Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2ba95eb8-0fdb-47e5-8722-1670732ca03f/d37509819f5d0aa127c2399b58c436c14465df6e.roa
File:                     d37509819f5d0aa127c2399b58c436c14465df6e.roa (raw, json)
Hash identifier:          MsypQ1kLOFmgMIJt6P1KPcJCKk8/tDffwupC2drAXgw=
Subject key identifier:   EE:15:2F:2C:6E:24:5D:44:6A:A3:66:52:FB:5F:8A:66:AE:DF:23:65
Certificate issuer:       /CN=904a59874ab57a97e46cd1d939a2312a85fe9c71
Certificate serial:       21FE57
Authority key identifier: 4E:23:5A:F0:59:C4:DE:77:9B:DA:BA:DA:4D:17:2F:37:34:F3:E2:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/904a59874ab57a97e46cd1d939a2312a85fe9c71.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2ba95eb8-0fdb-47e5-8722-1670732ca03f/d37509819f5d0aa127c2399b58c436c14465df6e.roa
Signing time:             Wed 05 Jul 2023 01:51:46 +0000
ROA not before:           Tue 04 Jul 2023 01:51:46 +0000
ROA not after:            Sat 05 Jul 2025 01:51:46 +0000
asID:                     52468
IP address blocks:        164.163.48.0/23 maxlen: 23
                          164.163.50.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2227799 (0x21fe57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=904a59874ab57a97e46cd1d939a2312a85fe9c71
        Validity
            Not Before: Jul  4 01:51:46 2023 GMT
            Not After : Jul  5 01:51:46 2025 GMT
        Subject: CN=d37509819f5d0aa127c2399b58c436c14465df6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:82:0d:a6:48:2b:d5:94:02:0d:98:18:44:c3:
                    a7:8b:86:0c:b0:8e:ec:32:fd:fe:63:b4:bf:21:a9:
                    e4:a1:c0:0b:a1:ba:b3:54:82:c2:2f:72:18:c9:10:
                    65:51:a7:8b:8e:57:3c:3a:be:a8:04:0c:9c:f9:20:
                    61:58:87:34:33:7e:57:71:49:31:a4:4a:16:cd:b7:
                    4e:86:66:ed:a3:0a:0b:32:97:73:12:63:91:3d:b2:
                    7a:4c:89:f0:88:8a:82:f6:55:d1:dc:aa:58:67:7c:
                    32:ff:b0:b8:5a:c2:b6:04:45:10:be:65:e9:e8:70:
                    f2:8c:f6:29:13:6f:97:ee:ea:48:46:ec:df:58:35:
                    f1:a8:f9:84:b1:3c:9b:b3:73:31:1c:07:66:e3:23:
                    e9:a1:f4:87:97:ff:15:ac:23:34:61:34:66:33:9d:
                    57:5f:8d:76:46:ca:b9:ce:0a:dc:10:b3:f3:1b:db:
                    73:c7:5c:1b:18:05:38:c0:e2:00:96:aa:53:1b:7f:
                    48:a9:5d:33:6a:71:b4:94:ce:02:1f:33:30:8f:a7:
                    38:58:d6:9a:5f:32:af:03:56:e4:d2:67:f4:f5:3c:
                    44:25:dd:14:b9:81:8a:b6:94:4b:00:9c:93:f6:61:
                    73:09:63:bf:43:f6:4d:2f:b3:44:9b:8e:20:f6:ad:
                    47:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:15:2F:2C:6E:24:5D:44:6A:A3:66:52:FB:5F:8A:66:AE:DF:23:65
            X509v3 Authority Key Identifier:
                keyid:4E:23:5A:F0:59:C4:DE:77:9B:DA:BA:DA:4D:17:2F:37:34:F3:E2:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/904a59874ab57a97e46cd1d939a2312a85fe9c71.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2ba95eb8-0fdb-47e5-8722-1670732ca03f/d37509819f5d0aa127c2399b58c436c14465df6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2ba95eb8-0fdb-47e5-8722-1670732ca03f/904a59874ab57a97e46cd1d939a2312a85fe9c71.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:bd:12:75:05:1d:68:21:02:b5:98:b9:dc:b5:b1:40:8a:b1:
         49:a2:9a:ac:91:c9:05:42:85:1e:63:be:4a:7e:e7:f2:a8:3e:
         de:39:72:bd:c8:ac:5f:68:6e:78:a5:31:5a:ce:31:a3:08:70:
         f0:2f:0c:b2:e8:08:4d:d6:23:30:4c:ba:e7:59:c1:de:99:ad:
         a4:40:05:e3:7e:1f:9b:1a:29:6f:49:08:4c:51:d6:25:b7:a6:
         cd:bd:d6:91:51:ed:7b:52:88:52:19:cd:fe:ad:21:9c:c5:09:
         62:d2:11:cd:c3:e0:da:c9:38:ce:3e:93:6a:80:89:26:8c:3c:
         e9:ec:7c:e1:64:5b:0c:02:38:ea:5b:38:ff:c9:62:55:65:74:
         46:c8:58:ae:98:3b:31:6a:c7:25:1a:b0:85:7a:b7:03:13:f4:
         67:23:9f:b5:a4:7e:c6:d3:43:9d:4c:b3:c5:cc:f1:1c:35:e0:
         a8:cb:65:0e:9e:3f:68:6c:49:41:02:e4:c5:c3:d3:ab:d8:52:
         27:73:51:94:81:3d:22:30:93:dc:6d:5a:b0:ee:a8:7e:0a:ef:
         99:d9:aa:8a:a9:d9:e1:36:7b:68:56:85:42:02:5c:76:7f:aa:
         e3:cd:22:5e:85:33:24:23:fe:fd:cc:b9:fd:fa:49:a5:2a:eb:
         a7:37:b6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:25 2024 by rpki-client on console-fra.rpki-client.org