Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/92b06f549ef556823fe08cc1b286cb54def0fce2.roa
File:                     92b06f549ef556823fe08cc1b286cb54def0fce2.roa (raw, json)
Hash identifier:          OhNaNqyKgM3T6YNtiQPqigu6GxKecEOIuENh5BRIUZg=
Subject key identifier:   2D:D4:04:98:AA:0D:5F:88:4B:24:1E:D4:38:93:3A:1A:F2:49:90:58
Certificate issuer:       /CN=28bbc56a25d664ac18a328309550c0f6329ea362
Certificate serial:       24DEEF
Authority key identifier: EC:56:30:FF:A7:75:05:35:60:6C:1B:D1:79:34:3A:E3:17:63:DE:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28bbc56a25d664ac18a328309550c0f6329ea362.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/92b06f549ef556823fe08cc1b286cb54def0fce2.roa
Signing time:             Thu 10 Aug 2023 18:00:38 +0000
ROA not before:           Wed 09 Aug 2023 18:00:35 +0000
ROA not after:            Thu 10 Aug 2028 18:00:35 +0000
asID:                     264797
IP address blocks:        190.110.248.0/23 maxlen: 24
                          190.110.252.0/24 maxlen: 24
                          200.123.49.0/24 maxlen: 24
                          200.123.51.0/24 maxlen: 24
                          200.123.54.0/23 maxlen: 24
                          200.50.166.0/24 maxlen: 24
                          200.50.169.0/24 maxlen: 24
                          200.50.171.0/24 maxlen: 24
                          200.50.172.0/24 maxlen: 24
                          200.50.174.0/23 maxlen: 24
                          200.50.174.0/23 maxlen: 24
                          200.50.176.0/21 maxlen: 24
                          200.50.184.0/22 maxlen: 24
                          200.50.188.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2416367 (0x24deef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28bbc56a25d664ac18a328309550c0f6329ea362
        Validity
            Not Before: Aug  9 18:00:35 2023 GMT
            Not After : Aug 10 18:00:35 2028 GMT
        Subject: CN=92b06f549ef556823fe08cc1b286cb54def0fce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:89:ae:53:70:53:ae:fd:69:9c:7b:3a:96:4c:
                    84:c5:6e:ef:41:a4:1d:76:5b:82:93:33:d9:fb:e3:
                    e6:bc:1e:f4:e1:52:a4:1f:5e:4b:48:07:c8:3d:80:
                    31:0e:1c:b3:1d:69:6c:07:77:32:de:84:79:cd:a6:
                    61:08:33:6d:80:e6:1a:91:2b:04:a3:77:51:c9:63:
                    a9:5d:70:82:e5:b1:4f:c8:75:d4:be:56:2d:de:80:
                    a0:8b:81:38:f1:4f:47:f0:15:2e:38:1f:c9:3b:de:
                    3a:b0:05:0f:1e:a5:81:23:e3:55:a6:03:5f:dc:b2:
                    ab:de:82:a6:a6:96:24:42:9f:bb:7f:c8:57:12:13:
                    07:14:eb:f2:4e:4d:1b:f2:35:04:79:f1:98:63:78:
                    e6:45:2c:ba:39:fd:0b:41:62:ce:f9:77:7e:5e:1b:
                    42:3d:c5:68:9b:d8:4d:2a:e4:eb:b4:d9:04:b2:6b:
                    e9:a5:45:bc:cc:f8:dd:0d:0a:86:72:24:af:3e:df:
                    43:d8:ad:3e:f1:6a:a1:f5:0a:aa:ab:89:e6:fa:21:
                    c7:53:14:71:82:7b:b0:9d:da:a8:5e:19:e3:cd:40:
                    4a:d9:ce:ed:0c:c7:d7:4f:01:cc:16:aa:b5:8f:e4:
                    7c:87:7b:99:19:22:35:16:c7:d9:19:d2:65:b0:0f:
                    26:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:D4:04:98:AA:0D:5F:88:4B:24:1E:D4:38:93:3A:1A:F2:49:90:58
            X509v3 Authority Key Identifier:
                keyid:EC:56:30:FF:A7:75:05:35:60:6C:1B:D1:79:34:3A:E3:17:63:DE:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28bbc56a25d664ac18a328309550c0f6329ea362.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/92b06f549ef556823fe08cc1b286cb54def0fce2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/28bbc56a25d664ac18a328309550c0f6329ea362.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.248.0/23
                  190.110.252.0/24
                  200.50.166.0/24
                  200.50.169.0/24
                  200.50.171.0-200.50.172.255
                  200.50.174.0-200.50.189.255
                  200.123.49.0/24
                  200.123.51.0/24
                  200.123.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:f2:ed:82:01:5f:3d:94:6d:de:8e:87:bf:2e:2f:c9:34:1e:
         c6:5c:96:51:02:6d:68:b4:8b:4b:6a:47:8e:85:cf:fc:1f:ef:
         d9:63:de:f0:16:2c:2d:3c:e3:ac:ea:59:98:cc:5e:85:63:92:
         f6:4c:88:0d:39:9a:8b:bb:2e:e4:58:98:2b:1a:b1:47:2a:fa:
         9a:78:1b:6e:19:87:36:f6:13:2e:95:62:ef:8c:60:c0:27:16:
         08:82:97:44:11:91:a7:d6:87:7f:b0:e5:46:6d:b1:78:50:f4:
         fd:46:41:c8:0e:7f:d6:c9:3f:79:ea:2c:62:03:14:7c:2a:1f:
         bf:7c:b9:d1:f4:fe:08:84:d9:8a:1c:cb:37:8e:ab:29:26:6b:
         e7:6a:15:0e:ce:e3:ed:4b:79:86:76:30:19:d3:0d:77:f2:36:
         66:79:54:6b:d2:88:ac:d4:b5:53:f7:94:f8:96:88:57:b0:1e:
         ad:42:2d:9c:fe:33:9f:9b:ff:75:fb:b5:e9:b9:05:54:db:35:
         f9:b5:d7:0e:c8:be:27:14:6c:06:08:ee:6c:68:9c:7a:78:7c:
         4a:08:1d:be:07:eb:75:03:d3:16:7c:08:4a:7f:36:81:7e:7f:
         82:9f:5d:91:aa:59:bd:00:7c:2d:9b:0f:a9:e8:20:e1:c3:13:
         72:ec:ec:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:26 2024 by rpki-client on console-fra.rpki-client.org