Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/90934775-c878-4439-a184-f55526519fdc/18ee485084c05865060e5c5db77fb0dcb61a64c6.roa
File:                     18ee485084c05865060e5c5db77fb0dcb61a64c6.roa (raw, json)
Hash identifier:          MSSdTABTCO4pKP5fwIQNSA20yAda+tygLlrN6cx9XPw=
Subject key identifier:   EF:9F:46:CD:AA:4D:AC:E4:6B:1E:7D:9D:F2:4D:A7:A7:87:87:1A:B1
Certificate issuer:       /CN=9bb023dfb8c7391beb7a21f28cbab58003195488
Certificate serial:       168322
Authority key identifier: 07:42:66:DF:39:FB:E6:4F:E9:DC:83:5C:28:C3:EB:26:EF:E4:0A:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bb023dfb8c7391beb7a21f28cbab58003195488.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/90934775-c878-4439-a184-f55526519fdc/18ee485084c05865060e5c5db77fb0dcb61a64c6.roa
Signing time:             Mon 27 Nov 2023 15:09:55 +0000
ROA not before:           Mon 27 Nov 2023 15:09:55 +0000
ROA not after:            Thu 27 Nov 2025 15:09:55 +0000
asID:                     52493
IP address blocks:        179.60.228.0/22 maxlen: 24
                          168.90.72.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1475362 (0x168322)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bb023dfb8c7391beb7a21f28cbab58003195488
        Validity
            Not Before: Nov 27 15:09:55 2023 GMT
            Not After : Nov 27 15:09:55 2025 GMT
        Subject: CN=18ee485084c05865060e5c5db77fb0dcb61a64c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0d:37:43:53:61:1f:94:ca:43:d3:59:c6:2f:
                    b4:a7:a0:09:ea:28:7d:6f:5a:82:62:77:77:f8:12:
                    87:6d:1f:71:d4:bb:6f:0b:91:74:1a:77:a1:5f:e2:
                    8f:76:5d:ce:0e:48:10:18:7e:db:20:8a:3f:8b:86:
                    ca:91:d3:2c:e7:10:6f:64:17:f7:05:35:16:6d:4e:
                    12:9b:91:66:77:8d:6c:74:fd:5f:10:3d:9c:c5:be:
                    8d:62:e8:7f:ea:de:30:f6:a6:45:bc:0c:67:81:ee:
                    7a:69:49:3e:a3:97:61:9f:82:1c:65:c2:31:d8:66:
                    37:14:e3:68:1d:01:d3:76:f9:7a:0d:0c:ce:19:bd:
                    4e:7a:21:49:dd:f6:5b:6c:fb:f3:98:be:13:8b:47:
                    d5:bb:66:b9:e2:25:3d:32:fe:11:35:89:bf:5e:b7:
                    55:d9:74:2d:3a:87:37:b3:5a:9d:7b:92:96:c8:d7:
                    09:6d:38:9b:f8:c4:24:d2:2c:29:cf:16:aa:6f:ff:
                    9a:1e:67:9c:50:c8:51:0d:51:cf:61:49:ae:a6:f8:
                    da:cf:e3:5d:1b:bd:68:b1:1d:f3:84:6c:27:d4:f4:
                    13:03:d1:bc:1f:1d:15:e2:fa:e4:ad:c5:c4:6e:1c:
                    d9:61:df:b4:85:df:a5:85:66:52:f9:c9:06:dd:c1:
                    b3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:9F:46:CD:AA:4D:AC:E4:6B:1E:7D:9D:F2:4D:A7:A7:87:87:1A:B1
            X509v3 Authority Key Identifier:
                keyid:07:42:66:DF:39:FB:E6:4F:E9:DC:83:5C:28:C3:EB:26:EF:E4:0A:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bb023dfb8c7391beb7a21f28cbab58003195488.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/90934775-c878-4439-a184-f55526519fdc/18ee485084c05865060e5c5db77fb0dcb61a64c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/90934775-c878-4439-a184-f55526519fdc/9bb023dfb8c7391beb7a21f28cbab58003195488.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.72.0/22
                  179.60.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:96:ef:e0:8a:ff:4d:ca:b6:ee:60:d2:b9:b4:d8:79:9d:eb:
         33:7a:21:7b:ec:8d:a2:40:3a:7d:7d:54:01:b0:1b:7e:86:7c:
         17:d7:e4:81:f6:78:2e:8a:2c:0d:7c:20:44:22:a1:21:1d:b3:
         7d:71:03:13:ea:9e:8d:b6:5e:bc:f8:56:53:90:26:17:e4:dc:
         14:8b:65:1d:46:e3:03:3f:67:ba:ec:c4:24:e2:cc:49:b4:73:
         07:78:97:a9:35:32:4a:3f:ba:7d:90:2f:42:de:b2:e3:07:cc:
         e7:4e:e4:c2:64:d3:3f:46:bb:00:63:d4:53:14:85:3d:60:f4:
         dc:05:38:42:74:2b:49:de:9c:71:50:23:79:be:e8:df:ef:7a:
         d7:ff:3a:d7:dc:3b:28:32:2f:ca:4e:e5:da:ff:ec:90:2a:0d:
         59:cd:bf:1e:b5:46:7a:31:94:b1:7d:b5:38:d2:a1:c7:2e:86:
         95:6a:c0:ce:2f:c2:ab:46:8f:a4:e9:b5:0d:9f:58:fe:1a:5f:
         3b:b0:23:91:b3:7b:5a:62:0b:2d:7e:05:be:e9:60:80:f6:84:
         61:70:dc:a7:d4:21:d5:c0:72:23:35:53:ea:ea:90:a1:87:cb:
         1e:cb:e4:85:46:92:f1:80:9a:9a:ae:05:3c:03:b2:ba:6a:67:
         4f:39:52:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:54 2024 by rpki-client on console-fra.rpki-client.org