Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/385520e6-1f98-496b-8d9e-15df9e0772ce/46506f62403bdfb8483776bf48fe2cfc5f833a25.roa
File:                     46506f62403bdfb8483776bf48fe2cfc5f833a25.roa (raw, json)
Hash identifier:          3swnemE/e0RXB7zxZBJmlCok6kAmT4bKDd3DFnw3PDs=
Subject key identifier:   1F:D4:80:23:0E:E6:E7:A5:4D:C6:24:F3:39:22:96:F5:F0:93:D9:76
Certificate issuer:       /CN=9e6663fb5d62a6c45845d461b066de1127b3e069
Certificate serial:       24D914
Authority key identifier: 4E:FA:DB:FA:CC:09:64:7A:58:D7:3A:CA:34:48:93:52:53:CC:0B:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e6663fb5d62a6c45845d461b066de1127b3e069.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/385520e6-1f98-496b-8d9e-15df9e0772ce/46506f62403bdfb8483776bf48fe2cfc5f833a25.roa
Signing time:             Tue 19 Dec 2023 15:18:38 +0000
ROA not before:           Tue 19 Dec 2023 15:18:38 +0000
ROA not after:            Fri 19 Dec 2025 15:18:38 +0000
asID:                     52436
IP address blocks:        190.120.244.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2414868 (0x24d914)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e6663fb5d62a6c45845d461b066de1127b3e069
        Validity
            Not Before: Dec 19 15:18:38 2023 GMT
            Not After : Dec 19 15:18:38 2025 GMT
        Subject: CN=46506f62403bdfb8483776bf48fe2cfc5f833a25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:69:52:f4:22:74:d4:74:a4:d3:1f:f8:3c:34:
                    9e:ab:e4:1e:51:89:9c:2e:d4:1f:79:e7:55:5c:d5:
                    b7:36:e5:45:c0:8c:56:ce:cc:f5:52:26:a1:b0:c6:
                    3e:35:41:64:9f:2d:05:44:16:60:3f:2b:2f:a6:2e:
                    92:34:d9:b2:ad:a0:20:1b:54:dc:f6:f9:c6:18:c5:
                    c0:62:67:64:d7:0a:be:54:ed:5c:88:d9:6a:d2:03:
                    42:7d:1a:ca:ef:18:b3:b1:1b:e9:81:15:fa:e5:59:
                    94:85:89:2c:0d:b3:45:23:52:15:32:67:45:30:04:
                    68:24:16:1d:ac:af:f5:63:27:3f:0c:2c:07:53:59:
                    b7:cb:ba:f0:72:9d:51:63:68:69:a7:3e:05:95:ab:
                    89:49:1a:ac:8f:d1:79:b4:5d:c7:73:f6:34:9d:e9:
                    bc:05:b6:00:9d:67:65:f7:eb:e0:d0:39:d6:3e:58:
                    6c:60:a0:50:9a:9f:1b:23:be:f4:8c:79:9d:68:64:
                    d6:fe:f3:95:e0:56:a6:6a:8e:6e:74:da:55:85:44:
                    bf:30:43:12:bd:7e:9c:0d:0e:29:67:dd:25:61:a5:
                    e0:ef:1d:ee:dd:19:ac:e6:d7:57:d3:07:a5:33:98:
                    de:51:2b:a3:65:16:78:25:87:df:fe:65:e2:45:bf:
                    b7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D4:80:23:0E:E6:E7:A5:4D:C6:24:F3:39:22:96:F5:F0:93:D9:76
            X509v3 Authority Key Identifier:
                keyid:4E:FA:DB:FA:CC:09:64:7A:58:D7:3A:CA:34:48:93:52:53:CC:0B:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e6663fb5d62a6c45845d461b066de1127b3e069.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/385520e6-1f98-496b-8d9e-15df9e0772ce/46506f62403bdfb8483776bf48fe2cfc5f833a25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/385520e6-1f98-496b-8d9e-15df9e0772ce/9e6663fb5d62a6c45845d461b066de1127b3e069.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.120.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:67:24:bb:4a:9a:bd:36:5e:0b:fe:ec:9a:c7:69:61:3e:04:
         4b:e1:00:0d:f5:f7:6d:46:6d:d7:2c:cc:d1:d6:53:e3:2c:92:
         d1:65:25:47:c1:25:6a:1c:ea:a2:de:f0:ac:60:ee:88:8b:2e:
         85:58:68:bc:a3:eb:e6:7b:14:9e:f8:7e:d3:a6:7d:e5:84:fb:
         f0:d7:68:26:0a:59:0e:70:ec:2e:f2:21:c7:40:8d:e7:fd:97:
         d6:e8:c5:59:22:81:0b:6e:3b:ae:96:7c:77:9b:f8:44:2d:e4:
         85:96:cf:19:fb:9c:af:cf:b2:aa:d9:5c:ed:4a:30:70:9f:34:
         5c:c4:2f:8f:90:b0:59:9a:4d:15:2f:cd:b5:bf:ee:b3:13:62:
         04:0d:67:1f:22:6a:79:87:dc:be:d6:35:ac:ab:12:c7:31:b6:
         b0:ab:fe:01:75:9a:54:3d:71:18:7a:c8:f0:3b:3b:2c:71:f5:
         9f:d6:0e:67:b1:2b:32:b6:e2:b0:35:7a:a2:bc:69:79:85:16:
         3e:7a:26:32:09:20:00:0b:12:18:19:4f:27:a2:71:34:00:ea:
         45:dd:5f:2b:07:75:4a:99:85:e8:88:3a:32:c0:a0:bb:ba:42:
         f0:5e:ec:39:cb:81:5c:fb:56:62:21:8f:59:1e:a0:a6:88:21:
         ad:86:e8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:19 2024 by rpki-client on console-ams.rpki-client.org