Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/550a25a6-947a-40cb-afe1-00cbe658b906/8172e4122ea3a9dceebb04a45e801d567040440d.roa
File:                     8172e4122ea3a9dceebb04a45e801d567040440d.roa (raw, json)
Hash identifier:          w3Fao/q/WIZqAi1v8dP/luBvkaLoyd1I5OgqD3JTrGM=
Subject key identifier:   97:43:25:AD:B1:1A:90:2D:BF:44:28:AC:31:AE:7C:0A:E9:47:15:60
Certificate issuer:       /CN=0bba00c9e212b68aac90a0d26d072a417cd9bbab
Certificate serial:       20C2E1
Authority key identifier: BD:89:59:86:22:5C:5F:7F:D7:F1:AB:31:56:D0:93:42:4D:9B:52:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0bba00c9e212b68aac90a0d26d072a417cd9bbab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/550a25a6-947a-40cb-afe1-00cbe658b906/8172e4122ea3a9dceebb04a45e801d567040440d.roa
Signing time:             Tue 30 May 2023 20:29:21 +0000
ROA not before:           Mon 29 May 2023 20:29:21 +0000
ROA not after:            Fri 30 May 2025 20:29:21 +0000
asID:                     52468
IP address blocks:        190.5.212.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2147041 (0x20c2e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bba00c9e212b68aac90a0d26d072a417cd9bbab
        Validity
            Not Before: May 29 20:29:21 2023 GMT
            Not After : May 30 20:29:21 2025 GMT
        Subject: CN=8172e4122ea3a9dceebb04a45e801d567040440d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:90:45:88:64:5d:db:2f:bf:22:98:79:d6:6d:
                    6b:1b:74:34:71:ec:ab:7f:39:d7:8d:bc:1a:f8:63:
                    5e:4f:5d:8c:d9:55:93:fb:ae:12:f2:e9:68:1e:8c:
                    33:32:55:65:dd:12:d8:65:4b:1c:05:d1:8b:4b:bd:
                    08:4a:88:8d:58:fc:f2:1e:1d:f6:0e:b3:b9:7a:44:
                    01:65:a4:f4:88:69:fe:8b:a8:88:c8:cf:1e:6f:24:
                    c4:ef:53:12:a2:90:94:e7:f4:b7:74:fc:0a:1d:5a:
                    3d:7f:76:02:1e:db:39:29:d5:77:ac:5b:95:70:96:
                    d9:1a:b9:0c:87:2f:fb:9d:19:9c:64:fa:f4:33:7f:
                    6a:9a:36:7d:c7:0c:10:f9:3e:6f:d6:cf:4a:e3:9c:
                    16:32:b6:09:6c:95:68:9c:fa:eb:5a:db:60:ed:08:
                    71:89:16:58:72:c8:40:a4:86:ae:23:f2:44:04:8e:
                    6b:69:fc:9b:e8:5b:9c:97:e4:02:6c:52:b3:91:cf:
                    a1:30:5f:b6:b9:53:a6:c1:d8:f5:a2:fc:b0:ba:8a:
                    ee:ab:32:ed:d0:7c:62:ec:60:a7:a2:f3:18:cd:59:
                    81:de:e0:e0:2a:48:29:30:4f:d0:a5:a6:cb:7f:25:
                    a7:80:a1:fd:e1:fb:9a:a8:93:23:86:af:12:0f:49:
                    ca:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:43:25:AD:B1:1A:90:2D:BF:44:28:AC:31:AE:7C:0A:E9:47:15:60
            X509v3 Authority Key Identifier:
                keyid:BD:89:59:86:22:5C:5F:7F:D7:F1:AB:31:56:D0:93:42:4D:9B:52:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0bba00c9e212b68aac90a0d26d072a417cd9bbab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/550a25a6-947a-40cb-afe1-00cbe658b906/8172e4122ea3a9dceebb04a45e801d567040440d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/550a25a6-947a-40cb-afe1-00cbe658b906/0bba00c9e212b68aac90a0d26d072a417cd9bbab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:b9:0e:31:40:ff:21:f7:68:eb:a0:0a:f3:26:64:5a:b5:65:
         28:de:86:03:66:5d:bf:8d:e9:3c:b9:e8:e3:2f:48:34:ac:cd:
         61:91:c2:0f:32:92:93:74:ea:8d:52:46:2c:34:bc:74:72:e0:
         2c:35:35:b7:25:c7:4d:f2:9f:e2:93:dd:e7:70:34:62:63:e0:
         6e:50:cd:2e:4f:f2:8d:b7:75:b0:5d:57:7c:3b:48:52:20:6f:
         7b:51:f7:cb:f0:65:62:a8:ea:3a:b2:24:81:9f:9e:dc:4f:d1:
         69:c3:b6:71:b5:b5:49:2b:fe:cb:7a:4b:94:29:fd:bb:a2:81:
         e2:bc:ba:67:84:22:13:ef:94:ce:73:1b:3b:43:89:cf:68:3f:
         53:c3:bd:69:19:ef:cb:ad:a3:2f:85:f3:b9:08:90:74:d2:ef:
         47:60:1c:09:75:dc:b2:a6:2a:10:a2:a7:7d:57:bc:7f:e0:10:
         25:c8:da:97:9f:1e:9b:50:7b:06:9a:f1:37:34:9b:57:18:6a:
         46:43:44:9b:ea:ac:0d:2c:ca:d4:84:fc:2d:f7:f4:1a:66:29:
         2a:08:2d:b3:f6:b5:b0:b1:6e:22:be:f8:84:b8:41:80:b7:37:
         7e:74:5c:5a:54:71:df:c1:c3:dd:2b:a7:d9:a3:cf:e7:a6:b7:
         16:74:b5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:35 2024 by rpki-client on console-ams.rpki-client.org