Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/d5dc4167b95f994ae118a5c41a0e70425bc3e3f8.roa
File:                     d5dc4167b95f994ae118a5c41a0e70425bc3e3f8.roa (raw, json)
Hash identifier:          awX+lYEc9M7xt6Xg3hd8YHu2vbZKVOBz962fLHE2kxk=
Subject key identifier:   EF:13:55:24:0E:A4:3D:CC:06:EE:2B:9B:22:96:5D:29:BB:6E:43:19
Certificate issuer:       /CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Certificate serial:       1DFB6E
Authority key identifier: CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/d5dc4167b95f994ae118a5c41a0e70425bc3e3f8.roa
Signing time:             Mon 08 May 2023 17:10:30 +0000
ROA not before:           Sun 07 May 2023 17:10:30 +0000
ROA not after:            Thu 08 May 2025 17:10:30 +0000
asID:                     28548
IP address blocks:        189.202.230.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1964910 (0x1dfb6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
        Validity
            Not Before: May  7 17:10:30 2023 GMT
            Not After : May  8 17:10:30 2025 GMT
        Subject: CN=d5dc4167b95f994ae118a5c41a0e70425bc3e3f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e2:89:14:68:c7:6f:0d:83:39:94:03:77:2b:
                    78:b3:38:b3:5f:cd:fd:4d:7b:d5:fb:dc:f8:11:5f:
                    2a:f4:6f:9a:45:76:15:ab:2a:3b:57:bc:9a:e3:44:
                    0e:70:05:b1:6e:97:ad:1c:10:a1:c5:7f:0d:f9:04:
                    87:e9:fb:a5:ff:95:c6:fe:25:ac:60:bc:43:cb:f2:
                    8c:4f:30:a9:58:d5:a8:32:29:20:66:51:a3:7e:d3:
                    fe:ed:98:99:5d:81:22:99:5a:b0:56:63:5e:68:f8:
                    0b:44:41:3e:18:c3:2d:3b:c3:71:cf:6c:25:a9:9b:
                    4e:40:38:10:41:1e:89:f8:20:d2:bb:53:aa:91:37:
                    1c:19:7d:34:67:8a:25:38:71:ab:cb:25:48:93:a8:
                    a2:e1:5c:11:4f:c2:9d:14:8d:e3:02:96:c8:9b:f5:
                    1f:e8:10:4c:c4:70:ab:dd:97:db:4d:94:ef:37:82:
                    9e:ea:f6:6c:6c:c3:75:d9:7c:a5:18:92:b4:07:d0:
                    50:ec:63:dd:3e:d4:12:76:9c:6a:9b:6e:be:b4:0a:
                    8a:95:ed:c1:36:f5:a8:6b:4b:41:71:a2:dc:df:c1:
                    a1:3f:9f:a9:62:3e:25:94:5e:9a:fc:de:01:de:c7:
                    d6:6a:21:ac:80:70:c5:17:9f:c6:90:89:42:cf:61:
                    0c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:13:55:24:0E:A4:3D:CC:06:EE:2B:9B:22:96:5D:29:BB:6E:43:19
            X509v3 Authority Key Identifier:
                keyid:CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/d5dc4167b95f994ae118a5c41a0e70425bc3e3f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.202.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:3d:32:b6:f3:39:d1:1a:90:e8:d4:d4:6e:54:87:48:5b:e6:
         0f:00:cf:9a:05:9f:6d:78:75:ad:e4:10:6d:88:85:2d:a5:5a:
         b9:bb:01:4e:7c:8b:3e:e0:b6:2c:e6:bf:ca:1a:17:f4:00:b3:
         5a:bd:77:5a:e1:29:11:e7:a9:eb:ff:72:66:27:7a:82:eb:39:
         cd:2d:20:23:d1:35:c0:62:24:eb:20:a3:af:a8:be:30:b0:d2:
         4a:ec:aa:af:60:95:ba:bd:28:c4:0e:35:cc:50:0c:42:56:10:
         be:0b:c2:7b:ec:b1:90:82:5e:81:26:88:fd:4b:34:99:b1:4a:
         93:e4:6d:fc:07:5b:97:ae:51:a8:ba:34:88:6e:87:e4:5b:f6:
         ad:da:26:07:40:de:14:b5:11:75:8a:b6:c1:89:76:26:de:c9:
         8e:b8:cf:c0:e9:e9:a0:61:23:8f:fb:60:d2:66:c5:dc:83:78:
         c4:43:3a:6e:c7:01:16:50:8b:eb:10:ea:42:88:47:7e:63:5c:
         fc:2a:07:e3:a5:40:85:16:a5:ea:b2:a9:15:c7:18:53:f2:5d:
         53:99:4f:b6:f7:62:ac:6d:40:b6:1c:79:9c:21:ac:13:0b:a5:
         5e:69:a4:6a:b2:f1:24:9c:ff:59:59:5a:b4:c9:f0:01:4b:2f:
         9a:75:72:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:44 2024 by rpki-client on console-ams.rpki-client.org