Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/9a54880c1d6cfa9a219ed396150d8615cd50b598.roa
File:                     9a54880c1d6cfa9a219ed396150d8615cd50b598.roa (raw, json)
Hash identifier:          gv92Ek580CaEDHT+7Ym+GphRmEb8KP90bfvNZSp5+3I=
Subject key identifier:   C0:6B:68:64:47:CE:F3:FF:C5:09:D5:93:26:A0:FF:2A:54:F9:C9:FE
Certificate issuer:       /CN=6ff75e9cde86b5c490d171a8993267e23270787a
Certificate serial:       193FFD
Authority key identifier: 95:A6:67:0F:79:8D:EC:6E:34:2F:A0:19:BF:9B:D8:87:BA:A0:E2:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ff75e9cde86b5c490d171a8993267e23270787a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/9a54880c1d6cfa9a219ed396150d8615cd50b598.roa
Signing time:             Wed 31 Jan 2024 21:34:31 +0000
ROA not before:           Wed 31 Jan 2024 21:34:31 +0000
ROA not after:            Sat 31 Jan 2026 21:34:31 +0000
asID:                     14593
IP address blocks:        149.19.162.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1654781 (0x193ffd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ff75e9cde86b5c490d171a8993267e23270787a
        Validity
            Not Before: Jan 31 21:34:31 2024 GMT
            Not After : Jan 31 21:34:31 2026 GMT
        Subject: CN=9a54880c1d6cfa9a219ed396150d8615cd50b598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:73:05:8f:7d:97:95:30:21:26:5e:7c:05:2f:
                    37:aa:12:95:1b:8c:ce:2c:8d:5b:26:3e:fa:27:60:
                    9b:a6:0f:23:ab:96:90:25:ac:a2:ba:d8:ce:c1:30:
                    8e:50:ac:95:bf:ad:a5:b0:77:4b:a3:ef:4d:ff:73:
                    5c:d4:99:62:2f:c7:55:87:ea:88:77:11:2d:61:2a:
                    a6:b4:7b:fd:5f:57:97:ab:f6:e1:50:9d:82:15:92:
                    aa:57:78:46:4f:67:ec:60:76:cf:66:0b:9a:81:f4:
                    97:9b:8b:70:45:6a:2e:f7:e5:06:ef:ea:29:c7:b4:
                    d8:84:07:76:5b:63:92:0c:32:ce:ea:54:40:3e:02:
                    40:a3:5b:a9:cd:5b:f2:f6:f2:28:0e:bf:f4:7e:25:
                    42:60:66:2e:5b:38:fb:68:d7:6d:7e:b4:7d:4c:d3:
                    c3:6c:64:c9:ef:87:76:10:3d:05:e1:64:02:3c:1e:
                    0a:4e:67:31:46:7e:30:ef:ca:d8:d8:e9:aa:4a:61:
                    ab:23:81:96:85:69:b9:73:d4:cd:90:66:77:50:b5:
                    fd:30:7b:0a:63:b9:1c:89:2b:48:3f:14:bc:ff:9d:
                    33:87:7d:a0:cc:4c:f2:4b:2c:89:b4:4a:b2:3a:bc:
                    d9:82:e0:19:fd:23:3a:69:79:5d:30:90:07:fe:d4:
                    c6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:6B:68:64:47:CE:F3:FF:C5:09:D5:93:26:A0:FF:2A:54:F9:C9:FE
            X509v3 Authority Key Identifier:
                keyid:95:A6:67:0F:79:8D:EC:6E:34:2F:A0:19:BF:9B:D8:87:BA:A0:E2:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ff75e9cde86b5c490d171a8993267e23270787a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/9a54880c1d6cfa9a219ed396150d8615cd50b598.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/6ff75e9cde86b5c490d171a8993267e23270787a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.19.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:49:42:1d:d3:6c:b3:a3:22:24:13:a3:74:c4:51:97:81:1b:
         cc:b8:6b:ce:b8:ae:db:76:ed:f2:4e:8b:87:a8:eb:66:a7:e5:
         7e:71:00:68:30:c8:7a:85:ba:cc:01:71:80:40:7a:68:80:b4:
         42:71:b6:50:24:01:47:92:0d:e1:40:a8:f7:0e:7d:58:7f:d2:
         00:ee:cc:61:a5:19:8c:5b:4e:d8:61:39:9a:17:f4:8e:5d:a7:
         f0:6d:4c:da:c8:75:d8:d2:f2:c7:77:d4:7c:d6:1e:48:d0:e5:
         d9:2b:50:b9:97:c5:2d:62:26:10:35:d7:45:8f:bb:6f:e3:4e:
         db:79:54:b1:5d:30:8b:e3:9f:22:06:99:b6:4d:13:3e:cc:36:
         3a:a9:3f:16:d9:e5:26:a9:96:a6:af:71:ae:bf:a3:63:4d:b8:
         61:ba:c5:f6:71:1c:ec:b0:07:1c:f5:3e:49:9d:89:88:4c:03:
         fe:24:fd:1a:6f:ca:7b:ae:55:48:ad:0b:03:8e:94:91:71:52:
         91:4b:f5:49:bb:04:d7:ab:ef:93:36:53:ce:98:af:34:e6:26:
         d6:a6:20:de:5d:d9:03:70:23:d7:a3:92:1e:fd:7e:0c:81:b7:
         38:64:0f:79:f4:f6:c3:4f:a5:37:b3:2a:e2:c9:a9:db:be:03:
         b5:09:2d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:05 2024 by rpki-client on console-ams.rpki-client.org