Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/4abd88a8aeaf6cea033f1995ce3f66eae20ba750.roa
File:                     4abd88a8aeaf6cea033f1995ce3f66eae20ba750.roa (raw, json)
Hash identifier:          w80PZcJyFXKK0EN51PY/VMYQ8wgrXTtKLQhLGP2ywtk=
Subject key identifier:   E0:55:07:3F:B1:84:2E:43:70:D7:56:88:AF:C9:89:30:ED:43:6C:A9
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       243628
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/4abd88a8aeaf6cea033f1995ce3f66eae20ba750.roa
Signing time:             Wed 01 Mar 2023 20:09:25 +0000
ROA not before:           Tue 28 Feb 2023 20:05:41 +0000
ROA not after:            Sat 01 Mar 2025 20:05:41 +0000
asID:                     278
IP address blocks:        132.247.103.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2373160 (0x243628)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Feb 28 20:05:41 2023 GMT
            Not After : Mar  1 20:05:41 2025 GMT
        Subject: CN=4abd88a8aeaf6cea033f1995ce3f66eae20ba750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9a:07:78:7c:aa:ce:ae:4c:6b:76:94:cf:e4:
                    50:d4:76:90:56:9a:5d:bb:f5:79:f1:bb:29:7e:c3:
                    ff:13:4a:af:bb:97:f8:15:0b:0f:c7:0b:82:e3:ed:
                    6d:37:20:23:7f:b4:8a:8c:df:19:bf:14:cc:fe:f5:
                    0a:bb:b4:69:8c:d2:90:e2:4a:cd:d6:fd:6c:01:84:
                    9f:fb:62:44:7e:72:b4:44:ff:9a:ff:c1:a2:46:b7:
                    58:d9:9d:f3:42:c4:c6:26:98:63:2e:dc:b6:82:39:
                    1b:00:5a:75:b8:81:4e:60:7f:48:bb:69:65:ea:b9:
                    b9:30:4f:91:cc:92:73:1d:46:3a:a6:9c:13:92:04:
                    24:60:64:40:2d:46:16:8d:75:03:b5:99:74:e2:07:
                    6a:8a:05:e1:17:25:1c:f0:c9:71:f7:8a:25:2c:74:
                    66:c8:89:d6:44:e2:17:97:47:31:3f:36:52:e5:fb:
                    c1:42:77:b8:dc:0f:30:76:17:ba:12:24:b2:24:da:
                    ed:df:21:5c:af:e4:1f:27:a8:cf:38:1e:ef:50:ba:
                    66:44:12:6c:3d:c3:b0:87:81:0e:22:4f:26:74:51:
                    f5:29:bf:ef:6b:ba:82:6d:08:84:95:08:b7:f5:ab:
                    52:7d:c6:ee:d7:af:0e:44:71:b4:1a:16:41:be:f0:
                    c9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:55:07:3F:B1:84:2E:43:70:D7:56:88:AF:C9:89:30:ED:43:6C:A9
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/4abd88a8aeaf6cea033f1995ce3f66eae20ba750.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:63:22:c8:7e:5d:48:17:ae:a0:bb:64:0b:12:5c:dc:9b:36:
         47:4a:f7:b0:64:e1:37:9c:70:e2:95:64:d4:7a:54:06:bd:f6:
         c3:09:b6:5f:05:ca:1b:e4:82:b4:82:d8:12:66:c7:bd:57:e4:
         22:cc:4d:bb:ae:b4:ea:4a:30:02:80:a5:49:ec:2f:d4:63:a1:
         4e:b6:2a:0e:94:e0:42:4b:5c:c0:3c:cb:ef:ad:4b:8f:83:1d:
         7b:54:d9:95:69:3b:6e:5d:5a:9c:3c:1e:3c:b2:d7:32:bc:47:
         79:37:97:e6:c5:ca:ba:4d:5e:1e:a5:cf:16:94:03:75:c0:2d:
         64:3c:ba:ac:4f:24:de:cc:6b:84:03:c0:bc:8f:57:25:89:68:
         d2:1e:f4:54:27:51:1a:fe:ce:8d:21:c9:0c:00:7b:38:cc:a6:
         a6:65:b7:e0:c6:54:06:40:e3:1f:ff:06:b4:70:d3:06:eb:07:
         17:e9:b5:a7:bf:a0:fb:a4:7b:4a:11:3c:ff:5b:f9:fc:92:5e:
         8d:1b:ad:db:ae:af:7f:e8:b2:cf:78:f7:10:1d:e3:9b:3e:81:
         63:0a:09:1b:ac:50:9c:a3:a7:6c:96:c4:22:db:a6:ee:71:9a:
         26:2b:89:1d:02:58:d3:f2:c3:39:f2:24:44:16:96:46:cb:2a:
         69:b4:37:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:52 2024 by rpki-client on console-fra.rpki-client.org