Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/491c9a9107942b3a10ae890d5a74597aed539062.roa
File:                     491c9a9107942b3a10ae890d5a74597aed539062.roa (raw, json)
Hash identifier:          0ytI5r3tVz9JRqm0sq+tbhpBmCRCVQIvBhRYzjKsDcs=
Subject key identifier:   5C:D3:AF:9F:93:61:99:03:F7:B7:81:CF:C3:42:19:F3:F1:A9:D5:36
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       276101
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/491c9a9107942b3a10ae890d5a74597aed539062.roa
Signing time:             Mon 17 Apr 2023 13:00:57 +0000
ROA not before:           Sun 16 Apr 2023 13:00:28 +0000
ROA not after:            Thu 17 Apr 2025 13:00:28 +0000
asID:                     265816
IP address blocks:        190.227.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2580737 (0x276101)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Apr 16 13:00:28 2023 GMT
            Not After : Apr 17 13:00:28 2025 GMT
        Subject: CN=491c9a9107942b3a10ae890d5a74597aed539062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e7:8b:6c:6b:35:3d:f2:53:d8:db:b5:9e:f5:
                    76:ab:58:82:6d:bf:88:fd:e9:da:0e:cd:1f:ae:e8:
                    91:f6:9c:cb:bf:e6:13:16:81:95:11:be:cc:07:73:
                    9e:f4:fc:c2:e7:20:f6:68:fb:46:66:38:e5:74:71:
                    ab:dd:d1:52:ef:95:b3:39:0f:4c:5e:b5:fd:dc:52:
                    6e:68:9c:b2:78:d4:60:7a:ca:06:cc:fa:3d:e9:6b:
                    fd:04:fe:a3:97:03:33:00:2b:ae:13:39:36:fc:fd:
                    34:8c:30:6b:af:49:bc:e0:8a:b4:fe:48:d2:3a:57:
                    ae:f8:92:66:b5:f0:5d:e3:03:c8:37:2c:fa:da:4e:
                    0d:62:45:0d:6d:16:cc:bb:04:8e:dc:f1:9e:89:23:
                    c2:27:04:af:a8:55:ea:cf:31:30:8b:b9:a6:b8:70:
                    8f:75:3e:8e:90:fb:4f:14:84:58:dd:6d:4e:27:68:
                    cf:6a:19:90:78:15:32:50:af:b6:7a:71:48:a5:c5:
                    e3:3a:36:4a:a2:32:3f:6e:3f:1e:3f:c9:eb:f0:4b:
                    c6:a0:d6:24:7f:e8:e8:cd:7f:59:2c:3a:47:81:a6:
                    7d:5b:c4:e9:3d:23:f4:a1:a7:8e:58:82:37:ad:0e:
                    04:0f:88:d6:51:3a:e0:b4:a7:56:0e:26:dc:fa:e6:
                    dc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:D3:AF:9F:93:61:99:03:F7:B7:81:CF:C3:42:19:F3:F1:A9:D5:36
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/491c9a9107942b3a10ae890d5a74597aed539062.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.227.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:bb:59:8d:91:ea:e8:a9:97:26:3d:8f:1a:d0:80:76:8a:7f:
         6a:92:55:2d:51:68:51:ef:b0:5e:17:bd:dc:56:6a:c2:7c:b5:
         73:76:ef:5a:fd:38:9a:89:4a:69:08:76:41:2c:13:e9:30:ac:
         3a:f4:9d:87:0e:73:89:6a:bf:56:b8:89:ff:e3:a1:e4:67:db:
         37:77:ce:8d:07:fa:69:8f:40:d5:11:cd:24:2c:a0:4a:28:3c:
         a9:c4:57:02:2c:f3:8e:40:f9:9d:58:95:cd:5e:24:6d:79:d0:
         34:e1:d4:77:79:d5:62:c7:5b:81:c6:21:66:94:5c:61:08:ed:
         aa:8c:34:a2:47:b3:15:8c:c7:a0:12:71:b7:ab:24:58:de:3e:
         bd:b7:95:4a:9c:82:7b:2b:23:14:49:20:b2:1d:79:5a:07:ee:
         0e:17:71:d5:ac:d9:ec:0b:8c:e4:52:8b:e5:ad:a7:39:85:c4:
         bf:45:10:c1:79:82:68:92:6d:bd:ce:03:23:86:bb:c8:ba:fe:
         05:62:d7:44:52:39:ca:e2:6c:88:9a:80:fe:96:1e:5a:3f:4c:
         fc:f1:71:b6:9f:14:58:6e:20:4b:86:ea:72:dd:d3:28:37:f9:
         d3:ef:81:9f:ed:10:1a:b2:fe:ca:e9:a1:de:7b:fc:a4:6c:28:
         3d:75:d8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 13:04:53 2023 by rpki-client on console-ams.rpki-client.org