Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/4caf5ed5e418d3d560ccac8a64db50d3a7903884.roa
File:                     4caf5ed5e418d3d560ccac8a64db50d3a7903884.roa (raw, json)
Hash identifier:          rAv6Xfgx5ooMBZtd1B7gIq2mu/Cbh/kMTYgT+vzi3vo=
Subject key identifier:   74:AE:2B:B4:AC:0E:99:85:4A:58:D8:7E:AF:F8:4E:D4:31:1E:A9:E1
Certificate issuer:       /CN=48947433eb003e1a071f4fff5deb96c87a6919a3
Certificate serial:       0A99FE
Authority key identifier: FF:C6:7A:F9:6D:51:27:E4:85:88:39:82:E5:B5:0A:0C:08:63:B6:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/48947433eb003e1a071f4fff5deb96c87a6919a3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/4caf5ed5e418d3d560ccac8a64db50d3a7903884.roa
Signing time:             Wed 24 Mar 2021 14:34:12 +0000
ROA not before:           Wed 24 Mar 2021 14:34:12 +0000
ROA not after:            Tue 24 Mar 2026 14:34:12 +0000
asID:                     26610
IP address blocks:        146.83.90.0/24 maxlen: 24
                          146.83.92.0/24 maxlen: 24
                          2001:1310:3121::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 694782 (0xa99fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48947433eb003e1a071f4fff5deb96c87a6919a3
        Validity
            Not Before: Mar 24 14:34:12 2021 GMT
            Not After : Mar 24 14:34:12 2026 GMT
        Subject: CN=4caf5ed5e418d3d560ccac8a64db50d3a7903884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:09:37:00:a2:16:e8:18:d7:51:22:9c:f6:8b:
                    35:85:8b:c4:3a:e1:cc:66:2e:55:42:f4:e7:04:45:
                    5d:44:ea:dc:e8:0c:5c:14:34:99:14:cb:40:85:13:
                    5c:ed:db:25:2b:44:6c:b8:0f:85:19:6f:e9:70:95:
                    aa:95:90:17:f8:15:a7:ce:7a:e1:ed:b7:fd:4a:c7:
                    81:f7:8b:d5:4e:4e:4d:39:58:fd:c5:26:c7:f7:3e:
                    6c:16:40:c3:a1:24:e4:c2:b1:52:9b:bc:fb:63:79:
                    23:c8:7c:d7:b9:58:7d:2a:07:8a:4b:1a:ad:00:d2:
                    d2:90:71:b6:bc:68:ac:64:b4:81:9f:67:54:84:48:
                    3f:24:2e:82:9c:9e:be:40:a9:6c:ac:49:96:9e:01:
                    2a:7e:b7:ba:5e:75:03:13:38:14:53:fe:e5:88:81:
                    ce:a4:c4:1b:81:4f:3e:93:a6:bf:e3:bc:fe:b9:9d:
                    23:d0:bb:41:4f:63:8b:65:9f:f8:69:20:2e:5c:e1:
                    a7:bc:67:c3:e4:a6:a5:3f:0a:18:ad:76:e5:6e:e4:
                    69:50:ee:0a:81:24:f9:ce:9b:e2:e4:6f:2b:f6:b9:
                    e4:38:4d:5b:ab:6f:26:06:1d:23:ae:7a:a3:83:62:
                    99:42:36:85:b7:d8:cf:08:20:ce:e7:eb:c9:9f:1b:
                    ef:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:AE:2B:B4:AC:0E:99:85:4A:58:D8:7E:AF:F8:4E:D4:31:1E:A9:E1
            X509v3 Authority Key Identifier:
                keyid:FF:C6:7A:F9:6D:51:27:E4:85:88:39:82:E5:B5:0A:0C:08:63:B6:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/48947433eb003e1a071f4fff5deb96c87a6919a3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/4caf5ed5e418d3d560ccac8a64db50d3a7903884.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/48947433eb003e1a071f4fff5deb96c87a6919a3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.83.90.0/24
                  146.83.92.0/24
                IPv6:
                  2001:1310:3121::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:54:82:e2:76:58:bd:00:f7:14:df:9b:53:22:c6:63:f0:bd:
         08:4c:a4:7d:be:fe:95:c1:6b:8b:78:6b:82:05:4a:1b:b6:61:
         3e:9b:53:fc:df:3d:8e:c6:91:5a:03:b8:0b:cc:0d:2b:6b:d3:
         19:e9:15:5b:44:69:30:79:b3:06:29:34:90:8d:2a:88:61:e1:
         6c:f9:ef:d4:4e:43:61:8c:89:6f:2c:99:e0:29:e7:47:a7:4a:
         2c:17:0c:e4:66:37:ec:ef:ff:ed:b4:cc:ab:52:91:5f:49:55:
         04:4b:77:a3:77:6b:0e:f5:87:64:f1:88:67:24:5b:26:5d:83:
         8c:31:2c:5b:34:d4:18:70:6b:e4:48:51:91:8d:31:93:a4:cd:
         a1:e8:97:99:33:48:78:88:20:26:90:f0:d0:0f:a0:0c:b0:90:
         6c:b0:60:96:f1:2f:32:ce:66:e4:34:69:4a:f0:e7:32:a7:74:
         0e:05:3d:f4:c5:b1:62:d4:55:3b:85:d0:e7:24:02:df:9d:4f:
         ca:d3:48:f5:51:67:23:fe:01:6b:d3:d4:29:12:6a:4e:07:72:
         bb:c8:93:57:07:82:e5:33:10:e7:c1:5b:43:ad:9d:dd:60:e1:
         fd:be:b3:0b:a6:8e:69:7e:2f:64:c4:86:58:b3:40:b5:ff:d2:
         75:78:95:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:21 2024 by rpki-client on console-ams.rpki-client.org