Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/4588f5588b161a95d3e346d5e09a836fad0410fb.roa
File:                     4588f5588b161a95d3e346d5e09a836fad0410fb.roa (raw, json)
Hash identifier:          +n8EQCmIR6PSv7cLz0YWlEKc2gqyqyJyCNg2bk4wM08=
Subject key identifier:   1C:C8:F7:A1:BA:F9:6C:6D:77:9A:50:CF:BE:2C:4E:78:57:55:62:68
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       27772A
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/4588f5588b161a95d3e346d5e09a836fad0410fb.roa
Signing time:             Mon 17 Apr 2023 13:01:29 +0000
ROA not before:           Sun 16 Apr 2023 13:00:28 +0000
ROA not after:            Thu 17 Apr 2025 13:00:28 +0000
asID:                     64099
IP address blocks:        190.228.169.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2586410 (0x27772a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Apr 16 13:00:28 2023 GMT
            Not After : Apr 17 13:00:28 2025 GMT
        Subject: CN=4588f5588b161a95d3e346d5e09a836fad0410fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ea:9d:4c:91:bd:ae:05:0b:8d:18:9d:da:e2:
                    a4:24:39:f3:8b:d6:0f:a4:10:56:3d:2f:44:ae:53:
                    b3:6b:17:8c:19:84:a3:25:2a:87:12:8e:90:b8:f4:
                    1d:c0:16:97:f6:49:d8:11:49:ed:89:47:eb:e1:36:
                    23:6f:c4:62:9f:0e:48:45:58:09:a6:60:ae:8b:68:
                    e3:a4:d8:f7:53:31:2d:0a:b1:12:a2:56:b0:da:d3:
                    ab:1f:c3:f5:0c:b3:83:d4:bd:27:46:72:22:68:91:
                    a4:12:08:ec:9b:45:45:75:c6:20:68:9a:23:e8:ac:
                    35:81:b1:6e:38:7c:d3:4d:61:61:74:cb:e1:3c:7e:
                    23:ea:fb:17:c0:f0:e8:b0:9b:fe:d0:e3:11:48:6f:
                    b5:3a:bd:5b:1f:ea:4f:86:cd:96:5a:d8:73:19:59:
                    17:6d:81:8d:34:59:6d:a3:2c:9d:04:ac:62:52:b5:
                    06:23:6e:3e:1d:8a:f0:ca:51:a7:79:4e:ea:4f:1f:
                    04:c8:a4:75:46:cd:6e:08:9a:a0:42:f0:3b:0a:43:
                    af:45:4a:01:13:f0:8a:34:c2:47:c0:64:4a:b3:7c:
                    e0:cc:77:7e:8b:6b:65:20:37:44:dc:cb:be:bb:53:
                    21:54:1e:c8:d5:78:6e:fb:b2:a1:70:30:58:8b:ab:
                    30:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C8:F7:A1:BA:F9:6C:6D:77:9A:50:CF:BE:2C:4E:78:57:55:62:68
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/4588f5588b161a95d3e346d5e09a836fad0410fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.228.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:8f:0e:88:37:b8:a2:44:ef:38:fb:20:33:3a:14:03:99:41:
         9a:9b:2d:4e:93:86:fe:9e:54:da:a6:73:41:29:f9:8b:3a:3d:
         61:09:cf:13:70:cc:07:87:8c:fc:86:00:b8:a2:53:bf:e4:ce:
         e3:e1:56:68:a8:e0:6d:81:50:02:fe:3a:00:ff:97:f1:ff:cb:
         93:f0:92:be:0a:c9:c6:4e:b6:54:d1:b7:b6:fa:c4:8e:eb:92:
         bd:0e:ab:aa:37:73:e2:73:04:c6:d7:2f:2d:f5:9c:82:bb:77:
         d1:9f:9f:b4:f4:4f:53:d0:00:f8:41:ad:0d:ef:61:e7:f2:79:
         eb:10:20:48:1f:08:43:2d:93:77:6a:45:38:29:a2:c7:02:84:
         72:d8:b4:33:d1:b6:0f:d5:b9:d1:89:5a:68:9e:61:99:ff:b8:
         b8:78:92:76:84:49:0e:48:61:4a:08:fe:36:41:ef:8a:54:77:
         a1:95:cf:24:13:1f:44:17:e1:1b:ad:00:bf:f7:24:58:30:77:
         e2:53:53:37:ac:d1:83:4b:42:aa:57:4f:5a:1d:97:2a:24:73:
         93:e4:ce:f2:74:8e:e6:12:1b:54:87:8e:c7:c3:ec:d0:a4:f0:
         11:d3:47:cb:bd:e0:64:8d:72:d9:12:55:3d:2c:c3:a0:d7:fc:
         73:3d:4a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 13:10:27 2023 by rpki-client on console-fra.rpki-client.org