Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/1e56e9be5adf804f41eab7c93acc5171ccbe729d.roa
File:                     1e56e9be5adf804f41eab7c93acc5171ccbe729d.roa (raw, json)
Hash identifier:          6LRftluOrcrLP+51KiYiDSslaxSKW6Sx0qVtm/aNi14=
Subject key identifier:   E3:D0:9D:41:A2:25:2A:01:90:F8:C3:90:BE:11:C6:93:02:0C:2E:FF
Certificate issuer:       /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial:       234CBF
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/1e56e9be5adf804f41eab7c93acc5171ccbe729d.roa
Signing time:             Thu 18 May 2023 19:05:51 +0000
ROA not before:           Wed 17 May 2023 19:05:51 +0000
ROA not after:            Sun 18 May 2025 19:05:51 +0000
asID:                     264845
IP address blocks:        190.112.52.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2313407 (0x234cbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
        Validity
            Not Before: May 17 19:05:51 2023 GMT
            Not After : May 18 19:05:51 2025 GMT
        Subject: CN=1e56e9be5adf804f41eab7c93acc5171ccbe729d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f8:42:0d:e7:c8:54:87:9d:50:3d:87:e3:69:
                    4c:63:2a:62:15:90:ed:28:42:c5:f8:d7:54:e8:59:
                    10:c4:ee:b9:25:ea:66:eb:b1:c2:a9:26:60:de:22:
                    b3:10:f8:a2:41:0b:7a:8d:f3:22:20:8b:79:77:32:
                    b1:cf:0e:df:f2:c4:48:46:d1:59:3c:94:23:eb:0f:
                    36:83:1e:8a:d5:d4:0b:b5:35:c8:c0:39:e8:0b:3a:
                    4a:4d:cc:a5:55:d1:a4:02:dd:ef:8c:46:b5:1e:ab:
                    12:a1:72:94:c8:0e:76:84:20:36:aa:94:48:da:f7:
                    71:42:d3:b1:17:de:23:bd:bc:b7:69:13:ed:17:3f:
                    fb:18:87:5c:6f:3c:9e:85:85:82:ec:bd:a7:f2:7c:
                    89:74:8f:db:bb:06:78:13:5f:6f:1b:09:a7:5e:92:
                    e3:3c:2e:a5:00:3d:07:5c:81:b0:1d:12:dc:06:c4:
                    36:a6:ac:07:dd:c9:2b:98:77:2c:3e:9e:20:f2:d8:
                    53:ce:3b:13:ea:62:6b:52:ca:f5:6b:3a:81:e9:60:
                    6d:f0:6c:1e:c2:81:1f:f3:0e:c0:c4:3d:42:a3:6c:
                    fe:be:4e:5c:f2:42:f6:23:be:2a:92:c7:0f:c4:ec:
                    a8:89:5f:7b:6b:19:17:6b:2d:b7:18:d9:0f:d4:6f:
                    46:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D0:9D:41:A2:25:2A:01:90:F8:C3:90:BE:11:C6:93:02:0C:2E:FF
            X509v3 Authority Key Identifier:
                keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/1e56e9be5adf804f41eab7c93acc5171ccbe729d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:f6:13:98:12:dc:65:27:eb:aa:6a:03:33:b9:43:46:36:76:
         5d:31:94:64:14:1d:27:69:b3:92:a9:ea:91:fe:2d:65:11:c1:
         01:14:62:19:23:c2:d2:f4:48:90:c8:aa:ee:30:29:94:2d:7d:
         d1:0d:d3:73:3f:a6:ae:a5:47:ef:d7:81:d9:d0:1f:07:01:d6:
         2c:66:8c:a8:26:fe:44:1a:15:66:b5:e5:26:dc:22:88:92:2d:
         de:5a:5e:04:fa:53:14:52:31:c6:3c:dd:fe:13:b7:ed:3d:b8:
         9a:2e:c5:27:1e:b3:39:6f:c5:c2:b0:33:01:fc:ff:e5:79:f5:
         d6:da:6f:47:2b:7e:76:79:22:bc:eb:fe:76:eb:17:91:a5:f1:
         cf:99:e7:89:6f:a9:31:9c:bb:87:f2:08:1a:35:32:85:5a:e9:
         9a:81:95:1f:21:0b:41:b7:e4:ae:6b:0b:f9:c7:e0:db:79:ee:
         85:63:78:64:4b:1d:56:5b:38:73:a9:08:21:48:0a:87:6f:13:
         c4:9a:36:94:42:37:03:b9:06:21:b9:11:34:5b:1c:0d:29:be:
         e6:af:0a:db:7f:a6:30:70:b7:bb:c9:56:72:a5:c2:3e:ad:52:
         98:7b:1f:12:4b:0c:19:06:8d:38:87:03:e5:f0:7d:57:d6:6b:
         34:3c:9b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 19:07:25 2024 by rpki-client on console-fra.rpki-client.org