Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/90934775-c878-4439-a184-f55526519fdc/9db9589404b2752e6fc0a9981edfd6e277c82537.roa
File:                     9db9589404b2752e6fc0a9981edfd6e277c82537.roa (raw, json)
Hash identifier:          qyWI0u1cr0xiKNUNfQzV5tj7WzzU+MvjfFHys6d30uw=
Subject key identifier:   DF:D9:B1:F6:3C:AC:2E:BF:67:44:BF:EE:76:D3:73:B4:07:3E:DF:35
Certificate issuer:       /CN=603e7d46b70d7d73178e8bdda798f182daa1be7f
Certificate serial:       17DFD3
Authority key identifier: 70:DF:AD:A4:EB:A7:E2:32:F9:61:87:2E:45:4C:D0:E6:0D:81:79:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/603e7d46b70d7d73178e8bdda798f182daa1be7f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/90934775-c878-4439-a184-f55526519fdc/9db9589404b2752e6fc0a9981edfd6e277c82537.roa
Signing time:             Mon 15 Jan 2024 19:29:21 +0000
ROA not before:           Mon 15 Jan 2024 19:29:21 +0000
ROA not after:            Thu 15 Jan 2026 19:29:21 +0000
asID:                     52493
IP address blocks:        179.60.228.0/22 maxlen: 22
                          179.60.228.0/24 maxlen: 24
                          179.60.229.0/24 maxlen: 24
                          179.60.230.0/24 maxlen: 24
                          179.60.231.0/24 maxlen: 24
                          168.90.72.0/22 maxlen: 22
                          168.90.72.0/24 maxlen: 24
                          168.90.73.0/24 maxlen: 24
                          168.90.74.0/24 maxlen: 24
                          168.90.75.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1564627 (0x17dfd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=603e7d46b70d7d73178e8bdda798f182daa1be7f
        Validity
            Not Before: Jan 15 19:29:21 2024 GMT
            Not After : Jan 15 19:29:21 2026 GMT
        Subject: CN=9db9589404b2752e6fc0a9981edfd6e277c82537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:cf:c1:9b:5c:73:a7:00:15:59:09:8f:b2:87:
                    70:d7:f7:d2:5b:f9:ce:a2:f4:55:ca:c1:f3:54:b4:
                    6f:45:ba:05:85:33:d2:32:98:90:bd:14:2c:86:5a:
                    45:39:89:c4:a7:96:f2:53:2f:4e:8e:e6:bd:1d:11:
                    9e:17:fb:5b:48:59:d5:b0:a8:66:46:66:28:4c:63:
                    39:76:7b:d2:94:17:85:c4:18:86:f5:d9:49:b3:0c:
                    76:14:93:06:cd:cd:23:73:03:1f:0f:5d:eb:04:f9:
                    d1:b2:23:42:4f:b3:8a:1f:78:73:bc:f0:c3:e4:c2:
                    a7:d7:a7:16:ae:42:19:b2:41:50:10:f0:98:66:dd:
                    a1:9b:f2:b3:38:83:33:20:7c:d4:a2:0a:d0:c4:af:
                    96:f3:53:cc:b4:b0:3c:6b:33:5e:f3:55:dd:8d:38:
                    a6:d5:48:52:6f:fd:c3:a4:74:c4:70:38:d3:59:1c:
                    72:15:1b:27:0e:38:8b:f5:3c:a1:21:c2:41:a4:20:
                    55:b0:ba:76:ab:50:8b:fa:0e:71:2e:8a:31:6e:dc:
                    9c:b3:6a:f2:f2:ca:25:11:a8:a9:1f:fc:2b:22:1d:
                    ae:38:f6:49:5e:d3:94:b6:72:d6:89:ee:f0:9d:66:
                    79:82:7a:1a:ee:5a:ce:d4:89:57:80:d0:26:d9:ce:
                    cd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D9:B1:F6:3C:AC:2E:BF:67:44:BF:EE:76:D3:73:B4:07:3E:DF:35
            X509v3 Authority Key Identifier:
                keyid:70:DF:AD:A4:EB:A7:E2:32:F9:61:87:2E:45:4C:D0:E6:0D:81:79:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/603e7d46b70d7d73178e8bdda798f182daa1be7f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/90934775-c878-4439-a184-f55526519fdc/9db9589404b2752e6fc0a9981edfd6e277c82537.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/90934775-c878-4439-a184-f55526519fdc/603e7d46b70d7d73178e8bdda798f182daa1be7f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.72.0/22
                  179.60.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:77:3c:18:68:64:c1:cd:24:32:57:0e:37:bd:4c:af:0e:58:
         e6:f2:6d:c1:3a:07:19:cf:94:c1:7b:ec:ae:88:5c:31:85:07:
         97:3f:d5:9d:7d:b2:42:fc:c1:f8:3a:5a:3f:4e:aa:a0:fa:c1:
         88:f4:84:6f:4e:02:9d:74:38:d8:03:42:46:5f:a4:36:ba:a1:
         64:96:49:71:57:7a:26:ea:39:6c:1b:26:f1:e4:7d:7d:ee:3f:
         72:11:56:3c:34:de:d5:e0:54:57:9b:28:36:ed:2e:5d:93:aa:
         83:52:cd:e1:4a:13:35:cb:86:64:d6:6b:e1:5d:ed:95:7f:9f:
         07:6d:4d:c8:06:ee:bf:17:28:f0:bd:87:e4:dd:b5:22:7e:7f:
         05:33:c1:54:ae:d7:bf:74:54:06:3e:e8:62:be:84:7c:32:dc:
         27:0d:15:c9:0c:98:c2:ee:71:71:ea:c3:6b:cd:76:08:c3:b9:
         7b:e1:81:e2:92:4d:be:f4:87:ef:43:19:cb:50:b1:22:3e:19:
         5f:84:ab:cf:60:09:d8:46:b4:d3:16:a6:71:16:13:81:ae:08:
         c0:a9:50:ae:80:6c:2d:a2:32:5d:c0:6b:39:4a:e8:49:9a:19:
         07:e8:04:cd:54:25:ad:96:a0:9b:1b:f2:49:2e:00:ca:2a:e9:
         e8:9d:55:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:54 2024 by rpki-client on console-fra.rpki-client.org