Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f922e89e-787f-4eed-bd71-463605a83fd2/b6e43da4c1554818b0854280f00c7b6677950fd1.roa
File:                     b6e43da4c1554818b0854280f00c7b6677950fd1.roa (raw, json)
Hash identifier:          0F3rv0iRvTe2pV+tb6SeICu9IFRAC24fsWkPiz0iyxs=
Subject key identifier:   27:01:4F:B6:B7:1F:E9:2C:53:64:D8:2B:DD:60:07:EC:7C:E4:0A:DA
Certificate issuer:       /CN=8f8928f693cae2152db68b3f0f8d2832228b50c4
Certificate serial:       08135C
Authority key identifier: E7:AC:F1:9D:5C:A5:ED:B0:DA:1F:95:67:BE:F2:83:F2:2F:38:B2:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f8928f693cae2152db68b3f0f8d2832228b50c4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f922e89e-787f-4eed-bd71-463605a83fd2/b6e43da4c1554818b0854280f00c7b6677950fd1.roa
Signing time:             Wed 24 Mar 2021 14:29:44 +0000
ROA not before:           Wed 24 Mar 2021 14:29:44 +0000
ROA not after:            Tue 24 Mar 2026 14:29:44 +0000
asID:                     266898
IP address blocks:        45.162.100.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 529244 (0x8135c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f8928f693cae2152db68b3f0f8d2832228b50c4
        Validity
            Not Before: Mar 24 14:29:44 2021 GMT
            Not After : Mar 24 14:29:44 2026 GMT
        Subject: CN=b6e43da4c1554818b0854280f00c7b6677950fd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:79:28:a9:43:b7:75:fd:fc:50:19:b1:10:ef:
                    06:90:4e:7b:fb:fa:85:23:59:1a:23:e7:07:eb:ae:
                    ca:c0:f7:e8:13:58:9b:29:c0:5f:97:32:d9:9d:ff:
                    d9:17:04:b1:39:36:60:93:b6:d3:28:2c:28:44:14:
                    71:ea:1f:29:a8:22:5e:2e:40:60:31:7a:bd:df:e9:
                    6b:16:1a:78:bb:09:86:94:de:da:3d:2c:76:22:f8:
                    c7:94:cd:7f:77:28:a0:a6:3e:26:90:61:bd:ad:13:
                    be:5f:d9:51:ff:a7:71:9a:fd:23:1e:32:1b:95:f6:
                    f6:5d:32:9d:86:8f:21:1d:05:a2:c3:c2:57:12:ec:
                    a0:70:fc:e3:0c:b4:02:c1:ff:f8:38:47:23:53:45:
                    a9:8b:8b:84:05:33:d4:6b:e6:ef:43:84:b7:4d:5c:
                    8a:d2:0e:dd:d4:2c:c0:52:7b:49:eb:08:e5:cb:29:
                    73:1e:66:03:a4:c4:1e:54:0b:5b:95:71:61:fd:3f:
                    07:94:6b:66:23:72:ae:3c:d4:2c:c2:b3:c3:62:ea:
                    3f:48:f2:a4:f2:2b:d6:d8:e8:9e:2a:52:c9:d1:98:
                    e4:40:6f:1e:c4:f3:13:ea:c0:94:20:e4:1f:b7:b3:
                    64:8a:22:ca:f2:35:39:2b:ea:a7:fb:a1:65:09:54:
                    f2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:01:4F:B6:B7:1F:E9:2C:53:64:D8:2B:DD:60:07:EC:7C:E4:0A:DA
            X509v3 Authority Key Identifier:
