Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/292e351c8fb813bceaa7c481124e7f11eb0cbf36.roa
File:                     292e351c8fb813bceaa7c481124e7f11eb0cbf36.roa (raw, json)
Hash identifier:          4bdziqt2jJUcSPcY108q3OTEAs27AfU3oJmECnzUcrg=
Subject key identifier:   03:E2:17:E9:83:BF:D8:FE:17:36:3A:E2:B3:74:D2:10:93:BD:E0:02
Certificate issuer:       /CN=450e05696920146d80a6cffd7e47b4df43d2b64a
Certificate serial:       1FD21F
Authority key identifier: 14:FB:AE:BF:E3:D9:4F:3F:B2:71:61:18:07:0A:12:05:F7:BD:53:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/450e05696920146d80a6cffd7e47b4df43d2b64a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/292e351c8fb813bceaa7c481124e7f11eb0cbf36.roa
Signing time:             Fri 21 Apr 2023 13:28:43 +0000
ROA not before:           Thu 20 Apr 2023 13:28:43 +0000
ROA not after:            Mon 21 Apr 2025 13:28:43 +0000
asID:                     263783
IP address blocks:        190.57.22.0/24 maxlen: 24
                          190.57.30.0/24 maxlen: 24
                          190.57.64.0/24 maxlen: 24
                          190.57.66.0/24 maxlen: 24
                          190.57.68.0/23 maxlen: 24
                          190.57.70.0/24 maxlen: 24
                          190.57.76.0/24 maxlen: 24
                          190.57.79.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2085407 (0x1fd21f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=450e05696920146d80a6cffd7e47b4df43d2b64a
        Validity
            Not Before: Apr 20 13:28:43 2023 GMT
            Not After : Apr 21 13:28:43 2025 GMT
        Subject: CN=292e351c8fb813bceaa7c481124e7f11eb0cbf36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3b:c6:82:39:a0:0c:d3:15:69:3f:ce:fe:cc:
                    48:1b:27:a6:ac:77:58:83:76:e6:9f:7e:f7:26:60:
                    bd:fc:c0:d7:38:47:63:cd:76:17:88:df:46:8f:f1:
                    69:6b:70:02:9c:95:e3:b1:bf:c7:97:73:73:36:72:
                    1b:24:1e:54:d9:3f:88:8d:93:df:3f:0e:01:75:32:
                    c6:71:88:33:05:60:62:8b:e4:4d:4f:c4:be:25:18:
                    bf:c6:d4:c2:23:34:4a:5d:bc:20:dd:32:1e:14:cc:
                    00:10:2b:12:46:f2:f9:8c:0f:fd:55:31:8b:59:27:
                    b9:4e:16:4b:dd:26:94:af:d3:ab:9c:6e:60:be:59:
                    ae:d5:fb:74:30:46:c0:7b:0f:55:b6:18:81:66:0f:
                    49:30:52:e3:b2:f5:1b:ff:ea:05:f8:a1:f1:df:a7:
                    4d:8e:ed:c4:a7:ba:89:5a:98:be:8e:8a:9f:2c:6d:
                    b0:3d:27:95:63:9f:98:8a:0b:f9:b2:b4:2c:b8:2b:
                    12:26:ae:68:f1:49:53:2e:52:13:48:f4:8b:a3:aa:
                    f4:5f:82:40:56:d4:40:74:bf:1b:0b:b6:34:db:77:
                    c2:fb:36:66:1e:c4:3e:e7:2e:4f:ec:06:4a:3b:07:
                    05:ed:ea:f5:60:ef:12:e4:c3:83:56:cb:2e:b5:fb:
                    da:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E2:17:E9:83:BF:D8:FE:17:36:3A:E2:B3:74:D2:10:93:BD:E0:02
            X509v3 Authority Key Identifier:
                keyid:14:FB:AE:BF:E3:D9:4F:3F:B2:71:61:18:07:0A:12:05:F7:BD:53:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/450e05696920146d80a6cffd7e47b4df43d2b64a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/292e351c8fb813bceaa7c481124e7f11eb0cbf36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/450e05696920146d80a6cffd7e47b4df43d2b64a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.22.0/24
                  190.57.30.0/24
                  190.57.64.0/24
                  190.57.66.0/24
                  190.57.68.0-190.57.70.255
                  190.57.76.0/24
                  190.57.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:c8:24:77:24:93:e3:e2:86:61:98:6a:32:d8:5c:45:82:2f:
         c0:9d:b4:ff:78:35:77:bb:34:08:d0:85:52:aa:cc:d8:b5:a3:
         f6:88:4f:b7:23:24:6b:2b:80:42:f7:82:77:7d:66:73:8d:7e:
         24:50:b6:d1:8c:85:57:2f:dd:8e:c4:d1:cf:8a:37:eb:0f:f2:
         d4:55:e8:17:42:9f:12:07:d4:82:a6:bf:1a:43:e4:84:cf:f1:
         2a:52:43:14:78:fd:ed:5c:53:84:c7:cd:07:66:bf:74:0b:eb:
         c1:9b:33:6a:87:eb:ed:5b:3d:06:26:a8:aa:a0:88:84:57:cb:
         75:a0:4c:fe:c5:36:f7:bf:d0:49:4b:05:6a:9a:2f:d7:cd:54:
         ca:4e:45:6d:6e:57:90:18:b6:49:8e:8b:21:34:1b:3e:37:d0:
         e1:56:f6:29:97:55:40:36:7c:0e:9f:b0:59:fe:38:4e:45:58:
         71:04:38:d0:3e:6b:26:66:10:76:ca:d3:61:17:1e:5e:81:d7:
         9c:2a:0b:49:41:7f:fe:b0:69:6f:25:ad:87:fc:6d:26:84:49:
         12:53:10:c9:4a:77:e2:e5:3a:92:aa:5c:93:8e:a4:c8:24:57:
         7e:66:e8:56:bd:9a:04:e7:4b:fd:bb:85:c2:66:f6:6e:ca:06:
         33:8b:65:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org