Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fbfd274c-4240-49f5-97fc-0691a7968e63/4c5064c1261c0e2b1c4aa01eaa5c68f5842014e5.roa
File:                     4c5064c1261c0e2b1c4aa01eaa5c68f5842014e5.roa (raw, json)
Hash identifier:          IzcDxS0GzUNJDt2BEH8hRKs68j5JHxHvEsud1vTuFD4=
Subject key identifier:   C5:A1:9E:22:81:17:E1:DC:96:25:97:EF:11:1B:E5:AB:FA:5D:2D:BA
Certificate issuer:       /CN=916dc4971b2eb6e54e3aede8f95dbd507bde921b
Certificate serial:       0A308A
Authority key identifier: 65:CD:F0:35:9B:09:96:A9:65:7A:30:44:B9:87:D0:30:A9:E0:87:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/916dc4971b2eb6e54e3aede8f95dbd507bde921b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fbfd274c-4240-49f5-97fc-0691a7968e63/4c5064c1261c0e2b1c4aa01eaa5c68f5842014e5.roa
Signing time:             Wed 24 Mar 2021 14:46:33 +0000
ROA not before:           Wed 24 Mar 2021 14:46:33 +0000
ROA not after:            Tue 24 Mar 2026 14:46:33 +0000
asID:                     264637
IP address blocks:        45.185.30.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 667786 (0xa308a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=916dc4971b2eb6e54e3aede8f95dbd507bde921b
        Validity
            Not Before: Mar 24 14:46:33 2021 GMT
            Not After : Mar 24 14:46:33 2026 GMT
        Subject: CN=4c5064c1261c0e2b1c4aa01eaa5c68f5842014e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7d:7a:29:0e:e9:b4:ba:ea:a7:28:bb:d8:d5:
                    e9:fe:c2:61:ab:99:34:23:e7:ac:fe:4b:77:42:af:
                    3b:30:f4:43:60:a9:8c:03:64:14:82:f6:8c:6d:b8:
                    ac:eb:ed:78:bc:27:55:f7:86:18:1a:64:9a:f3:23:
                    f6:5b:8e:71:ee:a8:e5:fd:27:78:72:7e:df:6b:e2:
                    81:ab:b2:13:47:f8:ec:87:45:d9:44:ee:5a:c5:24:
                    4e:8e:6c:24:8d:2a:df:44:af:a0:df:02:8e:3b:41:
                    01:29:01:22:f8:d2:4a:2c:f8:54:12:75:d0:60:30:
                    64:2e:04:08:d6:67:da:84:0f:21:90:54:b8:c5:51:
                    b5:81:98:d5:3f:ce:56:5b:ca:30:cd:43:41:55:c0:
                    32:ae:64:61:9e:83:a3:21:f3:9c:50:d7:1c:b7:92:
                    7b:c1:d0:20:41:8a:cf:88:5b:51:8a:cf:e0:af:1d:
                    64:71:df:19:97:5c:59:25:a1:87:f1:6b:2e:24:3a:
                    2b:f2:fb:5e:b6:78:c8:b3:88:58:d2:1c:1d:2d:74:
                    d6:ef:09:9f:b5:ff:a7:ca:52:c2:08:ad:03:ae:86:
                    46:d7:54:47:56:96:1a:4c:1d:0d:9e:54:5e:82:b1:
                    68:aa:46:2c:0b:6a:6c:85:f5:80:90:56:66:af:7b:
                    0f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A1:9E:22:81:17:E1:DC:96:25:97:EF:11:1B:E5:AB:FA:5D:2D:BA
            X509v3 Authority Key Identifier:
