Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/5809d6133a751288495a297562eba292574a66eb.roa
File:                     5809d6133a751288495a297562eba292574a66eb.roa (raw, json)
Hash identifier:          NWaEBilMW3tFRxEgGzJly0XyX14rXOvQJqjkAed8NcU=
Subject key identifier:   4D:4E:69:EA:9C:46:7B:3F:F6:CC:01:04:48:E2:B3:AC:F8:05:AF:35
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       1035C2
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/5809d6133a751288495a297562eba292574a66eb.roa
Signing time:             Wed 24 Mar 2021 14:44:14 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.247.23.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1062338 (0x1035c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=5809d6133a751288495a297562eba292574a66eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bf:f6:e1:60:0f:5d:3b:38:3e:cb:70:e0:a3:
                    aa:e3:9d:47:9f:f6:13:69:9c:11:d7:5b:f8:d4:83:
                    13:6e:68:77:88:15:46:61:b2:37:7e:c2:60:43:e0:
                    ef:d2:1c:db:cb:70:c5:e4:de:3a:5b:f2:a0:db:50:
                    b0:0b:82:86:84:41:aa:c9:47:ab:54:e7:5a:b6:3c:
                    b0:81:be:00:95:05:f0:43:8d:de:b3:41:da:30:be:
                    49:e2:41:8a:06:41:36:2c:6b:16:51:71:48:42:df:
                    18:fb:6b:78:d3:c1:63:ba:54:b5:e6:1d:32:6f:2c:
                    6c:9a:ba:2f:af:84:d2:22:1e:63:ab:e0:2e:f5:0f:
                    24:b9:39:16:f0:8d:dd:ee:fb:dc:fa:4e:03:40:73:
                    af:f2:c7:b2:27:7a:46:62:27:c6:1d:2f:73:bd:c2:
                    81:87:e3:57:ff:da:e6:82:37:a4:1c:d0:58:9e:30:
                    90:4b:87:36:37:b6:2f:72:3a:bf:30:7e:9b:a0:02:
                    a0:64:db:a7:01:dd:7e:27:78:81:05:07:23:43:60:
                    34:e7:c5:65:45:a9:6f:e0:43:fb:9d:13:06:27:9a:
                    e8:9e:b0:ea:88:32:f8:f5:fc:3e:78:ff:6a:f0:86:
                    08:f6:e2:eb:77:c1:2f:d3:33:a0:dc:67:33:b3:21:
                    7b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:4E:69:EA:9C:46:7B:3F:F6:CC:01:04:48:E2:B3:AC:F8:05:AF:35
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/5809d6133a751288495a297562eba292574a66eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:2e:19:ab:f1:c6:49:5b:40:0b:d1:b6:42:75:ae:f5:aa:2b:
         93:f7:06:90:62:33:95:bf:10:cd:93:ca:f8:03:18:36:d3:df:
         d2:a3:4a:5e:ec:0f:e8:f3:ef:1c:1f:e7:75:d1:ef:f8:87:0a:
         ea:a5:a3:d8:51:35:35:9c:d2:70:4a:69:ad:62:f2:c0:7c:7b:
         19:7c:d4:af:d3:11:2a:2b:00:6b:c3:cf:d8:58:d3:13:20:f5:
         0d:05:5b:b3:85:b8:6b:1b:c6:a9:7d:3a:bc:55:74:53:fb:b6:
         49:eb:7c:ad:ba:bd:61:ef:e8:70:01:b9:c2:c6:be:56:2c:90:
         19:af:81:9d:d7:03:fa:4c:b9:10:b9:9a:fc:d1:2a:c9:cf:12:
         0f:94:bb:ba:f8:ed:13:eb:4f:59:85:23:6e:41:ef:f0:86:10:
         05:c2:7f:53:e6:0c:4f:1f:d0:c7:09:7a:c5:81:f2:c7:34:b2:
         8b:f5:8c:f8:fd:92:63:4c:83:88:55:e2:9c:50:ea:f5:98:a6:
         48:1a:77:ae:cd:ae:f3:3d:87:98:0a:e8:3a:15:41:2a:9c:e2:
         b4:7f:d9:01:d9:7e:44:fa:40:54:68:ca:fa:8e:ea:64:74:ba:
         c4:a9:24:66:91:48:de:e2:05:9e:fd:e7:60:09:66:e9:a7:97:
         47:30:4a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:52 2024 by rpki-client on console-fra.rpki-client.org