Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7914dff3-e96b-490e-84a5-40b7109d9006/89353fab48efe5bac6740b75786ec02d408fcca9.roa
File:                     89353fab48efe5bac6740b75786ec02d408fcca9.roa (raw, json)
Hash identifier:          0fOTXJYutM/kmes+RRRTxo4zvcTLZGEikcehvQqXFBA=
Subject key identifier:   53:30:56:AA:47:21:AC:94:32:17:15:53:93:64:A4:9B:93:95:65:E6
Certificate issuer:       /CN=0f9bb7543db2b3a0a338c76a51790115e3158bb2
Certificate serial:       1B0456
Authority key identifier: 09:8C:2A:0B:FE:1F:2B:5B:D5:EF:86:3D:26:80:63:DC:EB:4F:E2:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0f9bb7543db2b3a0a338c76a51790115e3158bb2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7914dff3-e96b-490e-84a5-40b7109d9006/89353fab48efe5bac6740b75786ec02d408fcca9.roa
Signing time:             Fri 25 Nov 2022 16:29:44 +0000
ROA not before:           Tue 23 Mar 2021 14:42:33 +0000
ROA not after:            Tue 24 Mar 2026 14:42:33 +0000
asID:                     23383
IP address blocks:        186.2.149.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1770582 (0x1b0456)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f9bb7543db2b3a0a338c76a51790115e3158bb2
        Validity
            Not Before: Mar 23 14:42:33 2021 GMT
            Not After : Mar 24 14:42:33 2026 GMT
        Subject: CN=89353fab48efe5bac6740b75786ec02d408fcca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3c:4b:d5:88:77:30:bd:e8:e3:cf:74:d7:69:
                    9a:74:b4:53:7c:b0:c0:48:79:9b:87:ef:84:29:29:
                    68:50:ec:d7:b6:21:63:9b:2a:a5:12:fb:ea:f5:42:
                    b4:d0:15:9b:96:76:f8:4b:8a:6a:87:ff:d7:5e:0c:
                    a8:c4:3e:eb:f3:99:e4:b6:94:23:7c:53:7c:a3:b6:
                    ff:dd:02:ca:a5:5b:70:34:01:b0:7d:73:69:ec:fe:
                    e7:28:5f:4a:05:8d:91:9a:ac:47:bf:2b:b2:62:ee:
                    0a:50:cf:b6:b2:1e:79:39:5a:39:66:62:b2:1d:53:
                    75:d9:38:47:85:33:79:6a:eb:c2:11:b2:f9:4a:d4:
                    c3:6c:89:3e:c9:80:36:ac:3a:2a:f1:30:49:e7:65:
                    88:b4:31:f9:ae:b4:07:ea:27:75:24:f5:e4:a4:05:
                    34:ed:bd:eb:8f:b2:b8:50:2b:a9:a3:1b:c4:d4:3b:
                    30:4b:d1:e6:83:0a:c0:6f:2e:e6:27:52:37:40:86:
                    13:c1:f8:7c:c5:c0:fd:66:4b:72:2e:eb:56:4a:bd:
                    32:67:67:77:ff:b5:70:aa:cb:33:ae:93:98:65:3a:
                    14:2d:93:b6:71:f3:0c:78:3e:e8:d9:4a:c2:28:f0:
                    ae:e9:e9:42:20:aa:20:b7:45:b2:4c:d8:48:b8:6f:
                    03:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:30:56:AA:47:21:AC:94:32:17:15:53:93:64:A4:9B:93:95:65:E6
            X509v3 Authority Key Identifier:
                keyid:09:8C:2A:0B:FE:1F:2B:5B:D5:EF:86:3D:26:80:63:DC:EB:4F:E2:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0f9bb7543db2b3a0a338c76a51790115e3158bb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7914dff3-e96b-490e-84a5-40b7109d9006/89353fab48efe5bac6740b75786ec02d408fcca9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7914dff3-e96b-490e-84a5-40b7109d9006/0f9bb7543db2b3a0a338c76a51790115e3158bb2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.2.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:81:b2:51:34:b6:80:6a:ec:1c:02:f2:4a:ba:9a:32:c6:34:
         56:00:1c:c0:c9:6e:a2:a6:27:d3:4a:52:d7:42:6e:37:66:ad:
         85:e6:be:c3:b4:db:dc:0a:5c:53:42:0e:13:93:59:f8:28:13:
         93:f8:85:c3:5f:cd:a7:65:95:a2:1f:8a:cf:ae:dc:79:59:8a:
         8e:f8:d0:d8:ed:ef:fe:87:4d:5b:83:60:af:c7:a8:68:c1:e8:
         de:24:bd:4c:59:59:10:66:0b:57:b8:95:c3:93:b8:d2:dc:31:
         f9:49:31:51:07:21:b1:23:f2:7a:57:4e:ab:2c:4a:d1:66:92:
         0e:6f:15:08:2b:63:6d:67:f3:ef:f9:78:95:ee:5a:58:46:1f:
         24:76:96:c4:ad:fb:25:e4:33:ec:10:98:42:88:de:30:da:93:
         85:13:ee:b7:87:5d:6e:d2:7f:7c:87:86:4f:c6:17:20:5a:31:
         fa:a3:10:f8:b0:d0:e2:9e:fa:87:65:59:c6:07:77:f9:a4:e3:
         63:94:3a:e9:40:83:de:53:d9:2a:21:f3:db:29:1e:6d:18:39:
         7b:0e:6e:83:ad:17:8d:12:47:11:19:17:fb:9a:36:6b:02:3b:
         cf:24:f0:dd:e9:97:39:45:33:2d:d9:3b:5e:93:7d:c8:a9:0f:
         f0:2c:56:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:22 2024 by rpki-client on console-fra.rpki-client.org