Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/386470a081b75e6016edbf878abdd774803aaaa5.roa
File:                     386470a081b75e6016edbf878abdd774803aaaa5.roa (raw, json)
Hash identifier:          1ELMJiY/yyjcKzoY+l/mKgbvLUzXfNP2LvQfOTIPUKk=
Subject key identifier:   3A:25:09:81:37:B7:CE:52:A0:87:3A:6D:50:70:A1:80:1C:B2:5F:7C
Certificate issuer:       /CN=48947433eb003e1a071f4fff5deb96c87a6919a3
Certificate serial:       1DEEB3
Authority key identifier: FF:C6:7A:F9:6D:51:27:E4:85:88:39:82:E5:B5:0A:0C:08:63:B6:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/48947433eb003e1a071f4fff5deb96c87a6919a3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/386470a081b75e6016edbf878abdd774803aaaa5.roa
Signing time:             Mon 08 May 2023 18:18:30 +0000
ROA not before:           Sun 07 May 2023 18:18:29 +0000
ROA not after:            Thu 08 May 2025 18:18:29 +0000
asID:                     26610
IP address blocks:        146.83.90.0/24 maxlen: 24
                          146.83.92.0/24 maxlen: 24
                          2001:1310:3121::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1961651 (0x1deeb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48947433eb003e1a071f4fff5deb96c87a6919a3
        Validity
            Not Before: May  7 18:18:29 2023 GMT
            Not After : May  8 18:18:29 2025 GMT
        Subject: CN=386470a081b75e6016edbf878abdd774803aaaa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:54:eb:c7:0a:75:63:1c:28:57:d9:5e:e4:be:
                    6a:c2:ca:42:53:bf:63:34:ec:fe:de:f7:71:2f:23:
                    a5:40:c3:8b:78:cc:a8:86:02:c9:82:f9:aa:40:72:
                    b7:d2:8f:cc:a2:cc:03:c4:ab:a8:d5:3b:1c:d5:6b:
                    23:3d:c7:7e:e7:ca:54:4b:d4:ee:c8:2d:48:a5:45:
                    d6:a3:11:d3:8d:17:80:f8:d6:a9:ba:74:96:6c:ee:
                    66:e6:49:d4:6b:61:95:bf:a9:06:3b:3c:71:4b:32:
                    78:09:20:e6:4b:85:1d:5f:e5:12:cd:aa:97:ea:ea:
                    34:7c:56:18:40:86:12:aa:8d:c2:90:0e:de:45:5a:
                    4a:37:aa:f3:f2:4b:7b:c8:95:25:51:c9:f4:ec:8f:
                    d3:ca:50:ce:22:ab:94:06:64:f9:3e:f9:9a:76:68:
                    c3:42:cd:7c:f1:61:85:3d:ff:f5:69:1b:c4:71:01:
                    33:00:8a:1b:54:22:02:0f:48:e9:0e:35:c3:1c:eb:
                    26:ef:14:49:3d:d2:b3:64:1b:2f:75:ac:39:1e:80:
                    1b:08:d8:4f:ba:69:47:2c:e5:46:23:5d:32:b7:f1:
                    f2:d1:06:f5:60:dc:fc:4c:ce:85:44:61:8c:2b:69:
                    c4:3d:8a:04:b6:f8:ff:b4:82:83:a8:6b:43:8b:14:
                    f1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:25:09:81:37:B7:CE:52:A0:87:3A:6D:50:70:A1:80:1C:B2:5F:7C
            X509v3 Authority Key Identifier:
                keyid:FF:C6:7A:F9:6D:51:27:E4:85:88:39:82:E5:B5:0A:0C:08:63:B6:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/48947433eb003e1a071f4fff5deb96c87a6919a3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/386470a081b75e6016edbf878abdd774803aaaa5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/48947433eb003e1a071f4fff5deb96c87a6919a3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.83.90.0/24
                  146.83.92.0/24
                IPv6:
                  2001:1310:3121::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:df:98:24:40:00:e1:ac:05:64:eb:1b:0d:5f:88:ee:d7:41:
         f4:92:5f:e8:12:40:fe:a8:fa:6d:d0:1d:e3:af:1f:e2:36:00:
         12:77:a1:8d:b0:e4:65:52:47:32:bd:b1:b1:df:70:b5:19:2d:
         41:28:5f:ce:29:cf:fb:b5:fb:67:a4:08:bb:df:b3:2d:7b:b5:
         ed:de:34:aa:23:d0:58:65:6c:17:f9:2b:9d:15:b5:89:28:a8:
         01:94:48:f3:20:4d:da:30:e3:cb:66:c5:4d:f6:c3:61:80:c6:
         3d:e9:62:52:a9:99:8b:b6:1c:15:9a:e4:39:be:09:83:ca:b2:
         1e:f5:cd:a8:12:90:03:db:7c:93:20:27:e9:c9:14:c1:49:82:
         25:86:a7:22:93:3a:28:2b:35:ce:12:ab:b4:f1:3f:67:45:63:
         7d:b7:d5:27:e3:26:cb:cb:5e:bb:8d:48:60:fa:ba:84:30:c4:
         a0:a6:86:53:7f:1e:81:a4:ce:3d:4c:d9:8c:d4:72:ff:1c:f7:
         2e:a8:56:a6:b5:79:f0:8e:2b:73:3e:a4:07:53:37:29:11:b6:
         2f:37:c3:c7:75:78:f4:9c:d0:69:5f:27:2c:b3:97:a4:1d:96:
         d9:af:c0:c8:3d:60:87:85:a6:59:06:e9:73:7a:ba:96:c0:29:
         31:ef:db:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:00 2024 by rpki-client on console-fra.rpki-client.org