Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/6005019130dfbf737c93d0d70be63d56764f3df4.roa
File:                     6005019130dfbf737c93d0d70be63d56764f3df4.roa (raw, json)
Hash identifier:          vb/1nEJ0O3yQv9hvx178vL+GGisYWEK3JEMFkDBWAwE=
Subject key identifier:   69:F3:CC:C4:48:3B:8E:C4:59:BC:41:03:BF:A8:D1:5C:7B:93:2F:65
Certificate issuer:       /CN=450e05696920146d80a6cffd7e47b4df43d2b64a
Certificate serial:       1C61AB
Authority key identifier: 14:FB:AE:BF:E3:D9:4F:3F:B2:71:61:18:07:0A:12:05:F7:BD:53:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/450e05696920146d80a6cffd7e47b4df43d2b64a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/6005019130dfbf737c93d0d70be63d56764f3df4.roa
Signing time:             Mon 12 Dec 2022 14:12:23 +0000
ROA not before:           Sun 11 Dec 2022 14:12:18 +0000
ROA not after:            Thu 12 Dec 2024 14:12:18 +0000
asID:                     263783
IP address blocks:        190.57.78.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1860011 (0x1c61ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=450e05696920146d80a6cffd7e47b4df43d2b64a
        Validity
            Not Before: Dec 11 14:12:18 2022 GMT
            Not After : Dec 12 14:12:18 2024 GMT
        Subject: CN=6005019130dfbf737c93d0d70be63d56764f3df4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a0:49:f6:3a:8e:fa:ca:be:ee:f2:4c:be:be:
                    47:78:dc:15:4d:ee:49:ab:a2:74:39:17:42:81:65:
                    05:e3:f2:31:a5:71:ca:d6:9b:2c:1d:f7:31:90:9c:
                    e8:1e:6c:83:ab:28:74:ad:f0:ae:8c:5c:d2:ff:9b:
                    27:4e:df:4b:eb:ff:1a:ae:56:c9:24:d2:e8:60:ae:
                    bf:54:3f:f7:4c:c8:83:93:87:0c:86:bb:62:0a:a0:
                    25:d1:20:61:c1:c4:54:e2:8f:00:44:aa:f3:4c:e2:
                    bd:fc:61:f2:ef:c9:37:23:a6:4e:5e:40:ec:5e:4f:
                    98:72:9a:5a:b7:a7:ee:ba:cd:51:2c:fb:59:08:4b:
                    b0:5a:fc:53:82:39:d4:3a:0d:a2:8e:16:fe:28:e4:
                    2b:c4:19:33:59:4a:68:81:63:f9:96:01:68:f8:0e:
                    60:75:29:28:f1:64:c1:bd:89:18:b0:c1:50:19:7e:
                    97:51:59:d5:07:ea:08:b8:45:62:1b:90:b5:ac:10:
                    6e:77:5e:87:4e:ab:20:a2:0d:88:f7:8d:2c:f8:a3:
                    4f:94:97:27:4c:52:d1:6a:28:4f:16:bb:48:18:39:
                    52:1d:f4:26:1c:ff:54:4a:6e:68:31:ba:98:69:7c:
                    de:9d:1c:a5:b4:84:88:ba:80:42:22:c3:10:85:24:
                    73:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F3:CC:C4:48:3B:8E:C4:59:BC:41:03:BF:A8:D1:5C:7B:93:2F:65
            X509v3 Authority Key Identifier:
                keyid:14:FB:AE:BF:E3:D9:4F:3F:B2:71:61:18:07:0A:12:05:F7:BD:53:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/450e05696920146d80a6cffd7e47b4df43d2b64a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/6005019130dfbf737c93d0d70be63d56764f3df4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/450e05696920146d80a6cffd7e47b4df43d2b64a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:ad:d6:f5:d1:dd:c5:68:66:a4:b6:8c:4c:69:b7:ba:ec:d1:
         e0:e5:0f:a5:73:1d:0a:0d:0e:8f:36:4d:d7:ec:6b:95:ed:c2:
         1a:ba:ec:51:40:97:58:5e:74:18:45:ca:c3:40:5e:c6:95:0e:
         6c:60:91:87:99:56:5e:7e:92:b9:f4:c7:92:af:fe:54:bc:85:
         6c:c6:3f:f7:20:9b:bd:00:0f:1a:67:0a:cd:aa:5c:b9:34:4a:
         70:08:32:7d:80:48:b7:cb:fe:fb:6d:03:18:55:55:ad:e5:2a:
         5b:eb:48:51:6e:31:13:d4:94:15:9e:f2:f4:76:9b:ca:96:08:
         53:c6:3f:4c:d8:27:85:b7:81:8f:6a:59:72:0a:ba:a2:c8:99:
         53:b9:65:bc:44:c1:47:15:0f:4d:90:b0:8d:2f:64:69:e8:51:
         6e:4e:f9:f0:08:3d:0f:db:47:45:76:76:21:eb:6c:35:a5:83:
         15:7e:85:43:a6:6e:a6:38:37:e7:ab:84:41:20:48:5c:a7:94:
         20:f9:93:20:f4:a8:84:75:05:25:94:ed:2f:73:8f:a0:a9:31:
         a4:88:8e:29:93:ad:c2:a8:80:09:0d:d1:68:2d:2b:0a:aa:6c:
         31:de:8d:b7:c9:12:80:c9:6b:96:71:c5:1b:95:19:c3:cb:95:
         b2:41:d0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org