Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9f337d6d-5aac-4ba6-a6a0-f717dbf6b2e5/f0ed2e6cc3a2e176326d022e314069faa966b256.roa
File:                     f0ed2e6cc3a2e176326d022e314069faa966b256.roa (raw, json)
Hash identifier:          4T6MIO4LPlZRKc6DAOMnYuTRxf72o9TNyIKOOAAIcug=
Subject key identifier:   BE:EB:53:46:7A:48:73:9F:13:2D:D7:AD:98:AF:E4:66:B9:56:53:1B
Certificate issuer:       /CN=493602240364e8c2a8419a3e9d0843be8cf08cdd
Certificate serial:       13EE81
Authority key identifier: 4A:00:4B:1F:6E:62:90:3B:4C:71:26:E4:65:3F:69:BE:5A:2F:1F:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/493602240364e8c2a8419a3e9d0843be8cf08cdd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9f337d6d-5aac-4ba6-a6a0-f717dbf6b2e5/f0ed2e6cc3a2e176326d022e314069faa966b256.roa
Signing time:             Sat 04 Nov 2023 00:58:28 +0000
ROA not before:           Sat 04 Nov 2023 00:58:28 +0000
ROA not after:            Tue 04 Nov 2025 00:58:28 +0000
asID:                     52414
IP address blocks:        190.92.96.0/21 maxlen: 21
                          2803:3e00::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1306241 (0x13ee81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=493602240364e8c2a8419a3e9d0843be8cf08cdd
        Validity
            Not Before: Nov  4 00:58:28 2023 GMT
            Not After : Nov  4 00:58:28 2025 GMT
        Subject: CN=f0ed2e6cc3a2e176326d022e314069faa966b256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3e:81:00:73:fd:4b:82:e8:05:2d:a3:1c:36:
                    f0:0c:30:a4:3d:2e:3c:7d:bb:b6:cb:82:d7:7a:9a:
                    cd:1f:99:e2:a1:16:f2:d3:58:27:57:12:77:2e:c5:
                    32:86:75:c9:ed:aa:b6:ed:84:98:13:2d:7c:bd:3d:
                    f4:04:b2:67:26:4d:24:96:a2:0c:03:a3:f5:31:09:
                    76:90:4e:1a:5e:4a:b5:b8:a1:db:97:2e:ac:4f:aa:
                    fd:4b:b2:32:62:55:84:bf:cb:20:85:c7:71:9e:2a:
                    bd:dc:07:59:aa:c1:28:bd:9c:c6:46:7c:24:7d:72:
                    26:d8:44:d3:18:06:26:69:20:af:5a:4f:c3:0d:44:
                    79:3e:cb:62:1c:de:fb:af:fa:e5:85:37:8e:7d:ab:
                    65:cb:c9:46:9d:ac:76:f8:f3:24:a2:83:15:07:c9:
                    58:17:24:3f:00:af:1f:1c:63:be:51:ec:bd:51:0e:
                    30:7e:52:97:0e:8a:83:2b:08:a8:d2:d0:e2:a4:47:
                    d0:9c:26:b9:f9:d2:66:f0:9d:b9:b2:d5:88:e8:70:
                    9b:03:07:e5:78:c6:3a:9d:f5:28:24:c1:87:a0:cf:
                    d6:64:42:de:63:ea:80:67:0f:31:68:2d:e6:1f:6d:
                    e0:14:da:1a:fb:1b:2a:02:37:29:ee:7d:96:bb:cd:
                    dc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:EB:53:46:7A:48:73:9F:13:2D:D7:AD:98:AF:E4:66:B9:56:53:1B
            X509v3 Authority Key Identifier:
                keyid:4A:00:4B:1F:6E:62:90:3B:4C:71:26:E4:65:3F:69:BE:5A:2F:1F:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/493602240364e8c2a8419a3e9d0843be8cf08cdd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9f337d6d-5aac-4ba6-a6a0-f717dbf6b2e5/f0ed2e6cc3a2e176326d022e314069faa966b256.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9f337d6d-5aac-4ba6-a6a0-f717dbf6b2e5/493602240364e8c2a8419a3e9d0843be8cf08cdd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.92.96.0/21
                IPv6:
                  2803:3e00::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:33:7b:a0:54:3a:1b:40:31:3b:b2:8e:b1:13:fa:08:b0:3b:
         92:14:bf:19:f4:e1:67:bb:21:24:d5:14:7e:62:6b:b0:00:a1:
         b1:e3:d7:ff:eb:3c:a9:4b:15:4e:48:f7:5a:1a:b7:b8:90:ec:
         71:70:54:07:41:ab:b8:c9:e0:37:6f:2b:7f:ed:ea:87:89:03:
         9a:90:27:6a:d2:a1:2e:ca:b2:0b:9d:64:03:4f:53:b3:1b:5d:
         69:7b:2c:53:33:78:0c:4f:41:de:be:97:dd:85:5b:2a:05:ec:
         68:af:bc:5e:47:f8:b8:24:5f:b4:fc:d7:b7:c7:f5:da:b9:07:
         e4:10:33:01:91:59:b2:3e:f6:aa:b9:3d:0e:cc:e0:75:6d:59:
         a3:7b:99:92:66:f6:95:3c:ff:8c:46:eb:a8:19:2d:e3:2b:4b:
         54:b8:db:36:74:bd:35:a5:59:90:59:2c:2f:07:4f:3f:c3:4f:
         cc:12:f6:57:0b:6c:b9:7b:80:47:44:36:4d:f6:fd:7e:a5:67:
         86:ed:a9:07:64:aa:fe:e6:5a:7d:06:10:03:d3:c0:f4:87:4d:
         77:2e:2f:f7:9d:74:07:a9:7f:82:0a:2b:62:a0:75:a7:80:88:
         7a:a9:2c:c6:f1:0b:55:54:61:82:35:0c:6b:5a:96:1d:f8:0f:
         49:ca:8c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:59 2024 by rpki-client on console-fra.rpki-client.org