Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fe5c44a6-7346-43f5-b1f8-b0816a59dca4/9d2efe61c94e7205fe513d863f45bdf8f79849d1.roa
File:                     9d2efe61c94e7205fe513d863f45bdf8f79849d1.roa (raw, json)
Hash identifier:          BpxPsRv1LEn49X4nKyo9ldymH2e8M1ZMqCjbIPohao0=
Subject key identifier:   82:39:B5:5C:0C:D7:B8:10:2B:45:73:85:E2:C9:5D:5E:E1:0F:96:BF
Certificate issuer:       /CN=99cefdf2a759423052c164a14f1fbf628a4a34dc
Certificate serial:       12DBAF
Authority key identifier: 23:B0:91:D0:D7:A0:6F:2D:B0:DA:6B:60:6B:26:4B:42:AB:33:4B:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/99cefdf2a759423052c164a14f1fbf628a4a34dc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fe5c44a6-7346-43f5-b1f8-b0816a59dca4/9d2efe61c94e7205fe513d863f45bdf8f79849d1.roa
Signing time:             Mon 25 Oct 2021 22:42:27 +0000
ROA not before:           Mon 25 Oct 2021 03:00:00 +0000
ROA not after:            Wed 25 Oct 2023 03:00:00 +0000
asID:                     266886
IP address blocks:        45.228.64.0/24 maxlen: 24
                          45.228.65.0/24 maxlen: 24
                          45.228.66.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1235887 (0x12dbaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99cefdf2a759423052c164a14f1fbf628a4a34dc
        Validity
            Not Before: Oct 25 03:00:00 2021 GMT
            Not After : Oct 25 03:00:00 2023 GMT
        Subject: CN=9d2efe61c94e7205fe513d863f45bdf8f79849d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c8:e8:f4:b9:74:40:63:71:6f:fd:27:c3:60:
                    7a:6d:d9:09:bf:1f:29:d9:7e:30:c8:23:df:d0:8d:
                    82:8a:c8:d9:7d:be:08:36:60:be:5f:56:5b:66:80:
                    19:42:c0:fd:60:9a:3b:e7:25:77:05:09:42:6e:11:
                    bd:d4:ba:8f:0f:cb:28:63:28:8c:49:9a:00:d5:57:
                    0d:5a:c0:14:f0:12:b5:cb:84:48:15:ff:47:14:6f:
                    86:bc:ab:18:bc:aa:be:82:b9:2e:15:fd:00:f1:52:
                    db:62:48:7d:be:59:15:1b:f4:06:36:34:87:be:1f:
                    d5:4b:11:9a:f4:a9:aa:f7:4d:cb:f9:7f:3d:8b:8c:
                    d7:90:fa:df:db:85:ad:28:02:64:ae:9b:4f:c7:c2:
                    d3:05:b7:65:d3:43:f9:26:f7:a6:a4:dc:14:7a:09:
                    df:9a:c8:b1:70:af:0b:04:0c:f0:63:02:e3:12:15:
                    a1:44:6e:6a:ae:9e:00:cb:5c:bd:35:40:d3:3b:ef:
                    86:99:87:56:9b:9e:da:5a:af:7f:04:35:47:9d:c6:
                    db:98:15:60:53:92:20:05:97:be:4b:13:43:50:a6:
                    7a:d1:cc:7f:ee:0e:bd:1c:5a:0a:f6:6b:73:29:8e:
                    5e:7c:84:84:9c:f1:06:ff:cf:37:78:4b:6c:95:97:
                    a0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:39:B5:5C:0C:D7:B8:10:2B:45:73:85:E2:C9:5D:5E:E1:0F:96:BF
            X509v3 Authority Key Identifier:
