Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F5DE5FE5414B3639D59BF50B1FD9BC019A8A484710FA86FB3773FC3157E0455/0/3136382e39302e39322e302f32322d3232203d3e2038303533.roa
File:                     3136382e39302e39322e302f32322d3232203d3e2038303533.roa (raw, json)
Hash identifier:          KxHReTUw61DXSWTWGIdHakAjyjMwx7ylZ2iPp/w1BO0=
Subject key identifier:   1B:83:A5:03:89:6B:17:B6:F4:0D:BA:7D:D5:4F:08:BF:15:B4:85:FE
Certificate issuer:       /CN=8E9DDDD62B32707EED6504127C90A15D60C2D5A3
Certificate serial:       344B9FC8CFA2AAD42E10B7F5C8B1DAEC24310414
Authority key identifier: 8E:9D:DD:D6:2B:32:70:7E:ED:65:04:12:7C:90:A1:5D:60:C2:D5:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9DDDD62B32707EED6504127C90A15D60C2D5A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F5DE5FE5414B3639D59BF50B1FD9BC019A8A484710FA86FB3773FC3157E0455/0/3136382e39302e39322e302f32322d3232203d3e2038303533.roa
Signing time:             Tue 05 Mar 2024 18:08:45 +0000
ROA not before:           Tue 05 Mar 2024 18:03:45 +0000
ROA not after:            Tue 04 Mar 2025 18:08:45 +0000
asID:                     8053
IP address blocks:        168.90.92.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:4b:9f:c8:cf:a2:aa:d4:2e:10:b7:f5:c8:b1:da:ec:24:31:04:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9DDDD62B32707EED6504127C90A15D60C2D5A3
        Validity
            Not Before: Mar  5 18:03:45 2024 GMT
            Not After : Mar  4 18:08:45 2025 GMT
        Subject: CN=1B83A503896B17B6F40DBA7DD54F08BF15B485FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2a:25:fe:0a:58:19:18:94:e7:de:42:fa:c4:
                    cb:a7:3e:82:6c:ce:fd:ae:85:06:6f:1a:a7:33:0b:
                    67:a0:af:8d:b7:5b:0d:65:b0:2a:e6:95:8d:8a:1c:
                    44:54:61:1d:cb:7a:44:a4:10:00:e9:2f:fd:29:cf:
                    06:b6:4c:ee:a6:74:7f:84:02:e1:ae:3e:fb:b3:b8:
                    64:d0:8e:44:33:24:b6:73:d4:d9:69:a3:41:8e:95:
                    9f:95:c9:00:92:1c:f6:52:dd:61:58:66:62:3b:8b:
                    2f:84:ab:d1:cb:be:c8:a5:3f:7e:d5:ad:5f:b5:49:
                    71:91:f1:f7:af:20:15:ba:e6:f8:70:ac:dc:21:67:
                    14:16:46:f1:b6:bd:d5:79:b9:90:fc:41:8b:fa:88:
                    92:4c:66:41:08:ca:e1:32:52:71:d4:4f:74:c9:5a:
                    e7:99:5a:3c:df:40:f3:08:2f:a6:9d:56:a7:75:bc:
                    92:ea:b1:4d:72:9e:ed:20:73:38:de:4e:24:07:65:
                    e6:2f:2c:e2:8f:a8:0a:17:9c:b6:80:f7:ea:25:3a:
                    60:e7:fb:4e:9c:d6:2d:f8:b7:72:82:90:93:4f:7f:
                    3e:b4:23:ee:3c:dc:0b:89:bc:73:3d:92:db:71:a8:
                    f1:71:a5:a8:3a:f5:b5:f1:37:46:31:fa:3b:8c:78:
                    9a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:83:A5:03:89:6B:17:B6:F4:0D:BA:7D:D5:4F:08:BF:15:B4:85:FE
            X509v3 Authority Key Identifier:
                keyid:8E:9D:DD:D6:2B:32:70:7E:ED:65:04:12:7C:90:A1:5D:60:C2:D5:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F5DE5FE5414B3639D59BF50B1FD9BC019A8A484710FA86FB3773FC3157E0455/0/8E9DDDD62B32707EED6504127C90A15D60C2D5A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9DDDD62B32707EED6504127C90A15D60C2D5A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F5DE5FE5414B3639D59BF50B1FD9BC019A8A484710FA86FB3773FC3157E0455/0/3136382e39302e39322e302f32322d3232203d3e2038303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:55:d7:ac:3d:cb:dd:62:ec:73:f1:6a:32:9c:a3:f1:cd:f8:
         83:13:0d:64:58:cf:20:2d:72:fe:6a:4b:e8:bb:0d:9c:ab:a9:
         ba:90:48:a9:52:d5:66:6e:46:bb:dd:1e:06:35:6e:7f:3a:94:
         90:96:87:bf:e3:fa:92:55:a2:e6:cb:91:0d:80:dc:52:4e:ff:
         8e:e9:e1:7a:2c:f0:e9:41:5e:43:4d:1a:c5:bd:66:a0:08:88:
         82:30:ec:66:4f:ee:11:37:32:f4:52:88:60:a1:21:8b:b7:92:
         2a:a9:0a:49:3f:d5:62:14:67:89:99:ae:48:41:47:c5:7a:8e:
         ef:e9:86:9a:ab:78:29:2f:f8:a4:a1:83:b4:ea:f8:84:56:8f:
         e8:1c:06:fc:b0:12:e1:a2:43:9a:b5:e5:8e:da:64:3f:9d:2a:
         f3:ec:0d:86:7d:34:76:f7:e0:0a:36:ba:20:d5:35:c0:2a:eb:
         2a:2f:c4:8f:84:52:e0:d4:f0:25:7b:b8:f3:33:b2:6c:33:6f:
         6f:e3:41:9f:69:b7:f0:a8:dc:00:e0:23:b7:87:8c:e2:9a:e9:
         90:a7:b1:eb:3e:78:51:64:94:84:1d:1a:c7:26:d5:b3:05:cb:
         18:28:6f:b3:f2:e3:db:6e:d2:71:86:23:4e:6a:a3:8e:8e:2e:
         fb:55:6b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:18 2024 by rpki-client on console-fra.rpki-client.org