Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/ae53342d58a4d19c59de345630e9bbac91aa74e1.roa
File:                     ae53342d58a4d19c59de345630e9bbac91aa74e1.roa (raw, json)
Hash identifier:          tlhsn520bF8oiS3up6AHPyS1nM3TroRPGFVN7g3qk/0=
Subject key identifier:   EA:C1:26:7C:C8:3D:85:FA:C7:4D:96:7F:C5:EB:2A:4F:B9:B8:0F:17
Certificate issuer:       /CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
Certificate serial:       2E7F69
Authority key identifier: FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/ae53342d58a4d19c59de345630e9bbac91aa74e1.roa
Signing time:             Thu 07 Dec 2023 13:01:37 +0000
ROA not before:           Thu 07 Dec 2023 13:00:46 +0000
ROA not after:            Thu 07 Dec 2028 13:00:46 +0000
asID:                     265816
IP address blocks:        190.227.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3047273 (0x2e7f69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
        Validity
            Not Before: Dec  7 13:00:46 2023 GMT
            Not After : Dec  7 13:00:46 2028 GMT
        Subject: CN=ae53342d58a4d19c59de345630e9bbac91aa74e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:eb:23:1b:45:82:59:77:27:6e:60:49:fb:41:
                    40:d2:79:08:ee:60:d3:9b:5e:24:2c:e1:49:ab:47:
                    e6:26:b0:da:0e:e1:5a:3b:d0:29:5e:ec:a2:38:2d:
                    18:e9:0a:51:b3:e1:9c:75:ae:e1:a5:19:f5:f1:53:
                    36:08:df:86:db:43:ae:65:ab:cf:80:30:08:1c:a7:
                    64:23:95:61:68:ba:ff:3e:c9:b7:55:25:a2:96:44:
                    b3:a4:aa:72:38:50:81:57:ac:70:4d:5a:2a:85:94:
                    4f:68:93:f4:a6:41:39:be:8b:21:1f:da:bf:73:36:
                    b8:8d:0c:d4:23:f9:b2:0a:9a:05:e4:f2:b9:94:b6:
                    50:93:6f:b9:c2:f1:b7:8c:c0:94:5b:47:85:86:24:
                    96:f9:e5:e1:f5:6f:f9:9c:23:ad:33:2a:82:a8:94:
                    53:7e:75:1c:31:45:b6:32:b7:99:0a:aa:66:0e:1f:
                    93:d9:f9:d4:9e:ef:46:9c:d3:79:8e:cf:58:7f:d3:
                    fa:c0:cd:6e:59:af:4f:12:90:2e:ef:e5:f9:d3:ed:
                    fd:fe:39:81:49:b1:6b:e2:35:4f:5b:a7:31:03:0b:
                    f4:ad:7c:f1:6b:22:89:22:bd:78:17:bc:f1:9d:0c:
                    e8:d5:ba:fe:a3:4a:4f:3a:ad:ce:7d:57:52:55:18:
                    97:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C1:26:7C:C8:3D:85:FA:C7:4D:96:7F:C5:EB:2A:4F:B9:B8:0F:17
            X509v3 Authority Key Identifier:
                keyid:FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/ae53342d58a4d19c59de345630e9bbac91aa74e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c974409d0c2a70c921dd685e863e9f00cb1e262a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.227.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:7f:43:b6:a4:19:4c:f3:97:f3:d7:84:cd:b3:b7:37:37:1a:
         5e:d7:31:b0:fd:b2:2b:03:94:77:f7:5c:76:93:e3:79:e2:d6:
         a9:26:f5:bb:d7:22:6d:42:20:cb:b5:34:1c:c7:b7:c8:93:5f:
         da:42:9d:8f:96:84:b2:8a:21:37:cd:69:69:7f:f4:d7:42:55:
         ff:4d:08:19:31:73:a3:a8:74:d1:53:b3:73:b5:ad:7f:a3:ce:
         ac:df:ab:cf:7b:f4:1e:9e:f1:c0:1c:75:c6:49:55:ff:09:bc:
         04:50:f2:91:10:c2:7b:8d:b8:d0:7a:19:8d:28:f5:c1:8b:c9:
         31:1f:84:c3:d6:1c:5d:68:04:10:e1:ff:a1:c6:84:02:d1:65:
         60:37:6c:8e:b6:92:81:71:dd:7b:fc:5b:9b:c2:9b:9d:63:4c:
         85:cc:dd:e7:6f:58:0e:98:8a:ca:e8:2d:ac:ad:d6:29:c8:bd:
         1e:b2:47:c7:db:ba:7c:ec:43:0a:d3:77:72:2f:94:b4:bc:05:
         a4:51:aa:9e:bb:f2:33:51:f2:09:fd:a7:59:27:23:45:3a:a4:
         96:73:d3:80:f0:dc:bb:7c:7b:78:96:93:08:5b:bc:4f:46:48:
         24:0d:98:b2:ce:b1:36:cd:02:98:c2:27:51:df:6d:a7:c3:b0:
         69:0f:f1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:33 2024 by rpki-client on console-ams.rpki-client.org