Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/6553f96aa55fb4e964003f66362fa8f655ae0fed.roa
File:                     6553f96aa55fb4e964003f66362fa8f655ae0fed.roa (raw, json)
Hash identifier:          H7Ei0rXH+21EBWFrw77oB5DYlvRPY5ClEZAXYOWBy8k=
Subject key identifier:   6F:80:0C:B7:06:57:AA:DE:F4:30:D1:77:49:01:E1:4D:09:BC:67:26
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       21BE0E
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/6553f96aa55fb4e964003f66362fa8f655ae0fed.roa
Signing time:             Tue 22 Nov 2022 17:10:37 +0000
ROA not before:           Mon 21 Nov 2022 17:08:54 +0000
ROA not after:            Fri 22 Nov 2024 17:08:54 +0000
asID:                     278
IP address blocks:        132.248.151.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2211342 (0x21be0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Nov 21 17:08:54 2022 GMT
            Not After : Nov 22 17:08:54 2024 GMT
        Subject: CN=6553f96aa55fb4e964003f66362fa8f655ae0fed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:42:40:22:48:1e:48:a9:25:f2:ad:e7:63:c4:
                    a9:17:fa:dd:4d:78:e7:c2:ca:d0:a3:9f:03:bc:56:
                    26:ca:ed:31:33:dd:ce:c9:a6:35:68:c4:32:80:6d:
                    bf:84:ac:27:25:ca:e2:df:8c:f5:58:6c:0d:c3:16:
                    0b:54:09:06:8d:9a:e0:73:50:52:d2:fa:2a:12:9b:
                    3d:d1:b4:44:71:55:35:4c:58:a4:8d:33:16:24:61:
                    1f:81:d3:16:30:df:49:39:a9:d7:0c:42:24:a0:55:
                    1b:e5:60:d2:c5:d1:4a:3b:d8:5a:e5:e3:d4:b3:8f:
                    32:96:1f:bc:1a:27:6a:b8:5d:03:74:8b:15:85:86:
                    7e:16:7f:e1:92:1a:b7:44:6c:a2:c7:c6:15:f6:47:
                    93:1a:09:e7:f9:f6:b3:08:2a:45:7d:ab:d6:98:fd:
                    b0:95:0a:9d:4f:8b:44:7c:6a:34:2a:87:57:b4:95:
                    5f:17:f5:05:c8:ff:29:d0:93:01:9a:5b:93:97:d7:
                    e0:1b:16:5d:86:7e:0f:46:c7:f3:cd:51:e9:a8:90:
                    bc:47:1d:05:4a:76:54:48:cd:8d:34:12:99:25:a6:
                    e6:28:8f:b8:0a:b4:fe:d6:81:7b:d6:45:1b:fa:7e:
                    d8:9e:f8:4c:77:00:bb:95:c6:9f:67:7a:e8:4d:c4:
                    76:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:80:0C:B7:06:57:AA:DE:F4:30:D1:77:49:01:E1:4D:09:BC:67:26
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/6553f96aa55fb4e964003f66362fa8f655ae0fed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.248.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:1d:71:9b:25:d0:6c:a6:81:f7:42:ba:f4:46:57:cc:82:c7:
         35:4d:ad:4d:75:16:6e:50:68:27:c4:17:75:b2:59:00:7a:41:
         bf:ea:21:ea:e1:74:38:ad:d0:80:d9:27:94:02:51:1b:1e:55:
         c2:0f:37:ae:c4:f7:bf:ec:7a:52:ad:e1:af:73:5a:42:86:57:
         ff:1f:cd:3a:92:79:b6:5a:cf:a4:16:e2:ef:06:a1:bb:c8:2c:
         ca:fe:fd:ee:88:cb:da:b2:94:a3:1d:89:ac:15:62:70:fb:07:
         0a:b6:e0:d8:fa:ac:e7:d1:b8:03:d6:84:cb:a5:42:ac:82:25:
         72:62:91:10:a4:4d:35:30:2c:5d:de:c6:28:7d:96:02:1e:6a:
         b7:ad:b7:86:d5:22:f4:49:10:98:91:0d:51:0a:ab:b6:e1:de:
         70:1d:8f:ba:39:c9:a5:0f:d7:fc:37:8b:e5:5d:23:f8:55:0f:
         88:64:da:2a:d5:d3:53:5a:08:9d:c6:aa:4b:ca:cc:47:52:90:
         69:ec:6c:12:19:4c:54:90:bf:26:09:76:18:16:9d:92:76:3a:
         f4:82:90:61:ba:32:a6:d1:c4:6f:a6:34:e4:f5:08:9c:2b:61:
         79:74:36:f8:b9:88:d2:bc:30:b6:ca:a4:f1:41:b0:d6:5e:a9:
         fa:18:c0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:04 2024 by rpki-client on console-ams.rpki-client.org