Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52cd2d27-610a-4b46-b815-ff68bdc803a7/57aa0cf1c46e07ab2e0564ab006ac40ffca7ff2a.roa
File:                     57aa0cf1c46e07ab2e0564ab006ac40ffca7ff2a.roa (raw, json)
Hash identifier:          R/mImo+mW5EFa2FvPGE66q/v7dM/xS9muTnPv7bWVqM=
Subject key identifier:   04:C0:13:26:04:35:DC:27:9F:5C:D1:BE:4E:65:5F:08:3E:28:60:63
Certificate issuer:       /CN=9fdadc05bc3b209c11aad7e367b44f7fcdbb6e89
Certificate serial:       25E761
Authority key identifier: F2:27:FD:D6:E2:78:4A:60:5B:01:41:17:78:23:6B:3C:49:13:72:44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fdadc05bc3b209c11aad7e367b44f7fcdbb6e89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52cd2d27-610a-4b46-b815-ff68bdc803a7/57aa0cf1c46e07ab2e0564ab006ac40ffca7ff2a.roa
Signing time:             Wed 13 Dec 2023 00:13:28 +0000
ROA not before:           Wed 13 Dec 2023 00:13:27 +0000
ROA not after:            Sat 13 Dec 2025 00:13:27 +0000
asID:                     263238
IP address blocks:        193.30.12.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2484065 (0x25e761)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fdadc05bc3b209c11aad7e367b44f7fcdbb6e89
        Validity
            Not Before: Dec 13 00:13:27 2023 GMT
            Not After : Dec 13 00:13:27 2025 GMT
        Subject: CN=57aa0cf1c46e07ab2e0564ab006ac40ffca7ff2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:61:d7:bc:84:26:83:07:0d:3c:38:91:b1:a1:
                    86:0e:bb:1d:61:07:a5:29:e6:9d:a6:93:bb:29:b6:
                    b9:97:67:89:9e:3e:4a:28:df:e2:48:ff:6e:74:ce:
                    8d:f3:ab:88:c0:56:f8:ea:4a:31:5c:49:06:0a:da:
                    03:ef:45:f2:d0:41:8e:53:a7:60:97:12:79:f7:87:
                    a1:c7:fb:7e:23:be:3f:5a:a3:33:22:68:ea:f1:a8:
                    1c:1e:ec:f9:af:0a:f2:f5:92:88:09:3a:85:7d:a9:
                    be:7b:43:2c:ee:1f:de:83:3e:fb:45:e2:d9:f7:5e:
                    8e:01:8c:c1:b6:bc:8c:1f:ad:27:ea:84:0b:54:c2:
                    80:d8:14:83:45:81:33:74:77:c2:42:1a:b5:d0:ab:
                    4e:13:1c:0b:01:8f:10:89:01:28:9d:85:6e:62:a0:
                    fd:3a:f7:b1:1d:20:88:0a:52:c8:98:2c:a7:f7:3b:
                    af:ce:ac:42:3d:47:4b:3b:33:f4:39:67:2b:ad:aa:
                    e0:3d:e1:c0:ff:a5:5f:6d:21:2e:99:63:2a:36:cb:
                    ea:9d:45:48:db:99:42:50:21:04:be:bc:d6:5a:cd:
                    61:40:0e:7e:bf:a0:e2:92:32:0d:75:5c:77:ed:10:
                    d8:7c:ab:4d:a7:9b:a0:6d:d2:6e:f3:09:b5:3c:f3:
                    44:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C0:13:26:04:35:DC:27:9F:5C:D1:BE:4E:65:5F:08:3E:28:60:63
            X509v3 Authority Key Identifier:
                keyid:F2:27:FD:D6:E2:78:4A:60:5B:01:41:17:78:23:6B:3C:49:13:72:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fdadc05bc3b209c11aad7e367b44f7fcdbb6e89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52cd2d27-610a-4b46-b815-ff68bdc803a7/57aa0cf1c46e07ab2e0564ab006ac40ffca7ff2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52cd2d27-610a-4b46-b815-ff68bdc803a7/9fdadc05bc3b209c11aad7e367b44f7fcdbb6e89.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.30.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:9f:c3:20:48:69:79:f6:e7:d5:aa:b9:1b:44:c0:28:fb:94:
         9e:e5:b8:82:2d:0a:56:fb:43:91:eb:69:8f:1f:a6:dd:1b:8d:
         83:7d:01:19:cf:4a:82:42:db:b2:8c:17:91:23:13:44:c4:17:
         a6:29:84:3a:5b:10:3a:f3:ab:ec:07:16:b2:80:fb:08:24:42:
         ec:4e:03:3d:7f:45:26:19:03:10:63:e4:77:67:97:85:58:e5:
         fd:d9:42:01:a5:13:c8:94:29:19:57:ec:d4:96:08:bf:df:2c:
         a5:e0:29:f8:7b:61:4f:c6:23:92:83:e1:77:65:d1:cb:d8:27:
         b1:e0:a0:e0:2c:8b:f8:40:e9:b5:a5:dd:66:0b:df:03:99:43:
         94:a1:93:7b:2e:df:bc:cd:79:e8:b5:67:aa:35:ff:55:28:98:
         f9:5d:2d:41:c9:48:b7:2f:d2:74:d7:d9:7c:45:e3:2e:36:aa:
         37:d6:62:2b:a9:7f:99:f7:ec:aa:50:b7:d6:d4:b3:ee:fe:1a:
         c7:94:13:ab:65:90:c2:da:fe:95:65:99:e8:d4:5c:65:b0:94:
         0e:42:a4:36:ef:80:49:35:47:ac:a1:43:b4:76:bf:96:f9:42:
         9b:59:ec:86:38:e6:dc:16:59:0b:4d:c3:f8:51:2d:27:d3:68:
         04:cc:55:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org