:ea:87:5c:bb:83:
                    1a:f5:a8:57:59:96:95:9c:40:bb:ce:0a:5f:6a:96:
                    81:46:d5:6e:dd:14:d2:de:0e:55:31:66:03:47:1f:
                    4b:35:66:bd:c8:c6:e6:e6:a3:a2:35:5e:a7:a6:c5:
                    b6:5c:20:81:bc:f3:11:1d:a7:b9:6d:e8:53:e1:38:
                    21:fe:20:53:24:7e:03:df:b2:ab:a6:39:97:32:9a:
                    c0:af:18:8e:35:a3:35:fc:b2:58:b8:f5:7a:89:4b:
                    fb:db:fa:e4:1f:5d:26:42:e1:67:15:da:08:08:8d:
                    26:9a:68:ce:06:f0:5e:74:02:a4:a3:3e:d5:20:d6:
                    f7:4c:de:68:cb:ad:0a:56:32:a4:93:76:3b:22:4d:
                    6b:f6:b8:81:f8:36:9b:54:64:c1:0b:7f:46:5d:4e:
                    87:39:6a:dd:4c:a0:0f:0a:53:6c:14:7c:1d:f3:63:
                    67:87:53:2e:83:b4:8b:51:81:fc:d8:3f:52:68:88:
                    07:b6:96:f0:61:c1:5c:bc:47:58:b1:fe:88:66:21:
                    3f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:BA:A0:18:38:04:83:63:FB:46:B5:3B:87:2A:4C:F6:58:58:E2:2F
            X509v3 Authority Key Identifier:
                keyid:77:E6:D8:1F:38:23:AD:63:AF:9B:02:A5:F4:0C:A6:7C:6B:E2:B1:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5925846ddd27521ce64527a50820075bbf1e5b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f719ec2f-1f7e-44c3-8629-5688d74e16ea/477ee191c9f166ec24316c114d1560643bc21cb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f719ec2f-1f7e-44c3-8629-5688d74e16ea/a5925846ddd27521ce64527a50820075bbf1e5b7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:45:94:6b:5c:39:26:47:fa:65:fb:47:56:ed:47:07:05:2f:
         7f:85:09:76:09:8f:25:fa:77:bf:03:80:60:cd:4b:a0:fc:91:
         97:c7:27:85:c4:ec:62:78:0c:25:d8:79:0e:63:b8:86:67:25:
         9e:1e:1b:40:36:81:21:09:6f:e4:3b:16:16:9f:31:9b:de:02:
         a7:5c:2f:93:9e:2d:61:67:8f:89:54:a2:d0:f5:b9:4f:62:6a:
         78:3e:83:80:b1:5b:7b:8c:09:30:97:d1:03:f6:71:49:dc:0e:
         42:d0:fd:f6:bb:ff:47:5e:d7:0e:65:ae:20:1e:46:f2:76:9f:
         12:93:a1:79:61:84:5f:78:0f:e2:61:40:fa:e6:cc:bc:55:76:
         ab:f7:36:56:5b:e5:c5:02:67:85:c1:fb:1b:e6:20:dc:79:20:
         8a:9a:1a:05:69:b4:61:47:e5:d4:03:82:6c:7e:08:ff:ea:8d:
         b8:13:e5:b9:34:62:fc:d7:22:56:80:54:fe:a1:66:d2:19:ac:
         5d:b9:e9:9a:2c:d2:b4:ec:87:93:4b:12:61:07:8e:b1:60:5d:
         4d:e7:c2:fd:56:d9:3e:6f:7b:fe:f5:f7:68:c8:c8:8d:f2:14:
         b7:c9:9c:ce:af:b1:62:31:e9:1c:09:83:5f:bd:96:5b:0f:45:
         29:1c:ee:fc
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHv92MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE1
OTI1ODQ2ZGRkMjc1MjFjZTY0NTI3YTUwODIwMDc1YmJmMWU1YjcwHhcNMjQwMTEw
MjAxNDQxWhcNMjYwMTEwMjAxNDQxWjAzMTEwLwYDVQQDEyg0NzdlZTE5MWM5ZjE2
NmVjMjQzMTZjMTE0ZDE1NjA2NDNiYzIxY2I0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAw6v9fnZpXBYXngQ4DQ77lw1na3bfQSQumw0IeX+lFVGWWDwZ
WXb7nSdbneFOT3+WogNfBfyn6odcu4Ma9ahXWZaVnEC7zgpfapaBRtVu3RTS3g5V
MWYDRx9LNWa9yMbm5qOiNV6npsW2XCCBvPMRHae5behT4Tgh/iBTJH4D37KrpjmX
MprArxiONaM1/LJYuPV6iUv72/rkH10mQuFnFdoICI0mmmjOBvBedAKkoz7VINb3
TN5oy60KVjKkk3Y7Ik1r9riB+DabVGTBC39GXU6HOWrdTKAPClNsFHwd82Nnh1Mu
g7SLUYH82D9SaIgHtpbwYcFcvEdYsf6IZiE/iwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFKi6oBg4BINj+0a1O4cqTPZYWOIvMB8GA1UdIwQYMBaAFHfm2B84I61jr5sC
pfQMpnxr4rH5MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTU5MjU4
NDZkZGQyNzUyMWNlNjQ1MjdhNTA4MjAwNzViYmYxZTViNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjcxOWVjMmYtMWY3ZS00NGMzLTg2MjktNTY4OGQ3
NGUxNmVhLzQ3N2VlMTkxYzlmMTY2ZWMyNDMxNmMxMTRkMTU2MDY0M2JjMjFjYjQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mNzE5ZWMyZi0xZjdlLTQ0YzMtODYyOS01Njg4
ZDc0ZTE2ZWEvYTU5MjU4NDZkZGQyNzUyMWNlNjQ1MjdhNTA4MjAwNzViYmYxZTVi
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi21LDANBgkqhkiG9w0BAQsFAAOCAQEAXkWUa1w5Jkf6ZftH
Vu1HBwUvf4UJdgmPJfp3vwOAYM1LoPyRl8cnhcTsYngMJdh5DmO4hmclnh4bQDaB
IQlv5DsWFp8xm94Cp1wvk54tYWePiVSi0PW5T2JqeD6DgLFbe4wJMJfRA/ZxSdwO
QtD99rv/R17XDmWuIB5G8nafEpOheWGEX3gP4mFA+ubMvFV2q/c2VlvlxQJnhcH7
G+Yg3HkgipoaBWm0YUfl1AOCbH4I/+qNuBPluTRi/NciVoBU/qFm0hmsXbnpmizS
tOyHk0sSYQeOsWBdTefC/VbZPm97/vX3aMjIjfIUt8mczq+xYjHpHAmDX72WWw9F
KRzu/A==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org