Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/01d2d32b9583cd249961890d816d01024360d0a7.roa
File:                     01d2d32b9583cd249961890d816d01024360d0a7.roa (raw, json)
Hash identifier:          u7V0lPQHdVNWrKGGy/6BvMYEPR499iho2XNjoU67EvU=
Subject key identifier:   2A:CB:9E:04:BE:94:A4:31:07:50:F4:34:89:A5:6D:1B:B1:7A:4D:E4
Certificate issuer:       /CN=450e05696920146d80a6cffd7e47b4df43d2b64a
Certificate serial:       18C5E7
Authority key identifier: 14:FB:AE:BF:E3:D9:4F:3F:B2:71:61:18:07:0A:12:05:F7:BD:53:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/450e05696920146d80a6cffd7e47b4df43d2b64a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/01d2d32b9583cd249961890d816d01024360d0a7.roa
Signing time:             Mon 18 Jul 2022 17:57:43 +0000
ROA not before:           Mon 18 Jul 2022 03:00:00 +0000
ROA not after:            Thu 18 Jul 2024 03:00:00 +0000
asID:                     263783
IP address blocks:        190.57.116.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1623527 (0x18c5e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=450e05696920146d80a6cffd7e47b4df43d2b64a
        Validity
            Not Before: Jul 18 03:00:00 2022 GMT
            Not After : Jul 18 03:00:00 2024 GMT
        Subject: CN=01d2d32b9583cd249961890d816d01024360d0a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:96:b5:29:a7:e6:06:9c:ea:59:31:7d:f7:a5:
                    f8:81:9f:36:9c:d3:aa:ba:f1:93:ca:9d:e8:62:46:
                    1c:83:0f:2b:c5:ee:07:53:05:13:49:40:df:c0:07:
                    7b:d7:4c:15:29:2c:61:12:32:8f:fb:88:fd:aa:6a:
                    fb:43:c8:5a:19:1a:4c:0d:dc:01:25:0c:a6:39:5e:
                    c4:78:4e:66:24:69:ce:26:0f:63:cc:82:79:7d:76:
                    72:94:8b:1d:f8:fa:1b:b3:d6:e6:9c:85:26:19:51:
                    95:1e:e5:d4:75:7f:03:bb:80:f6:97:1c:6b:60:99:
                    ba:05:40:fb:fa:39:37:5e:59:eb:53:fb:7f:01:a7:
                    8c:37:a2:93:df:63:72:40:7e:37:b2:dd:87:52:6f:
                    a0:4a:b5:0e:29:ec:28:2b:4d:1f:cf:7c:4f:38:ca:
                    d1:ea:39:66:1d:5a:74:94:69:9b:a0:f1:11:87:8d:
                    45:d6:23:cb:14:48:ce:a7:70:24:3a:6e:cf:c4:f3:
                    8b:4c:3f:38:ab:8b:af:49:a6:95:cc:22:38:7c:44:
                    a2:5f:b3:ba:23:0f:c9:6c:16:cc:50:5c:d0:79:52:
                    13:a6:1a:28:0d:09:21:2a:63:f0:0d:29:dc:90:4b:
                    8b:76:ad:46:1d:cf:42:88:a7:f1:11:9c:7c:41:d2:
                    5c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:CB:9E:04:BE:94:A4:31:07:50:F4:34:89:A5:6D:1B:B1:7A:4D:E4
            X509v3 Authority Key Identifier:
                keyid:14:FB:AE:BF:E3:D9:4F:3F:B2:71:61:18:07:0A:12:05:F7:BD:53:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/450e05696920146d80a6cffd7e47b4df43d2b64a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/01d2d32b9583cd249961890d816d01024360d0a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/450e05696920146d80a6cffd7e47b4df43d2b64a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:58:08:a7:e5:3e:f8:ba:0b:c6:87:33:21:a6:45:5c:16:37:
         22:59:c7:06:a9:8d:8d:dc:62:59:5a:83:57:c5:fe:d8:77:c4:
         ad:94:4f:b1:62:e6:bb:c2:54:4e:9a:c2:2a:6b:3b:71:3b:d6:
         5a:ea:c3:64:9c:ea:ce:f2:6e:a7:c4:b3:4a:73:98:8c:87:41:
         91:e3:c9:27:2a:ed:51:7e:46:3f:e8:cb:27:a9:d4:9c:b1:1c:
         48:48:e3:01:0d:76:de:85:3a:25:83:d3:b4:b5:b3:d2:d7:82:
         22:b0:8f:a3:77:b1:15:b0:d8:25:2a:cf:bc:f7:a9:ba:ad:30:
         65:b7:64:4c:e0:f3:74:5b:cd:c5:59:08:76:ce:6a:5a:f1:ac:
         9d:b3:f5:d2:5a:57:b2:c9:13:49:33:6e:fc:00:eb:e0:21:8a:
         f3:45:c1:66:88:a3:17:3d:59:f5:b1:be:7e:02:29:ca:40:80:
         69:40:e0:39:7e:01:85:08:be:6e:37:fd:d2:22:0b:c0:4b:57:
         bf:49:81:7b:0d:18:16:df:e3:b4:46:ec:1b:04:b8:be:5e:f1:
         9a:6f:cb:5f:8e:22:66:f0:f8:61:b5:f7:f7:ce:6f:98:54:28:
         9d:3d:79:c4:1b:a8:79:b7:6d:3f:87:c2:cb:7c:44:f6:49:2a:
         15:23:06:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org