Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/58c162995dee53e26e4b18640571b4c16ca1b147.roa
File:                     58c162995dee53e26e4b18640571b4c16ca1b147.roa (raw, json)
Hash identifier:          iMb3P4CeLybeWEHzrKEQCVw0uQ7T2mXX1IcDICn0AX4=
Subject key identifier:   42:E4:59:3C:7D:AA:F7:88:82:23:06:BB:73:89:3A:A7:D6:BA:33:E8
Certificate issuer:       /CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Certificate serial:       1DF848
Authority key identifier: CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/58c162995dee53e26e4b18640571b4c16ca1b147.roa
Signing time:             Mon 08 May 2023 17:10:30 +0000
ROA not before:           Sun 07 May 2023 17:10:30 +0000
ROA not after:            Thu 08 May 2025 17:10:30 +0000
asID:                     265541
IP address blocks:        189.204.164.0/23 maxlen: 23
                          189.204.208.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1964104 (0x1df848)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
        Validity
            Not Before: May  7 17:10:30 2023 GMT
            Not After : May  8 17:10:30 2025 GMT
        Subject: CN=58c162995dee53e26e4b18640571b4c16ca1b147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e6:20:83:20:db:83:aa:97:7d:5f:7c:b3:b6:
                    17:11:2c:bd:7e:06:19:49:a3:7e:47:58:60:53:4f:
                    f5:88:59:46:b5:54:1d:97:02:5c:b5:11:6a:65:95:
                    a1:73:c4:e6:30:2d:67:6b:26:df:6b:fb:c7:30:e6:
                    ee:ba:e4:02:8c:ab:78:d0:cf:ee:4b:8c:3d:c0:61:
                    69:eb:3f:3e:53:44:df:a8:bd:70:ec:6f:08:82:c3:
                    49:f6:43:cc:02:35:03:7a:e8:18:08:5f:0d:27:41:
                    97:da:4a:de:04:4d:d9:0c:80:42:e5:b5:80:cd:89:
                    91:94:42:64:68:f9:7e:d8:28:ed:b8:15:5b:b0:32:
                    38:c7:60:01:57:4b:9f:6e:1a:86:a9:56:22:e5:97:
                    78:b0:b3:e5:45:aa:91:b1:c4:f1:d0:70:14:5e:08:
                    d4:ac:88:9f:83:c7:03:66:07:c8:db:a7:17:44:f6:
                    98:d8:11:90:73:c0:61:0c:bd:13:6d:23:6a:b6:bd:
                    6a:c9:8e:6e:ce:91:30:05:16:7d:f2:2e:4f:ae:2b:
                    93:ea:ce:f6:28:7e:2b:7d:b6:d8:e1:a5:81:93:c8:
                    85:98:6a:85:f6:57:ab:75:89:bf:2a:5d:15:40:e2:
                    88:1d:ae:04:8f:c6:49:52:7c:95:fb:6e:72:e7:28:
                    78:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E4:59:3C:7D:AA:F7:88:82:23:06:BB:73:89:3A:A7:D6:BA:33:E8
            X509v3 Authority Key Identifier:
                keyid:CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/58c162995dee53e26e4b18640571b4c16ca1b147.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.204.164.0/23
                  189.204.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:be:6d:fe:a2:ad:c7:a3:b6:16:36:ce:53:00:2c:b4:a6:44:
         51:14:b8:c5:83:99:e2:b5:cc:6c:0e:a7:27:4b:96:88:d3:37:
         aa:ef:60:94:08:8b:08:5c:4b:8a:b4:18:d1:64:c4:b7:0f:24:
         99:c1:68:a5:c6:d8:d9:ea:5f:11:a4:7e:3c:ee:93:ea:ee:89:
         e2:72:4b:a1:40:49:33:60:57:24:ce:24:8e:22:0f:8b:d1:f5:
         29:03:26:3b:b4:bb:e5:cd:5d:5f:47:81:89:0c:02:5e:5d:13:
         03:d6:df:8f:cc:25:4a:f9:c4:cf:59:3f:86:e6:a5:2f:a3:a2:
         25:fd:46:06:52:74:be:49:82:a0:e9:15:0c:fe:ca:06:4f:11:
         66:5d:57:48:57:c3:1c:ad:23:d7:dc:96:90:4b:df:aa:28:9d:
         73:8a:fa:95:ed:78:fc:39:3f:28:48:ce:40:08:66:a5:c6:5c:
         e6:ab:d9:03:e9:87:e9:0b:89:ce:69:99:29:13:28:08:1a:f6:
         d1:4a:bd:cd:85:cf:c4:55:cd:22:27:f5:f4:84:e6:6b:b8:cb:
         9f:a8:b1:7a:61:dd:c0:48:e5:12:1e:b8:c1:e1:e8:dd:ef:cf:
         d4:2a:07:f8:6c:05:a2:f9:46:b7:3e:d2:f7:db:e2:d6:68:e0:
         c6:38:64:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:59 2024 by rpki-client on console-fra.rpki-client.org