                keyid:23:B0:91:D0:D7:A0:6F:2D:B0:DA:6B:60:6B:26:4B:42:AB:33:4B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/99cefdf2a759423052c164a14f1fbf628a4a34dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fe5c44a6-7346-43f5-b1f8-b0816a59dca4/9d2efe61c94e7205fe513d863f45bdf8f79849d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fe5c44a6-7346-43f5-b1f8-b0816a59dca4/99cefdf2a759423052c164a14f1fbf628a4a34dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.64.0-45.228.66.255

    Signature Algorithm: sha256WithRSAEncryption
         6a:1b:ee:22:14:d9:ad:38:1c:17:2e:bc:6c:ae:ce:fd:8e:08:
         22:8e:be:24:0c:f4:fd:74:1f:6d:c8:eb:aa:43:a9:52:03:de:
         d2:cf:53:59:04:08:28:35:59:15:dd:d1:2a:8e:e6:83:a7:ce:
         63:e3:07:58:f7:a5:a0:43:d0:5d:fe:c7:53:1d:e3:bf:68:3e:
         1f:45:2b:9c:71:ea:b9:d1:7b:ef:be:cf:1f:e9:ef:9d:c6:54:
         06:c6:3f:8b:fd:26:fb:af:9b:af:f1:b4:c6:9b:d9:2e:8a:a7:
         28:63:58:33:a2:59:8d:ad:8e:5e:36:b1:c9:b0:28:9b:21:17:
         03:e9:44:7e:c7:e6:97:dd:0f:53:28:ca:0c:b1:0d:a6:0b:2d:
         4a:89:55:0a:42:ec:88:50:ba:45:4c:a4:00:02:57:03:57:2d:
         d5:d5:bc:b8:89:e1:53:b0:76:96:ba:8c:3e:0f:92:e6:28:ea:
         e3:ed:75:ec:57:52:87:20:3e:1a:5e:cf:bd:fe:48:d4:fc:8e:
         a9:35:dd:89:05:ea:cf:cc:ac:ed:4a:9a:78:3b:f1:3f:2b:b3:
         ef:18:e2:fe:e4:8c:76:ea:73:93:10:06:a3:cf:f9:cf:ce:8f:
         4e:2c:e1:1f:62:da:a6:89:1f:96:7f:42:48:a5:a2:98:07:4b:
         e9:46:e4:6a
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDEtuvMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk5
Y2VmZGYyYTc1OTQyMzA1MmMxNjRhMTRmMWZiZjYyOGE0YTM0ZGMwHhcNMjExMDI1
MDMwMDAwWhcNMjMxMDI1MDMwMDAwWjAzMTEwLwYDVQQDEyg5ZDJlZmU2MWM5NGU3
MjA1ZmU1MTNkODYzZjQ1YmRmOGY3OTg0OWQxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxcjo9Ll0QGNxb/0nw2B6bdkJvx8p2X4wyCPf0I2CisjZfb4I
NmC+X1ZbZoAZQsD9YJo75yV3BQlCbhG91LqPD8soYyiMSZoA1VcNWsAU8BK1y4RI
Ff9HFG+GvKsYvKq+grkuFf0A8VLbYkh9vlkVG/QGNjSHvh/VSxGa9Kmq903L+X89
i4zXkPrf24WtKAJkrptPx8LTBbdl00P5JvempNwUegnfmsixcK8LBAzwYwLjEhWh
RG5qrp4Ay1y9NUDTO++GmYdWm57aWq9/BDVHncbbmBVgU5IgBZe+SxNDUKZ60cx/
7g69HFoK9mtzKY5efISEnPEG/883eEtslZeglwIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFII5tVwM17gQK0VzheLJXV7hD5a/MB8GA1UdIwQYMBaAFCOwkdDXoG8tsNpr
YGsmS0KrM0tOMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTljZWZk
ZjJhNzU5NDIzMDUyYzE2NGExNGYxZmJmNjI4YTRhMzRkYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZmU1YzQ0YTYtNzM0Ni00M2Y1LWIxZjgtYjA4MTZh
NTlkY2E0LzlkMmVmZTYxYzk0ZTcyMDVmZTUxM2Q4NjNmNDViZGY4Zjc5ODQ5ZDEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mZTVjNDRhNi03MzQ2LTQzZjUtYjFmOC1iMDgx
NmE1OWRjYTQvOTljZWZkZjJhNzU5NDIzMDUyYzE2NGExNGYxZmJmNjI4YTRhMzRk
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQGLeRAAwQALeRCMA0GCSqGSIb3DQEBCwUAA4IBAQBqG+4i
FNmtOBwXLrxsrs79jggijr4kDPT9dB9tyOuqQ6lSA97Sz1NZBAgoNVkV3dEqjuaD
p85j4wdY96WgQ9Bd/sdTHeO/aD4fRSucceq50Xvvvs8f6e+dxlQGxj+L/Sb7r5uv
8bTGm9kuiqcoY1gzolmNrY5eNrHJsCibIRcD6UR+x+aX3Q9TKMoMsQ2mCy1KiVUK
QuyIULpFTKQAAlcDVy3V1by4ieFTsHaWuow+D5LmKOrj7XXsV1KHID4aXs+9/kjU
/I6pNd2JBerPzKztSpp4O/E/K7PvGOL+5Ix26nOTEAajz/nPzo9OLOEfYtqmiR+W
f0JIpaKYB0vpRuRq
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:59 2023 by rpki-client on console-ams.rpki-client.org