Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/6a23e24bea0f04612dfef36ccd357c90529de31a.roa
File:                     6a23e24bea0f04612dfef36ccd357c90529de31a.roa (raw, json)
Hash identifier:          1cEPPHZeisWzXJ7bKH/KMkxVOfwiJwhQ5aCvyHjLQg4=
Subject key identifier:   C1:AE:8D:C1:1A:32:D0:6F:93:6E:C8:EF:2A:C5:D1:0B:96:0A:8A:EA
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       1877E3
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/6a23e24bea0f04612dfef36ccd357c90529de31a.roa
Signing time:             Wed 24 Nov 2021 20:56:57 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     278
IP address blocks:        132.247.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1603555 (0x1877e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=6a23e24bea0f04612dfef36ccd357c90529de31a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:93:6f:7c:23:da:ac:01:6a:03:f7:21:20:d5:
                    d7:c0:66:47:59:dc:83:58:93:70:57:67:73:e1:6b:
                    d2:62:1d:8a:04:f3:b3:8d:88:1f:4e:8d:03:f6:da:
                    23:a5:71:23:5e:49:44:bb:8d:dd:77:a6:ba:4a:60:
                    9d:6a:cd:9b:05:2c:14:cc:a6:7c:8f:d5:ab:a2:5d:
                    a8:76:cb:e3:18:48:3c:d8:72:2a:0a:d1:07:db:c4:
                    e4:26:57:89:32:92:d3:be:57:ff:24:6e:e5:ba:a1:
                    8b:d1:cb:d4:d8:89:ea:d6:20:23:42:a5:92:d0:e2:
                    36:5d:92:1f:56:45:02:64:69:47:d6:68:b8:5e:3a:
                    39:c2:71:91:7a:e2:f6:50:c2:f4:40:b5:49:03:ae:
                    91:c0:82:22:d3:95:46:19:e9:de:20:03:72:d1:54:
                    cf:06:eb:ef:73:0e:8d:54:b7:c1:e6:02:40:f1:6f:
                    b8:96:62:f9:26:fb:86:86:f2:25:45:f0:a3:21:a8:
                    cd:33:97:8a:d3:47:08:e4:5a:a5:0e:16:0b:e3:80:
                    3e:90:b6:8e:69:cc:dd:12:e3:49:01:fa:d7:59:b3:
                    3a:d5:53:22:c1:51:65:39:68:30:dc:1b:c2:ea:05:
                    1a:ca:79:1f:48:30:7f:00:eb:19:56:f4:a9:7d:58:
                    34:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:AE:8D:C1:1A:32:D0:6F:93:6E:C8:EF:2A:C5:D1:0B:96:0A:8A:EA
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/6a23e24bea0f04612dfef36ccd357c90529de31a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:b4:e9:bb:3f:f1:63:58:66:8e:33:4a:39:90:fe:01:09:5e:
         06:21:22:03:f3:8f:b9:4a:58:d7:24:44:27:69:72:06:9d:18:
         af:bb:45:99:7d:b4:f7:3f:22:e2:52:04:83:6b:bf:a3:75:4b:
         f1:1f:d0:55:18:81:67:c2:52:7b:df:1d:dd:56:96:a6:4d:aa:
         fd:34:d8:65:08:7e:54:f2:95:f5:01:60:7c:e7:de:5b:07:8f:
         d7:7c:7b:18:31:49:e2:48:3e:5f:4c:e5:1b:a8:39:6a:ed:71:
         c2:20:66:0a:79:c4:dd:da:8c:57:25:e0:4a:59:f9:5a:32:10:
         fc:e1:2a:da:6b:18:74:48:e9:91:2c:d6:bf:0d:8d:ea:8b:e9:
         4c:67:3b:ab:4f:99:f7:fe:b4:bf:58:42:ee:aa:8c:3a:f3:dd:
         33:50:b0:13:ca:54:33:c6:9b:5e:82:d4:c7:90:fc:b6:31:db:
         08:9b:59:25:95:2d:57:8c:24:96:23:b8:55:c6:36:8f:a6:15:
         4b:3f:52:10:16:8e:15:7d:57:d7:e5:a5:13:59:1e:5a:29:79:
         7a:77:e0:e8:16:93:32:9c:28:fd:94:26:fc:91:db:2d:78:30:
         d4:a6:52:fc:53:2c:c6:b2:68:16:22:44:5c:71:bf:a2:e0:c1:
         1e:df:1c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:04 2024 by rpki-client on console-ams.rpki-client.org