Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/28b6bb3db7421205f682fcf5e774f9320f564191.roa
File:                     28b6bb3db7421205f682fcf5e774f9320f564191.roa (raw, json)
Hash identifier:          YhsAFqQIlv9n44ahrlB9+LVSxBZnesLXeu4mu9FdAPE=
Subject key identifier:   3C:8C:2D:00:A7:4F:83:8B:46:53:99:CB:BC:B3:C6:6A:4A:76:84:9A
Certificate issuer:       /CN=450e05696920146d80a6cffd7e47b4df43d2b64a
Certificate serial:       229B00
Authority key identifier: 14:FB:AE:BF:E3:D9:4F:3F:B2:71:61:18:07:0A:12:05:F7:BD:53:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/450e05696920146d80a6cffd7e47b4df43d2b64a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/28b6bb3db7421205f682fcf5e774f9320f564191.roa
Signing time:             Tue 15 Aug 2023 22:25:44 +0000
ROA not before:           Mon 14 Aug 2023 22:25:44 +0000
ROA not after:            Fri 15 Aug 2025 22:25:44 +0000
asID:                     12127
IP address blocks:        190.57.56.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2267904 (0x229b00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=450e05696920146d80a6cffd7e47b4df43d2b64a
        Validity
            Not Before: Aug 14 22:25:44 2023 GMT
            Not After : Aug 15 22:25:44 2025 GMT
        Subject: CN=28b6bb3db7421205f682fcf5e774f9320f564191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:88:e1:30:9a:c7:98:2e:51:8e:e5:fc:04:2f:
                    a7:d9:f4:6a:5c:3a:cb:0b:7f:03:3f:d1:6c:6a:32:
                    a1:dd:f0:91:8f:4a:86:b9:c1:09:03:de:5c:f6:ad:
                    33:c3:06:14:b7:91:fc:cd:01:4e:f5:f2:a0:89:9a:
                    a6:2b:b6:c4:93:f6:36:f6:59:ff:4e:a0:82:eb:4a:
                    36:4a:66:aa:11:50:b6:f4:63:8e:55:1e:6c:b5:87:
                    f5:ad:14:29:e7:3e:13:e5:0f:bf:7e:d6:f0:c7:e9:
                    39:b9:88:62:0f:a9:ea:e5:86:55:7f:91:96:04:30:
                    32:8f:c7:ab:df:22:fb:47:b6:a3:3a:8e:a0:a1:9d:
                    81:b3:6f:14:78:27:93:fd:1b:a8:4f:17:d7:ec:aa:
                    9d:91:d2:bf:34:cf:35:18:b0:56:f9:12:8b:17:36:
                    1c:c7:07:d4:52:1c:73:e4:ac:a2:9a:2a:69:2d:64:
                    45:c4:f5:f3:88:7c:16:4b:a8:4e:0d:87:a4:19:5f:
                    96:1e:1f:2f:7f:05:b0:de:79:fc:bd:ca:94:61:23:
                    fc:04:ad:d9:19:74:91:8c:01:73:89:46:26:a5:06:
                    99:4e:a2:18:e2:50:6a:7b:c8:eb:ac:f4:6d:2f:c0:
                    85:8d:d3:e3:b0:24:66:19:fd:69:7e:c7:3d:71:8c:
                    68:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:8C:2D:00:A7:4F:83:8B:46:53:99:CB:BC:B3:C6:6A:4A:76:84:9A
            X509v3 Authority Key Identifier:
                keyid:14:FB:AE:BF:E3:D9:4F:3F:B2:71:61:18:07:0A:12:05:F7:BD:53:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/450e05696920146d80a6cffd7e47b4df43d2b64a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/28b6bb3db7421205f682fcf5e774f9320f564191.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/450e05696920146d80a6cffd7e47b4df43d2b64a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:fe:7f:8d:af:91:16:b6:6a:96:22:1f:04:38:e1:68:25:c1:
         d0:a0:5e:1e:aa:be:e8:6f:4c:53:07:84:f3:3d:c6:67:90:d3:
         51:1c:e2:ff:77:6d:55:3c:48:2c:97:a8:64:41:e4:d8:d6:34:
         79:a5:be:37:2b:eb:04:a4:9a:85:e2:9d:d1:4e:8e:87:85:b8:
         21:25:43:53:e9:fa:51:5f:dd:2b:bd:69:74:ea:35:7f:f4:ce:
         59:4d:6c:73:ca:6a:8f:28:1d:2d:8e:0f:d8:96:bc:6c:ce:1a:
         02:b8:71:93:54:b7:6a:90:56:88:b6:e3:29:88:91:f0:34:bc:
         ef:6d:52:f0:a9:f7:71:dd:38:ca:f3:09:e4:a6:a5:43:bf:94:
         fd:e9:ac:c3:d3:c7:50:93:ca:cc:72:74:96:2b:7f:35:6a:28:
         bf:44:6b:a1:a7:66:87:19:1e:a1:32:0e:1c:b4:19:7c:9b:34:
         e0:28:f9:16:2d:db:b3:69:93:eb:5d:d9:1b:4b:ba:c3:77:50:
         9b:da:68:d5:1c:e5:6e:e6:a1:3f:0e:f3:20:5f:56:a8:a9:28:
         83:72:31:f6:7b:0c:59:ec:ae:42:16:51:18:6c:e0:15:74:e1:
         36:a2:f7:80:12:fa:38:1c:43:57:86:9d:0a:cf:c6:83:30:2d:
         33:4e:5f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org