Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/48b8883fd429e44c1dded024368297de230e910c.roa
File:                     48b8883fd429e44c1dded024368297de230e910c.roa (raw, json)
Hash identifier:          D0wPDtBKrX/mjDuKnGjVlFKdFslLJDyfrZ67oeKRevQ=
Subject key identifier:   BF:54:50:27:B1:46:DF:FD:93:BA:26:BE:0C:51:75:9E:9D:FE:C5:98
Certificate issuer:       /CN=450e05696920146d80a6cffd7e47b4df43d2b64a
Certificate serial:       22972B
Authority key identifier: 14:FB:AE:BF:E3:D9:4F:3F:B2:71:61:18:07:0A:12:05:F7:BD:53:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/450e05696920146d80a6cffd7e47b4df43d2b64a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/48b8883fd429e44c1dded024368297de230e910c.roa
Signing time:             Tue 15 Aug 2023 22:24:50 +0000
ROA not before:           Mon 14 Aug 2023 22:24:50 +0000
ROA not after:            Fri 15 Aug 2025 22:24:50 +0000
asID:                     263783
IP address blocks:        190.57.56.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2266923 (0x22972b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=450e05696920146d80a6cffd7e47b4df43d2b64a
        Validity
            Not Before: Aug 14 22:24:50 2023 GMT
            Not After : Aug 15 22:24:50 2025 GMT
        Subject: CN=48b8883fd429e44c1dded024368297de230e910c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6a:80:9d:a4:5e:d3:5a:49:99:ed:76:a5:74:
                    e6:c5:c7:a0:2f:10:4b:20:03:64:ab:b4:09:23:61:
                    8a:b5:72:91:45:37:99:83:58:96:79:2a:44:91:2f:
                    50:9f:18:32:d6:4a:c1:46:86:39:dc:65:07:c5:0a:
                    92:1f:24:de:0a:c1:c9:dc:cd:0b:f1:28:5c:13:64:
                    de:d7:4b:3e:26:84:8b:e6:25:bc:d6:68:ad:c5:2d:
                    ec:f7:3a:a3:02:a0:f1:81:63:b0:37:f9:4b:3f:be:
                    aa:7c:82:4e:aa:ea:9d:df:30:f6:2c:09:53:f4:69:
                    00:0a:01:6b:93:d1:13:77:79:ed:78:61:0b:c5:51:
                    1f:c5:32:89:30:94:37:14:3c:07:40:11:5b:6c:72:
                    c7:8b:c6:92:65:94:bb:d4:8d:7c:79:70:eb:66:a9:
                    15:dd:d3:aa:a5:de:a1:cc:5c:59:f2:2d:27:19:1d:
                    23:83:ca:a3:1f:2a:2c:f7:87:29:af:5a:28:2e:f2:
                    85:0e:0d:67:8a:0d:bc:b4:3f:06:6c:69:66:1b:25:
                    13:25:c3:ff:fe:3c:b9:57:86:e2:e8:23:67:fb:ce:
                    dd:ec:8f:d9:0e:68:fb:12:ba:18:8c:ab:6b:30:ed:
                    c0:a9:18:92:13:1b:8e:c9:7c:80:09:2f:f1:c2:11:
                    84:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:54:50:27:B1:46:DF:FD:93:BA:26:BE:0C:51:75:9E:9D:FE:C5:98
            X509v3 Authority Key Identifier:
                keyid:14:FB:AE:BF:E3:D9:4F:3F:B2:71:61:18:07:0A:12:05:F7:BD:53:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/450e05696920146d80a6cffd7e47b4df43d2b64a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/48b8883fd429e44c1dded024368297de230e910c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/450e05696920146d80a6cffd7e47b4df43d2b64a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:8f:a3:40:ce:17:14:c3:b5:de:a7:e5:c1:51:74:91:1e:e7:
         7b:19:f8:8f:64:58:6a:e4:a0:e7:65:4d:d1:e8:3c:e8:36:3d:
         dd:ce:54:2f:c8:8c:78:ee:d5:22:ab:e6:38:23:0d:d2:ac:a8:
         19:2d:68:ed:16:77:f9:74:a9:15:ff:dc:a3:c0:cc:4d:28:8b:
         a1:5e:33:06:8e:54:94:04:db:6f:48:92:ea:94:9f:d6:8e:58:
         30:aa:de:fc:ee:d5:d0:ed:0d:9c:3b:0a:66:39:81:ce:3d:2f:
         1e:22:06:39:1c:75:fd:e8:2e:0a:cc:bf:2a:50:a6:a1:77:61:
         70:5c:eb:c0:30:97:83:90:8e:b1:7b:a7:55:87:e8:8f:3f:ff:
         c9:0e:df:19:2a:09:56:a7:95:57:b4:92:8a:23:3c:1d:77:f3:
         c9:72:2c:16:20:a4:aa:3e:38:e2:a9:fc:dd:48:29:92:bd:3a:
         92:78:49:88:09:95:ba:2c:78:87:6b:bb:31:03:4c:40:0d:83:
         d7:8b:23:b4:45:81:8a:39:88:1f:48:3c:ba:13:ab:0b:df:c4:
         d3:a0:56:46:89:71:c7:fe:2d:86:2c:09:dd:83:30:1f:c4:7a:
         ac:ef:e7:f0:4a:8e:52:b5:aa:d2:67:78:6a:f7:4d:2f:35:f9:
         3b:61:b1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org