                keyid:65:CD:F0:35:9B:09:96:A9:65:7A:30:44:B9:87:D0:30:A9:E0:87:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/916dc4971b2eb6e54e3aede8f95dbd507bde921b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fbfd274c-4240-49f5-97fc-0691a7968e63/4c5064c1261c0e2b1c4aa01eaa5c68f5842014e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fbfd274c-4240-49f5-97fc-0691a7968e63/916dc4971b2eb6e54e3aede8f95dbd507bde921b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:ad:61:42:b2:96:7f:2c:60:80:ab:c3:09:db:76:b8:9a:e9:
         dd:1a:8f:cc:ea:d9:ef:75:27:fb:a3:d8:1e:7d:37:fb:b8:fc:
         be:a1:fd:7e:73:20:9f:73:57:c0:ab:1e:05:68:d6:fd:8b:98:
         a1:46:95:05:1e:0b:c4:2c:68:17:f1:8d:ea:6d:f3:df:a5:97:
         39:ba:b1:3e:06:65:6a:ee:35:a2:97:dc:2a:fe:44:5c:61:49:
         e7:7a:3a:6f:ba:c4:dc:a8:94:b6:46:53:26:a5:db:56:26:6f:
         31:1d:f3:f8:a4:2f:4d:6a:69:85:0d:2b:6a:c7:28:e4:a4:76:
         6e:ce:6e:fb:c3:b5:a6:a1:ac:84:30:cb:c7:cb:88:9b:00:98:
         86:34:f5:3b:ba:45:85:fe:5d:07:c8:99:ea:a1:32:26:3d:19:
         ce:aa:79:c9:b8:c9:15:57:4f:ac:98:8f:9a:72:c9:4f:e3:df:
         ba:9d:fe:96:28:bd:f8:f8:87:d6:25:d1:96:5e:a3:88:32:cc:
         19:de:39:2a:61:b2:6a:de:84:26:64:b4:ba:bf:f2:a6:53:98:
         46:3c:85:a0:59:24:f5:57:60:03:60:5b:42:45:cc:f8:34:a2:
         4b:60:a9:fa:6f:17:78:18:f5:bc:b2:d7:92:ef:50:1d:26:ba:
         a7:83:ea:74
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDCjCKMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDkx
NmRjNDk3MWIyZWI2ZTU0ZTNhZWRlOGY5NWRiZDUwN2JkZTkyMWIwHhcNMjEwMzI0
MTQ0NjMzWhcNMjYwMzI0MTQ0NjMzWjAzMTEwLwYDVQQDEyg0YzUwNjRjMTI2MWMw
ZTJiMWM0YWEwMWVhYTVjNjhmNTg0MjAxNGU1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAo316KQ7ptLrqpyi72NXp/sJhq5k0I+es/kt3Qq87MPRDYKmM
A2QUgvaMbbis6+14vCdV94YYGmSa8yP2W45x7qjl/Sd4cn7fa+KBq7ITR/jsh0XZ
RO5axSROjmwkjSrfRK+g3wKOO0EBKQEi+NJKLPhUEnXQYDBkLgQI1mfahA8hkFS4
xVG1gZjVP85WW8owzUNBVcAyrmRhnoOjIfOcUNcct5J7wdAgQYrPiFtRis/grx1k
cd8Zl1xZJaGH8WsuJDor8vtetnjIs4hY0hwdLXTW7wmftf+nylLCCK0DroZG11RH
VpYaTB0NnlRegrFoqkYsC2pshfWAkFZmr3sP/QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFMWhniKBF+HcliWX7xEb5av6XS26MB8GA1UdIwQYMBaAFGXN8DWbCZapZXow
RLmH0DCp4IfSMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTE2ZGM0
OTcxYjJlYjZlNTRlM2FlZGU4Zjk1ZGJkNTA3YmRlOTIxYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZmJmZDI3NGMtNDI0MC00OWY1LTk3ZmMtMDY5MWE3
OTY4ZTYzLzRjNTA2NGMxMjYxYzBlMmIxYzRhYTAxZWFhNWM2OGY1ODQyMDE0ZTUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mYmZkMjc0Yy00MjQwLTQ5ZjUtOTdmYy0wNjkx
YTc5NjhlNjMvOTE2ZGM0OTcxYjJlYjZlNTRlM2FlZGU4Zjk1ZGJkNTA3YmRlOTIx
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC25HjANBgkqhkiG9w0BAQsFAAOCAQEAJ61hQrKWfyxggKvD
Cdt2uJrp3RqPzOrZ73Un+6PYHn03+7j8vqH9fnMgn3NXwKseBWjW/YuYoUaVBR4L
xCxoF/GN6m3z36WXObqxPgZlau41opfcKv5EXGFJ53o6b7rE3KiUtkZTJqXbViZv
MR3z+KQvTWpphQ0rasco5KR2bs5u+8O1pqGshDDLx8uImwCYhjT1O7pFhf5dB8iZ
6qEyJj0Zzqp5ybjJFVdPrJiPmnLJT+Pfup3+lii9+PiH1iXRll6jiDLMGd45KmGy
at6EJmS0ur/yplOYRjyFoFkk9VdgA2BbQkXM+DSiS2Cp+m8XeBj1vLLXku9QHSa6
p4PqdA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org