Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23ffdfe0-c9af-4f34-a46f-568a26055b0a/4b15481d2e3c50ce715f452dacd0fcd6425da1e9.roa
File:                     4b15481d2e3c50ce715f452dacd0fcd6425da1e9.roa (raw, json)
Hash identifier:          6EtI57cKJ6Qaiy0vQCto/LL3bxHNF2EZr5zo0lpJRwM=
Subject key identifier:   5F:D0:FE:55:C3:83:11:AA:F8:2C:B0:CC:9B:D7:0E:06:16:F9:8E:20
Certificate issuer:       /CN=bd538999ee55467c979dac5d0250cd64761520ee
Certificate serial:       410E
Authority key identifier: 3C:55:F7:60:A8:6B:D8:4B:16:EE:B2:41:95:46:1C:62:38:AF:31:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd538999ee55467c979dac5d0250cd64761520ee.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23ffdfe0-c9af-4f34-a46f-568a26055b0a/4b15481d2e3c50ce715f452dacd0fcd6425da1e9.roa
Signing time:             Mon 12 Dec 2022 22:10:46 +0000
ROA not before:           Sat 03 Dec 2022 19:04:08 +0000
ROA not after:            Thu 05 Dec 2024 19:04:08 +0000
asID:                     52335
IP address blocks:        190.8.176.0/22 maxlen: 22
                          185.74.16.0/23 maxlen: 23
                          185.74.18.0/24 maxlen: 24
                          185.74.19.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16654 (0x410e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd538999ee55467c979dac5d0250cd64761520ee
        Validity
            Not Before: Dec  3 19:04:08 2022 GMT
            Not After : Dec  5 19:04:08 2024 GMT
        Subject: CN=4b15481d2e3c50ce715f452dacd0fcd6425da1e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:44:fc:f7:8e:d3:0d:ac:44:25:24:3d:62:53:
                    ea:d7:8e:f6:f4:66:71:5c:8c:42:53:4a:85:6a:26:
                    ed:41:ee:39:e5:e8:64:1a:6d:68:0d:c7:93:25:b3:
                    d5:12:14:ad:83:54:e3:ec:7b:0d:a0:6a:7f:ae:6e:
                    6e:fc:b5:24:55:c9:05:20:43:60:0a:1e:05:17:9e:
                    08:76:29:c4:2a:fb:a2:0a:f2:15:06:1b:01:35:63:
                    85:f6:77:43:2a:2a:9e:e6:9d:fd:7a:36:7b:fe:da:
                    c0:73:47:1c:49:2d:a4:cc:9e:7c:3a:53:4d:66:d1:
                    33:12:b7:f4:8f:10:20:e1:f6:4a:af:43:2f:75:49:
                    63:82:bb:79:0d:39:e0:b1:98:1b:f9:25:b2:3c:ed:
                    52:b7:0d:51:ed:c7:c7:97:36:8e:ba:e2:e0:7d:5c:
                    52:03:92:c6:5c:a2:a5:7c:f5:6f:99:a8:05:4a:3a:
                    3f:04:d9:76:e1:95:ca:e6:e1:c3:30:bd:ec:5b:91:
                    f9:5f:7f:c7:8e:b2:05:e8:da:5f:9d:4b:e4:62:49:
                    29:b6:38:2d:61:36:f7:5d:f1:04:d3:6d:2d:b4:4a:
                    1a:cf:94:98:76:a6:0a:26:ad:8b:d5:07:e5:ec:ac:
                    20:f6:85:22:65:41:1d:7d:85:45:c3:0d:3f:6a:ea:
                    82:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D0:FE:55:C3:83:11:AA:F8:2C:B0:CC:9B:D7:0E:06:16:F9:8E:20
            X509v3 Authority Key Identifier:
                keyid:3C:55:F7:60:A8:6B:D8:4B:16:EE:B2:41:95:46:1C:62:38:AF:31:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd538999ee55467c979dac5d0250cd64761520ee.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23ffdfe0-c9af-4f34-a46f-568a26055b0a/4b15481d2e3c50ce715f452dacd0fcd6425da1e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23ffdfe0-c9af-4f34-a46f-568a26055b0a/bd538999ee55467c979dac5d0250cd64761520ee.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.74.16.0/22
                  190.8.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:b9:fa:c9:5b:ca:7d:59:82:41:56:9f:6f:b7:12:08:16:dd:
         39:0c:73:83:c6:3e:c8:1d:92:22:82:a4:85:17:e7:89:2f:84:
         4b:ac:9a:e5:1a:2a:4e:d8:ba:ae:d4:90:f3:b9:9f:52:ef:e8:
         97:9a:96:6d:9d:e8:90:6a:37:15:de:8e:0d:fd:5b:92:1e:84:
         e9:38:7f:8e:28:40:ff:3f:1f:53:45:15:cc:69:d7:b3:ce:79:
         83:42:f8:38:aa:2a:48:53:95:b2:b7:9c:d2:aa:a9:7d:46:31:
         33:83:8b:da:4c:17:45:24:6d:d8:10:34:7d:b6:06:4f:97:91:
         07:b0:5c:2f:19:59:63:cd:c2:fc:7b:74:38:dd:0f:41:d6:be:
         cf:fe:d3:04:46:43:2f:b0:00:e8:b7:81:cd:a3:63:53:8b:42:
         02:34:c7:21:7d:21:8c:e7:5c:5a:2b:43:78:7a:50:66:a3:5c:
         dd:ec:47:ca:a1:48:11:f3:23:ea:52:dc:32:68:ff:20:eb:79:
         e2:3b:ee:ef:eb:df:f4:36:3c:48:00:13:52:02:09:1b:e8:e4:
         9a:1b:93:83:62:fb:f8:af:0f:bf:61:a8:a1:9b:5f:6e:04:5d:
         fc:fe:ad:e3:64:fa:69:d5:1f:f1:fa:8f:30:38:c7:bc:cb:86:
         79:9e:e8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:04 2024 by rpki-client on console-ams.rpki-client.org