Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/a801ffc6c0f22bf68aff1f533b4b6ec6560c759c.roa
File:                     a801ffc6c0f22bf68aff1f533b4b6ec6560c759c.roa (raw, json)
Hash identifier:          8rFt0yo+649IqOv40yuMRmzBkPckg0P/oJdKsqqieu4=
Subject key identifier:   12:D0:E7:8A:13:F6:A7:D6:09:46:D8:01:2D:9E:80:93:55:4D:11:47
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       2165B6
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/a801ffc6c0f22bf68aff1f533b4b6ec6560c759c.roa
Signing time:             Wed 09 Nov 2022 18:14:49 +0000
ROA not before:           Tue 08 Nov 2022 18:07:33 +0000
ROA not after:            Sat 09 Nov 2024 18:07:33 +0000
asID:                     278
IP address blocks:        132.248.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2188726 (0x2165b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Nov  8 18:07:33 2022 GMT
            Not After : Nov  9 18:07:33 2024 GMT
        Subject: CN=a801ffc6c0f22bf68aff1f533b4b6ec6560c759c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d1:cb:74:71:4b:a9:24:d8:61:9e:9d:ca:cc:
                    52:de:0e:5a:87:13:b3:4f:63:99:81:5c:4f:93:08:
                    12:49:c9:83:a3:27:5b:bb:f9:96:a0:4d:ec:23:5c:
                    02:20:57:41:03:43:18:a8:de:e3:0d:04:27:c4:f7:
                    6e:a8:90:5e:cc:ca:07:94:f7:a5:81:d9:2b:d4:e4:
                    e1:0a:65:3a:b9:28:5b:b9:70:84:a1:38:0b:ff:1f:
                    73:3b:ac:62:6e:49:58:a2:64:06:50:50:7f:81:fa:
                    54:f4:cd:0c:18:68:ef:ff:eb:63:99:19:ff:1d:62:
                    78:a5:cd:bb:7d:3b:7d:16:dc:f5:a3:40:bc:cc:28:
                    6a:f5:17:c7:58:51:e6:3e:27:6a:b3:03:cf:6c:1e:
                    40:d4:15:5c:85:93:aa:30:e5:d4:ac:a0:05:3f:df:
                    73:bf:29:91:da:37:0d:74:fd:e1:c2:d1:6e:6d:5c:
                    8d:16:f0:82:cd:87:b0:e9:6c:93:10:46:57:d2:c5:
                    5f:bf:35:d5:97:b7:46:cb:07:32:a9:40:d0:b0:73:
                    32:c3:52:cc:d6:c7:58:bc:b7:88:71:86:5f:c0:80:
                    6c:bf:41:d9:8f:93:c6:84:9f:77:a3:6e:e7:34:48:
                    bb:b2:af:39:c2:04:a8:0f:9f:7b:c1:fc:54:04:b7:
                    a7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D0:E7:8A:13:F6:A7:D6:09:46:D8:01:2D:9E:80:93:55:4D:11:47
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/a801ffc6c0f22bf68aff1f533b4b6ec6560c759c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.248.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:68:91:ee:8c:76:f9:01:a7:2b:db:45:c5:05:2f:bd:c7:69:
         11:b0:20:4b:7a:72:21:ad:42:8a:de:b8:44:75:b2:08:7f:65:
         6b:80:9f:42:24:b2:34:cb:e6:fe:80:8c:60:71:78:76:cf:c9:
         a0:d2:46:c9:30:7b:50:d5:70:c8:a7:65:a0:cc:69:4b:6f:b6:
         1e:82:93:40:04:9b:a1:d7:72:fa:aa:d0:ab:f9:8d:f9:82:20:
         b8:e3:1c:1a:d7:9c:e4:ac:ec:0e:b7:5b:22:ad:cd:8e:40:2d:
         ad:9f:1e:e4:56:d3:5d:dc:45:f1:0e:f3:5e:48:08:05:34:a6:
         b6:58:9e:d6:ff:dd:67:e1:25:84:89:8c:74:04:7b:8a:5f:3a:
         81:89:2c:08:4a:ea:59:22:c5:18:d2:ea:14:fb:11:68:eb:7e:
         81:6c:da:8b:c2:53:05:14:92:e7:86:6c:70:b9:8b:74:bf:79:
         49:d3:40:45:ef:cb:4e:d3:a5:ec:97:1c:e0:74:ac:18:20:44:
         cc:14:b2:a6:d5:f0:e3:7f:c1:4d:8e:10:d7:ee:0f:45:22:c2:
         46:e4:7f:03:18:cd:41:57:98:1f:4f:18:21:4e:b7:0e:66:79:
         9b:43:be:74:ad:54:3b:0e:3a:3c:0a:6c:88:1e:f6:23:d7:53:
         c1:5b:cf:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:52 2024 by rpki-client on console-fra.rpki-client.org