Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/003bf825-b144-476d-89c7-4987bdc328da/49409982f9c9f88dbd9138f39d41a37e86456e94.roa
File:                     49409982f9c9f88dbd9138f39d41a37e86456e94.roa (raw, json)
Hash identifier:          tWQX2RduUCKH+9Cmo9O43L23f0CLULpu4/EmxKegdEw=
Subject key identifier:   8F:E0:D6:D8:8D:9C:A8:61:07:65:A9:FC:04:0A:C8:21:1C:B9:7D:6F
Certificate issuer:       /CN=b8e5cbfb9465a07deba594219e5ffc698fbfbabb
Certificate serial:       0D90FB
Authority key identifier: 00:6D:71:13:48:C6:78:C3:31:34:E9:B4:AB:28:C4:BB:2B:F0:E7:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8e5cbfb9465a07deba594219e5ffc698fbfbabb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/003bf825-b144-476d-89c7-4987bdc328da/49409982f9c9f88dbd9138f39d41a37e86456e94.roa
Signing time:             Wed 04 Oct 2023 15:22:22 +0000
ROA not before:           Tue 03 Oct 2023 15:22:22 +0000
ROA not after:            Sat 04 Oct 2025 16:22:22 +0000
asID:                     52468
IP address blocks:        165.98.219.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 889083 (0xd90fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8e5cbfb9465a07deba594219e5ffc698fbfbabb
        Validity
            Not Before: Oct  3 15:22:22 2023 GMT
            Not After : Oct  4 16:22:22 2025 GMT
        Subject: CN=49409982f9c9f88dbd9138f39d41a37e86456e94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4b:72:f9:77:12:27:0f:a9:11:31:8a:c9:3e:
                    da:c8:fa:58:6b:3a:96:95:5e:ba:24:bd:a3:63:c4:
                    47:07:ee:22:c4:8b:1f:aa:32:be:ae:39:ad:33:00:
                    39:c6:27:14:b3:bc:6a:6b:d1:76:fa:2a:99:f3:ee:
                    e2:65:7b:6d:9a:ea:2d:2c:f8:1f:13:8a:be:a4:3d:
                    18:f7:2d:5c:83:0f:5e:4f:50:28:6a:cb:47:a2:b7:
                    51:5e:d9:c5:43:e9:ba:75:f7:9d:5b:65:e3:5c:3c:
                    0d:51:c0:35:a2:0e:78:f2:42:bd:6e:98:46:d4:e0:
                    e7:59:bc:b6:8f:84:01:93:35:10:34:8f:24:be:14:
                    64:8b:df:54:0d:c4:23:d8:a4:cd:f1:6e:bb:3d:b6:
                    76:c2:bb:6a:f4:e9:13:2e:d9:85:28:ff:18:df:44:
                    58:79:f3:b6:7d:ef:88:e2:bb:b5:39:c9:a4:7d:9f:
                    7a:fe:1b:70:ab:74:8c:21:ac:a4:eb:9f:f6:28:13:
                    9f:42:7a:42:66:32:18:fb:5b:28:f9:9b:2a:68:8a:
                    b1:32:1b:89:9c:c9:c1:0e:91:d2:e1:c5:53:18:32:
                    3d:0e:c4:c9:f2:89:a1:05:6e:45:a6:ea:86:b5:fc:
                    17:5b:fd:8b:7b:43:ff:41:ff:7a:63:98:34:0e:f2:
                    49:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E0:D6:D8:8D:9C:A8:61:07:65:A9:FC:04:0A:C8:21:1C:B9:7D:6F
            X509v3 Authority Key Identifier:
                keyid:00:6D:71:13:48:C6:78:C3:31:34:E9:B4:AB:28:C4:BB:2B:F0:E7:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8e5cbfb9465a07deba594219e5ffc698fbfbabb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/003bf825-b144-476d-89c7-4987bdc328da/49409982f9c9f88dbd9138f39d41a37e86456e94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/003bf825-b144-476d-89c7-4987bdc328da/b8e5cbfb9465a07deba594219e5ffc698fbfbabb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.98.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:d2:0a:6b:49:3a:eb:3e:81:1f:f4:41:2c:9a:9d:af:63:4e:
         6d:c6:e5:9f:de:03:aa:a3:eb:d5:86:aa:a3:97:76:ea:a6:97:
         7c:5b:4c:b8:62:05:63:8d:8d:0b:4f:d8:83:b2:7f:89:94:6b:
         8e:28:93:f6:fe:26:bd:9a:7b:a2:40:52:22:0a:00:0b:37:48:
         a0:60:04:90:8a:eb:80:02:09:f2:9a:8e:d1:ae:44:e3:9b:af:
         f7:bb:18:8c:65:9e:b7:32:96:8a:c7:9d:d8:ab:93:c8:fd:7a:
         c7:9b:bb:2e:c8:a5:24:9b:b8:ee:15:c3:0a:11:76:fe:c1:85:
         28:8e:e5:25:11:b8:fa:fb:b2:63:72:bf:53:43:df:d8:f4:3c:
         df:bf:18:7e:7b:81:b7:59:b6:7e:1e:f9:3e:9e:35:b5:35:a9:
         3f:34:68:1f:62:d9:0c:7d:9f:e2:54:b5:ca:f0:62:65:08:94:
         00:74:32:98:d4:7b:da:1d:53:09:85:e9:34:73:f9:b7:0f:ee:
         a2:20:13:b1:54:38:7e:c8:ba:a3:85:d6:ee:cc:d0:45:8d:92:
         79:30:a5:07:b7:48:aa:90:5f:51:93:b7:9b:57:78:5d:07:4b:
         cb:ef:2d:a3:4c:50:2f:d0:74:8f:16:fa:90:9f:3b:56:8c:8a:
         bf:c1:c8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:53 2024 by rpki-client on console-ams.rpki-client.org