Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/1f5133497ce7ec105ae675e641ecb036773808ec.roa
File:                     1f5133497ce7ec105ae675e641ecb036773808ec.roa (raw, json)
Hash identifier:          aH7z+TxVIXsBL6WC1bAUm32W+6FZbKDNjsbRir7JaLM=
Subject key identifier:   BA:7A:A0:79:D4:4D:DE:53:C9:2D:73:C3:8F:09:F3:23:98:72:22:EF
Certificate issuer:       /CN=90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2
Certificate serial:       094A0D
Authority key identifier: 55:D5:F2:96:F9:29:E8:F8:30:C6:A2:7F:8C:95:7F:16:4C:96:FE:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/1f5133497ce7ec105ae675e641ecb036773808ec.roa
Signing time:             Fri 15 Mar 2024 12:47:47 +0000
ROA not before:           Fri 15 Mar 2024 12:47:22 +0000
ROA not after:            Thu 15 Mar 2029 12:47:22 +0000
asID:                     6503
IP address blocks:        148.243.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 608781 (0x94a0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2
        Validity
            Not Before: Mar 15 12:47:22 2024 GMT
            Not After : Mar 15 12:47:22 2029 GMT
        Subject: CN=1f5133497ce7ec105ae675e641ecb036773808ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:20:26:2e:db:6a:7a:fc:bb:5d:e6:c6:79:ab:
                    d3:21:39:8f:a0:5e:fd:f4:4d:06:0e:3f:9c:93:35:
                    d3:62:4c:c2:2c:0e:19:44:0a:6f:78:69:cf:30:19:
                    69:2e:23:6c:c4:c6:4a:c7:e5:6e:ad:4d:27:cb:7f:
                    2a:69:5d:26:74:da:a1:8b:ba:f3:c9:bb:e4:3d:37:
                    83:e3:2a:14:cd:69:9b:e1:d5:e7:16:04:8e:0a:bc:
                    0b:b5:ea:ea:5c:d3:cc:ec:3b:d1:ff:56:06:07:71:
                    d1:64:be:50:a5:11:f3:9d:7d:82:70:36:ff:d0:65:
                    a2:e5:ee:b3:26:5d:46:e6:81:3d:1c:ff:a5:6c:ff:
                    87:ad:83:2e:80:4d:56:54:70:c2:af:f9:c3:b9:ca:
                    34:43:5b:70:2e:6e:b8:ce:7e:72:13:0a:1f:41:66:
                    c2:9b:47:5b:2a:3c:09:5c:2e:5a:a4:35:fa:d2:44:
                    77:86:7e:3f:75:2d:18:2b:17:a3:11:24:8d:2e:d4:
                    c8:0c:57:b9:ad:54:ce:49:67:93:40:d1:c2:95:47:
                    c1:23:db:00:03:42:ea:04:13:05:66:aa:fc:04:82:
                    1a:ba:98:d8:27:0a:84:84:c6:ea:57:b4:ab:d9:28:
                    4e:7f:53:79:37:87:ec:6f:6f:d5:f7:97:a5:13:dc:
                    f4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:7A:A0:79:D4:4D:DE:53:C9:2D:73:C3:8F:09:F3:23:98:72:22:EF
            X509v3 Authority Key Identifier:
                keyid:55:D5:F2:96:F9:29:E8:F8:30:C6:A2:7F:8C:95:7F:16:4C:96:FE:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/1f5133497ce7ec105ae675e641ecb036773808ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.243.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         48:55:dc:3f:a6:eb:8c:cc:87:3e:dc:d2:4f:c8:ea:24:a5:d9:
         88:56:1c:1f:dc:f5:be:b5:d9:c0:0a:3f:60:3b:c6:31:7c:d9:
         e6:61:68:1e:64:d8:8c:ac:27:1a:54:04:bd:19:07:31:9d:44:
         75:61:3b:b6:a1:89:15:4b:8d:17:32:c7:60:0c:b6:4b:78:1e:
         dd:4f:d5:24:89:69:95:df:9b:66:a3:67:05:3b:39:60:03:41:
         c3:3b:97:19:8e:72:37:d9:33:78:ec:ba:3f:42:39:5a:45:81:
         3f:f7:86:3f:59:85:67:7c:63:39:d4:f5:df:33:69:d0:63:ac:
         af:0c:9d:a1:73:f6:67:cd:c6:66:d2:84:b1:4f:60:b5:44:d7:
         9f:06:ed:1d:8d:cb:53:c9:f9:be:3d:8c:ba:93:a1:a4:03:6d:
         59:0b:b7:de:7e:7e:93:39:77:2f:7d:32:20:b3:1f:e7:55:db:
         11:8f:4e:ef:46:33:0c:fc:ad:d1:52:00:3a:a2:c3:58:31:21:
         62:61:3a:80:95:f1:7f:14:a7:a5:12:6e:8a:b0:f9:dd:a5:4e:
         66:53:0a:87:db:52:34:3e:b8:e9:59:c7:ad:2e:ea:c2:a2:0b:
         04:96:bf:8d:6d:a3:dd:72:76:b8:a0:08:ca:57:a1:bc:37:cc:
         06:87:62:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:33 2024 by rpki-client on console-ams.rpki-client.org