Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/980927e9-9aa3-409b-b2d7-b931e8207256/48b49f524ef059bf2604dd803fb5263b84235ec7.roa
File:                     48b49f524ef059bf2604dd803fb5263b84235ec7.roa (raw, json)
Hash identifier:          tU/AD37O2V0uN2xzXcQJZebuahrhhfUWgsLpPUDGQRk=
Subject key identifier:   3B:68:9C:0F:BF:45:D5:52:32:74:09:21:EA:E0:20:D5:2F:46:C1:65
Certificate issuer:       /CN=79522e563fe4ebcd1515707caeb1e39dc8242e1c
Certificate serial:       217E07
Authority key identifier: 01:9B:81:0A:28:11:FB:6F:6E:5D:BC:84:4E:28:D7:34:42:45:3E:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79522e563fe4ebcd1515707caeb1e39dc8242e1c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/980927e9-9aa3-409b-b2d7-b931e8207256/48b49f524ef059bf2604dd803fb5263b84235ec7.roa
Signing time:             Fri 09 Jun 2023 11:13:51 +0000
ROA not before:           Thu 08 Jun 2023 11:13:51 +0000
ROA not after:            Mon 09 Jun 2025 11:13:51 +0000
asID:                     265801
IP address blocks:        190.103.24.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2194951 (0x217e07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79522e563fe4ebcd1515707caeb1e39dc8242e1c
        Validity
            Not Before: Jun  8 11:13:51 2023 GMT
            Not After : Jun  9 11:13:51 2025 GMT
        Subject: CN=48b49f524ef059bf2604dd803fb5263b84235ec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b8:d3:18:75:58:d2:4a:49:81:ed:17:07:61:
                    f2:62:ce:ec:65:65:7a:d4:c0:c2:b4:cd:b4:c3:8a:
                    6d:e8:63:6d:2c:79:04:18:eb:ed:77:73:da:bb:6f:
                    82:80:76:61:0b:1a:6d:4e:16:57:7d:e3:f2:d5:5f:
                    28:c0:89:72:c0:51:01:d7:2d:a4:0d:b5:c4:0b:a7:
                    2b:9d:de:b0:c4:d6:76:ac:ca:84:87:39:34:ae:68:
                    d0:c7:72:9a:0b:a9:ea:92:ec:7b:df:91:5e:87:80:
                    18:19:02:ae:ce:4b:a5:12:00:89:3b:da:fe:e6:a4:
                    9d:76:b0:b5:5e:80:0d:69:16:94:88:a2:56:ed:b7:
                    97:6b:02:65:b8:ab:45:fb:0c:b5:ca:09:27:3b:40:
                    66:a6:a1:42:0b:a4:0b:8d:14:6c:05:ee:c1:2c:b6:
                    32:44:30:f3:0c:99:2b:6d:77:03:55:3d:38:e9:ee:
                    2f:06:ba:7b:5d:5e:6e:32:75:48:db:37:b5:8c:d8:
                    47:57:1c:97:3e:7a:9c:7a:4c:01:e3:67:f0:0b:bd:
                    c5:c5:76:9f:19:29:e3:e8:b9:30:1f:3b:d9:c6:7d:
                    39:65:1f:df:1e:ca:95:1c:0f:85:bf:d2:82:d7:6d:
                    9d:7d:a8:23:fc:7c:04:d3:fb:9e:45:50:a7:39:27:
                    9c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:68:9C:0F:BF:45:D5:52:32:74:09:21:EA:E0:20:D5:2F:46:C1:65
            X509v3 Authority Key Identifier:
                keyid:01:9B:81:0A:28:11:FB:6F:6E:5D:BC:84:4E:28:D7:34:42:45:3E:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79522e563fe4ebcd1515707caeb1e39dc8242e1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/980927e9-9aa3-409b-b2d7-b931e8207256/48b49f524ef059bf2604dd803fb5263b84235ec7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/980927e9-9aa3-409b-b2d7-b931e8207256/79522e563fe4ebcd1515707caeb1e39dc8242e1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:f5:63:13:11:cd:89:2e:72:60:25:a2:11:a2:ed:64:ad:10:
         9c:55:87:37:7b:b4:32:43:d4:da:db:40:ef:80:c8:88:b1:8a:
         9e:48:5e:58:1f:4e:cb:78:b9:88:32:de:4a:3e:b0:da:1f:ed:
         a0:ec:11:32:08:d0:e4:e0:78:17:03:ee:85:f8:f0:36:ae:9e:
         67:08:19:74:56:19:9d:50:86:37:2d:27:16:68:dc:2c:53:d9:
         ba:43:0e:cf:c1:01:38:b9:d1:c9:06:c8:47:80:67:02:8b:18:
         21:6d:7a:52:73:61:f5:e7:d7:a6:f0:bf:e9:f9:fe:09:f0:00:
         6c:ac:06:b0:8c:fc:c5:be:de:7c:28:8d:b3:63:07:31:2a:5a:
         2c:8c:b9:2b:8f:e5:b4:02:2f:85:52:76:56:6e:cc:a3:01:e3:
         a3:90:b3:6e:64:72:18:78:4c:19:c6:0c:e5:de:5e:61:7b:84:
         74:e5:67:fd:11:b1:f8:34:c5:89:8b:03:47:af:6b:14:5e:f4:
         9f:50:81:bc:2f:4a:74:50:73:3b:19:af:42:8b:08:19:ac:72:
         2b:43:20:ea:29:9a:e7:00:e3:cd:9e:d5:b9:d9:2f:4c:7a:01:
         d3:ac:ab:10:a8:95:35:95:4d:a4:86:0f:fb:2b:81:55:0f:b0:
         ef:1a:20:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:25 2024 by rpki-client on console-fra.rpki-client.org