                keyid:E7:AC:F1:9D:5C:A5:ED:B0:DA:1F:95:67:BE:F2:83:F2:2F:38:B2:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f8928f693cae2152db68b3f0f8d2832228b50c4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f922e89e-787f-4eed-bd71-463605a83fd2/b6e43da4c1554818b0854280f00c7b6677950fd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f922e89e-787f-4eed-bd71-463605a83fd2/8f8928f693cae2152db68b3f0f8d2832228b50c4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:c8:c7:c6:ba:dc:81:d5:33:5d:1c:e1:4f:d9:e3:88:35:22:
         5c:46:ce:85:56:ed:71:4d:08:53:54:dc:fe:d5:eb:cc:64:cb:
         30:47:aa:89:b5:aa:1f:4e:d6:a1:b2:50:72:7c:6d:d5:d5:90:
         6c:b0:29:d5:16:b7:6e:0c:66:94:17:81:0b:bf:03:47:6f:3b:
         13:77:41:7b:cf:68:48:59:eb:9d:68:b9:c7:dd:82:47:98:d9:
         84:90:ff:3e:55:a8:7a:77:ee:84:a9:df:2e:16:b5:bb:f6:fa:
         cb:04:c7:c9:c9:63:c4:5d:fe:a9:7f:e4:2b:aa:62:33:7e:68:
         90:fb:b0:9c:f0:45:ae:67:b0:b7:39:30:87:14:7e:a7:2b:2a:
         af:c6:87:0e:5a:4e:fa:bb:a7:20:f4:03:ff:e5:37:a0:39:b9:
         a3:ac:eb:c5:5c:71:e5:ff:10:e8:a9:97:c5:1b:bf:1e:e1:50:
         a6:f8:15:22:1f:fa:02:c1:46:a9:8b:4b:c9:27:3f:8b:af:a0:
         13:1f:95:41:fe:32:a4:38:23:e9:96:80:85:7c:d8:7a:9f:a8:
         98:13:c4:86:6c:dc:21:6c:13:61:b7:54:c4:98:19:05:41:f3:
         09:6e:96:3f:00:eb:fc:f8:ad:26:6f:b1:a1:5f:10:6b:4b:bd:
         2c:2f:c9:de
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDCBNcMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhm
ODkyOGY2OTNjYWUyMTUyZGI2OGIzZjBmOGQyODMyMjI4YjUwYzQwHhcNMjEwMzI0
MTQyOTQ0WhcNMjYwMzI0MTQyOTQ0WjAzMTEwLwYDVQQDEyhiNmU0M2RhNGMxNTU0
ODE4YjA4NTQyODBmMDBjN2I2Njc3OTUwZmQxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAz3koqUO3df38UBmxEO8GkE57+/qFI1kaI+cH667KwPfoE1ib
KcBflzLZnf/ZFwSxOTZgk7bTKCwoRBRx6h8pqCJeLkBgMXq93+lrFhp4uwmGlN7a
PSx2IvjHlM1/dyigpj4mkGG9rRO+X9lR/6dxmv0jHjIblfb2XTKdho8hHQWiw8JX
EuygcPzjDLQCwf/4OEcjU0Wpi4uEBTPUa+bvQ4S3TVyK0g7d1CzAUntJ6wjlyylz
HmYDpMQeVAtblXFh/T8HlGtmI3KuPNQswrPDYuo/SPKk8ivW2OieKlLJ0ZjkQG8e
xPMT6sCUIOQft7NkiiLK8jU5K+qn+6FlCVTyJQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFCcBT7a3H+ksU2TYK91gB+x85AraMB8GA1UdIwQYMBaAFOes8Z1cpe2w2h+V
Z77yg/IvOLLgMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOGY4OTI4
ZjY5M2NhZTIxNTJkYjY4YjNmMGY4ZDI4MzIyMjhiNTBjNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjkyMmU4OWUtNzg3Zi00ZWVkLWJkNzEtNDYzNjA1
YTgzZmQyL2I2ZTQzZGE0YzE1NTQ4MThiMDg1NDI4MGYwMGM3YjY2Nzc5NTBmZDEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mOTIyZTg5ZS03ODdmLTRlZWQtYmQ3MS00NjM2
MDVhODNmZDIvOGY4OTI4ZjY5M2NhZTIxNTJkYjY4YjNmMGY4ZDI4MzIyMjhiNTBj
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi2iZDANBgkqhkiG9w0BAQsFAAOCAQEApcjHxrrcgdUzXRzh
T9njiDUiXEbOhVbtcU0IU1Tc/tXrzGTLMEeqibWqH07WobJQcnxt1dWQbLAp1Ra3
bgxmlBeBC78DR287E3dBe89oSFnrnWi5x92CR5jZhJD/PlWoenfuhKnfLha1u/b6
ywTHycljxF3+qX/kK6piM35okPuwnPBFrmewtzkwhxR+pysqr8aHDlpO+runIPQD
/+U3oDm5o6zrxVxx5f8Q6KmXxRu/HuFQpvgVIh/6AsFGqYtLySc/i6+gEx+VQf4y
pDgj6ZaAhXzYep+omBPEhmzcIWwTYbdUxJgZBUHzCW6WPwDr/PitJm+xoV8Qa0u9
LC/J3g==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:53 2024 by rpki-client on console-ams.rpki-client.org