Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fbd2e10b-5f34-48da-9356-80c88058e02c/4d550f635dd4d831cf8c7469b6ad97e931969301.roa
File:                     4d550f635dd4d831cf8c7469b6ad97e931969301.roa (raw, json)
Hash identifier:          VGDGZcF1hDHO7DcC6vebCTp/yDuWcJ+MBuk/Icwult4=
Subject key identifier:   F7:46:30:FC:E8:E3:98:C0:5C:89:4D:5B:7B:AF:7A:10:D0:93:9F:92
Certificate issuer:       /CN=88d44f0918975636ffb95bc864d2ead8021849e5
Certificate serial:       135C24
Authority key identifier: 60:5D:91:FC:06:B0:3E:4C:60:D5:39:0D:5E:08:E0:2A:64:C2:A8:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d44f0918975636ffb95bc864d2ead8021849e5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fbd2e10b-5f34-48da-9356-80c88058e02c/4d550f635dd4d831cf8c7469b6ad97e931969301.roa
Signing time:             Wed 01 Dec 2021 07:42:27 +0000
ROA not before:           Wed 01 Dec 2021 03:00:00 +0000
ROA not after:            Fri 01 Dec 2023 03:00:00 +0000
asID:                     262202
IP address blocks:        170.246.148.0/22 maxlen: 24
                          170.246.148.0/24 maxlen: 24
                          170.246.149.0/24 maxlen: 24
                          170.246.150.0/24 maxlen: 24
                          170.246.151.0/24 maxlen: 24
                          190.57.48.0/21 maxlen: 24
                          190.57.48.0/24 maxlen: 24
                          190.57.49.0/24 maxlen: 24
                          190.57.50.0/24 maxlen: 24
                          190.57.51.0/24 maxlen: 24
                          190.57.52.0/24 maxlen: 24
                          190.57.53.0/24 maxlen: 24
                          190.57.54.0/24 maxlen: 24
                          190.57.55.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1268772 (0x135c24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d44f0918975636ffb95bc864d2ead8021849e5
        Validity
            Not Before: Dec  1 03:00:00 2021 GMT
            Not After : Dec  1 03:00:00 2023 GMT
        Subject: CN=4d550f635dd4d831cf8c7469b6ad97e931969301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4b:a6:34:b5:41:04:61:d9:af:cb:29:17:78:
                    ff:07:a7:a5:c8:91:cc:b9:c0:0c:ed:ce:9f:7c:a5:
                    cd:9a:fe:78:65:13:94:06:44:f8:cb:1d:b2:1b:7d:
                    16:56:c5:cd:d1:2e:9f:99:6b:92:3b:c3:0a:f4:83:
                    1e:ea:d9:7d:a3:d7:62:95:49:e0:f0:71:5a:da:24:
                    0a:f0:65:ed:d9:12:5e:00:af:bf:70:c0:9d:df:5f:
                    5e:fa:b5:41:63:d3:f7:bb:d2:79:ec:50:87:6e:69:
                    dd:ad:a5:b8:67:fc:f2:9d:b9:9e:24:d8:94:16:22:
                    06:fa:00:10:b2:ad:12:b2:d5:14:74:c8:2b:f8:29:
                    ad:31:12:1a:81:16:4b:62:41:50:c1:0e:14:93:fa:
                    d4:a4:97:34:20:ac:cc:a0:b4:63:9e:91:8d:5a:33:
                    b9:cd:74:ee:bd:bf:d2:dc:3f:35:b6:1a:80:37:e8:
                    78:55:d2:29:12:af:3a:97:cc:df:b9:cd:59:4a:ee:
                    f3:a8:77:14:57:1f:8a:10:bc:dc:df:8e:d1:71:83:
                    c8:1b:28:d1:ca:50:c1:5f:40:f5:a3:f1:c8:9d:90:
                    83:d4:96:57:a5:eb:59:2d:1e:ca:be:16:70:4b:fc:
                    33:78:ef:b5:8b:95:0d:10:d9:bf:d9:76:34:24:59:
                    78:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:46:30:FC:E8:E3:98:C0:5C:89:4D:5B:7B:AF:7A:10:D0:93:9F:92
            X509v3 Authority Key Identifier:
                keyid:60:5D:91:FC:06:B0:3E:4C:60:D5:39:0D:5E:08:E0:2A:64:C2:A8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d44f0918975636ffb95bc864d2ead8021849e5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fbd2e10b-5f34-48da-9356-80c88058e02c/4d550f635dd4d831cf8c7469b6ad97e931969301.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fbd2e10b-5f34-48da-9356-80c88058e02c/88d44f0918975636ffb95bc864d2ead8021849e5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.148.0/22
                  190.57.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         38:c5:be:97:f4:25:ca:9e:9f:6d:77:a7:cd:8c:14:24:ba:ba:
         88:f9:19:fe:47:87:ec:8e:76:f6:81:53:fb:6d:d5:30:fb:87:
         c9:ba:b2:9c:96:2d:bf:4d:93:93:ec:40:1f:3e:68:84:85:65:
         18:11:61:76:68:26:39:df:75:b2:78:9f:e0:1f:39:31:6e:a2:
         69:64:40:53:76:7d:31:d6:fb:c9:90:7b:cd:7a:37:3c:ea:60:
         bb:3c:fd:5c:b2:a0:c6:39:06:b1:ea:09:1c:6e:84:97:ac:c3:
         d7:66:24:a6:2c:ed:05:47:4b:df:b3:7b:8a:9d:e6:05:1d:88:
         26:28:b8:94:da:f8:3e:68:d3:bf:cd:72:c3:9c:05:9d:14:92:
         67:14:e9:77:3d:dc:01:c2:db:c7:d3:94:0c:78:91:12:ec:26:
         84:1c:20:a0:90:e7:89:26:ec:d0:53:86:bd:9d:db:1c:5c:ab:
         d0:4f:a7:3b:fe:e0:7d:b4:2c:be:66:14:29:c0:f2:5c:8b:23:
         22:1c:1d:6b:09:42:1d:09:d2:8b:36:08:d4:08:58:f3:2a:12:
         fd:d2:7a:78:5c:92:e3:a1:e4:4c:2d:5b:da:cd:83:71:8e:ca:
         f1:c3:d7:03:6d:ed:39:c7:89:f2:b8:dc:84:ab:20:fb:87:49:
         b5:74:16:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:56 2024 by rpki-client on console-ams.rpki-client.org