Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9f337d6d-5aac-4ba6-a6a0-f717dbf6b2e5/9797b9550a5b4b9cd8f03494f65e249400405f41.roa
File:                     9797b9550a5b4b9cd8f03494f65e249400405f41.roa (raw, json)
Hash identifier:          oGMHMZbbM1/9Xkbg6bjwmBEkPL2bRxl4owi8YjW78Uw=
Subject key identifier:   BF:06:52:B4:F2:72:88:79:CA:A6:03:A4:BA:D8:AF:FA:0F:1F:D8:FA
Certificate issuer:       /CN=493602240364e8c2a8419a3e9d0843be8cf08cdd
Certificate serial:       13F24A
Authority key identifier: 4A:00:4B:1F:6E:62:90:3B:4C:71:26:E4:65:3F:69:BE:5A:2F:1F:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/493602240364e8c2a8419a3e9d0843be8cf08cdd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9f337d6d-5aac-4ba6-a6a0-f717dbf6b2e5/9797b9550a5b4b9cd8f03494f65e249400405f41.roa
Signing time:             Sat 04 Nov 2023 01:15:42 +0000
ROA not before:           Sat 04 Nov 2023 01:15:42 +0000
ROA not after:            Tue 04 Nov 2025 01:15:42 +0000
asID:                     52414
IP address blocks:        190.92.96.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1307210 (0x13f24a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=493602240364e8c2a8419a3e9d0843be8cf08cdd
        Validity
            Not Before: Nov  4 01:15:42 2023 GMT
            Not After : Nov  4 01:15:42 2025 GMT
        Subject: CN=9797b9550a5b4b9cd8f03494f65e249400405f41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9a:29:dd:fe:2b:28:3d:c3:d0:f3:62:82:13:
                    ce:96:48:70:eb:6f:6b:33:39:81:70:4c:6d:76:f5:
                    a0:5f:8f:63:ae:3f:61:68:18:d0:14:1f:88:39:59:
                    4c:fb:1a:1e:93:35:25:f8:47:af:5a:f8:66:70:04:
                    84:a4:b6:36:34:5f:f3:dd:c6:39:cf:a3:a6:35:f8:
                    67:83:6e:fd:47:9a:c6:ea:c3:e5:27:ec:9a:46:a8:
                    9a:d9:e9:47:f2:d3:2e:25:53:df:09:20:3d:4b:83:
                    98:c7:10:cb:3c:96:33:96:a1:c7:ca:85:99:b9:f3:
                    84:e1:1e:d2:b4:55:2e:b2:b1:fc:d6:6b:eb:49:f7:
                    63:c0:29:ec:b8:50:35:c4:d9:4d:b1:8d:17:d3:3c:
                    44:ac:86:9e:50:77:9e:e4:b6:2e:4a:66:4f:9b:6f:
                    ce:60:71:ba:46:4f:2f:ae:09:8f:80:94:c5:cc:eb:
                    ee:46:2a:7f:c1:d9:30:42:eb:44:6e:d7:73:65:ab:
                    b3:a8:dc:01:61:f3:24:56:75:99:e1:c1:66:be:d6:
                    2f:46:f1:dd:9c:95:1e:7a:89:74:12:3a:6e:be:19:
                    58:9e:5f:47:db:80:df:d7:b7:ae:f2:0c:db:29:5d:
                    57:f8:5f:6e:78:f2:51:39:0a:84:1c:39:e5:f1:a2:
                    39:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:06:52:B4:F2:72:88:79:CA:A6:03:A4:BA:D8:AF:FA:0F:1F:D8:FA
            X509v3 Authority Key Identifier:
                keyid:4A:00:4B:1F:6E:62:90:3B:4C:71:26:E4:65:3F:69:BE:5A:2F:1F:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/493602240364e8c2a8419a3e9d0843be8cf08cdd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9f337d6d-5aac-4ba6-a6a0-f717dbf6b2e5/9797b9550a5b4b9cd8f03494f65e249400405f41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9f337d6d-5aac-4ba6-a6a0-f717dbf6b2e5/493602240364e8c2a8419a3e9d0843be8cf08cdd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.92.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         61:e9:3d:ea:fe:b0:18:ee:c4:19:81:15:76:8c:13:26:fe:33:
         35:91:c3:0a:62:12:02:a6:c6:c8:8e:e5:5e:8a:9a:a6:0a:cb:
         74:4a:aa:4c:e9:8b:48:e8:c8:1c:2c:ef:c3:2a:1b:86:0e:44:
         ce:f5:0c:c4:26:97:00:f7:1c:a8:ea:32:95:e8:4c:b3:92:13:
         15:ad:d4:2d:30:a0:bf:a8:a3:14:7d:67:4e:02:db:bb:f7:7d:
         40:c9:cf:6c:3d:e1:9d:c5:97:b9:85:3c:cb:9c:d9:96:d2:04:
         30:30:7a:12:a7:28:21:f6:42:18:8c:41:de:bf:52:5d:12:69:
         e5:ef:19:00:34:b6:33:bb:2a:8d:82:3f:da:44:59:e3:33:d7:
         54:9f:7b:97:f4:37:6d:4a:2c:65:a7:fc:83:53:3f:9f:b2:a8:
         60:27:ff:7e:e7:9d:07:8d:0d:67:2c:09:79:03:2b:13:75:90:
         ef:2a:89:73:e9:6b:30:82:9d:6a:f0:d3:68:97:f5:a1:fd:9b:
         39:8e:4b:85:8a:8b:80:b9:20:8c:d4:b4:6c:35:28:09:b2:1a:
         7d:c1:ad:4a:94:60:58:0f:41:38:3c:61:cf:bc:79:33:99:98:
         99:2c:ca:a7:dd:48:ca:52:2e:17:c5:6a:0e:fd:84:7c:86:60:
         0d:79:2e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-ams.rpki-client.org