Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/db99252ee160b7c79db812d8916366d900ba7fab.roa
File:                     db99252ee160b7c79db812d8916366d900ba7fab.roa (raw, json)
Hash identifier:          RNVEmZ75oO2lkh0+8soZic/C5y7owJcIqg77xN5wIO4=
Subject key identifier:   DC:B0:54:60:4B:CB:6A:DD:35:F0:3D:08:DB:55:B7:79:D3:35:F8:98
Certificate issuer:       /CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Certificate serial:       1E0AA8
Authority key identifier: CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/db99252ee160b7c79db812d8916366d900ba7fab.roa
Signing time:             Mon 08 May 2023 17:10:31 +0000
ROA not before:           Sun 07 May 2023 17:10:30 +0000
ROA not after:            Thu 08 May 2025 17:10:30 +0000
asID:                     28548
IP address blocks:        189.202.230.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1968808 (0x1e0aa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
        Validity
            Not Before: May  7 17:10:30 2023 GMT
            Not After : May  8 17:10:30 2025 GMT
        Subject: CN=db99252ee160b7c79db812d8916366d900ba7fab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:86:3f:a4:ca:cf:0e:46:d7:16:38:4e:ed:f5:
                    b3:35:b6:74:ef:7b:45:4a:58:63:93:6f:31:6b:22:
                    a8:d6:13:69:5a:bf:69:d9:03:38:95:2e:23:09:d8:
                    4b:03:06:b1:f5:74:82:7c:14:4f:47:3d:ed:b3:ce:
                    8c:a5:92:36:da:36:20:58:96:d2:2a:e5:cb:31:ee:
                    1d:f6:43:ad:b7:b6:22:38:c6:3a:00:84:23:8c:04:
                    e0:3b:06:d6:33:4c:4e:57:b2:dd:79:e6:f9:77:96:
                    70:c1:10:d5:06:a5:99:6c:50:c6:1b:c4:87:01:5b:
                    02:fe:1a:9d:d3:bb:be:b8:6e:fa:83:e6:1f:43:4a:
                    b8:70:61:2e:8b:b4:cf:3d:d0:72:8c:b7:67:92:1d:
                    1f:7a:0d:8d:72:e2:18:f0:9e:db:e5:a7:93:68:16:
                    62:27:52:e6:78:2f:69:71:87:ca:10:cf:1c:42:13:
                    21:fd:b2:e6:7c:82:65:3c:68:80:5b:66:d1:8c:8c:
                    f7:28:fa:4d:89:2f:4c:04:6d:1b:3e:92:79:33:bc:
                    74:e4:9c:6f:63:9a:4a:af:4f:af:19:c6:f6:e8:3c:
                    06:e3:5b:ab:b5:0a:92:fd:1c:de:5d:68:8e:25:a4:
                    7d:c6:7b:8a:bb:7d:fc:3c:f6:8f:96:4c:4f:15:2a:
                    ef:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B0:54:60:4B:CB:6A:DD:35:F0:3D:08:DB:55:B7:79:D3:35:F8:98
            X509v3 Authority Key Identifier:
                keyid:CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/db99252ee160b7c79db812d8916366d900ba7fab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.202.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:52:a4:a8:fa:a2:30:26:9c:fa:0d:2a:ec:0a:32:30:d3:f9:
         19:06:e8:bd:aa:e7:33:79:91:4f:87:dc:9e:43:77:a9:c3:7a:
         98:4e:91:66:59:0f:4c:90:97:8b:1b:3b:be:fc:f3:6b:55:6a:
         54:23:a6:07:07:f4:66:a3:22:19:cd:9f:b8:eb:14:1f:55:00:
         ec:b5:af:73:4e:2a:0a:4e:1f:0b:6d:58:02:7f:a2:5a:22:13:
         a0:31:0a:30:7b:17:25:65:df:43:7a:7d:2c:d4:dd:ed:d0:16:
         9a:9a:d2:55:2c:66:40:b8:f8:b9:81:5c:24:5f:04:87:54:33:
         03:b0:ef:8d:cf:a1:06:91:fc:01:93:dd:a9:2c:fc:2f:9a:ac:
         f6:4f:b8:f7:c0:6e:24:17:04:ae:d8:d2:37:c7:78:40:aa:55:
         cc:40:49:33:77:44:e4:a0:2f:31:aa:ad:61:51:e9:1e:22:01:
         e4:5c:54:9a:79:04:71:cf:99:aa:20:45:65:aa:37:96:75:73:
         68:11:fa:2b:3e:a3:70:98:9c:99:07:f2:13:79:e0:d0:d4:2c:
         fe:e0:49:01:1b:0e:6a:b0:e7:26:18:50:7f:bd:f7:97:6c:aa:
         66:a9:a7:83:68:b9:9a:d3:8e:41:40:ae:0f:f6:44:d9:d4:e0:
         e8:dc:48:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:44 2024 by rpki-client on console-ams.rpki-client.org