Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/982b123e22bf41b44d398dcab1b6a65a0f783b5f.roa
File:                     982b123e22bf41b44d398dcab1b6a65a0f783b5f.roa (raw, json)
Hash identifier:          J4TGkeo5cLD5SdlbHNnIikN1cIPbziBwJfoH4XA5Ou4=
Subject key identifier:   64:2E:0E:C6:FC:53:53:F2:35:5A:C9:71:8F:9B:20:8F:3B:53:5F:1D
Certificate issuer:       /CN=48947433eb003e1a071f4fff5deb96c87a6919a3
Certificate serial:       148A41
Authority key identifier: FF:C6:7A:F9:6D:51:27:E4:85:88:39:82:E5:B5:0A:0C:08:63:B6:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/48947433eb003e1a071f4fff5deb96c87a6919a3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/982b123e22bf41b44d398dcab1b6a65a0f783b5f.roa
Signing time:             Wed 11 May 2022 02:23:18 +0000
ROA not before:           Tue 10 May 2022 03:00:00 +0000
ROA not after:            Sun 10 May 2026 03:00:00 +0000
asID:                     28116
IP address blocks:        146.83.233.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1346113 (0x148a41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48947433eb003e1a071f4fff5deb96c87a6919a3
        Validity
            Not Before: May 10 03:00:00 2022 GMT
            Not After : May 10 03:00:00 2026 GMT
        Subject: CN=982b123e22bf41b44d398dcab1b6a65a0f783b5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a2:a9:72:06:36:65:dc:e5:0e:cc:8f:ee:d8:
                    c7:4b:5a:10:e8:bb:1e:a2:94:8c:e5:05:99:bc:2e:
                    c1:bb:c2:f2:b9:a1:d4:0e:a1:75:8a:90:2c:bd:0e:
                    11:a5:53:56:ff:64:e4:d9:34:28:ed:7f:db:81:39:
                    d0:df:af:6e:11:5f:bb:67:48:e9:e5:11:f3:c8:f7:
                    86:bd:6e:30:38:61:3f:a7:ee:4e:12:65:7b:b1:07:
                    6a:78:d0:b3:6b:4c:63:8a:9f:9d:74:46:3d:24:19:
                    7c:21:09:76:2b:72:27:8e:c6:d4:ee:8c:9e:8e:11:
                    00:00:5d:34:77:74:b4:c1:8c:3e:c6:6f:b7:28:7d:
                    cc:7f:05:9f:f4:e0:df:f1:f0:0f:47:c6:12:36:72:
                    ea:6b:66:c2:c6:e5:a2:f0:42:bd:1a:84:07:4f:0f:
                    88:23:1e:23:7d:89:6b:b5:68:c7:d9:d3:af:64:ec:
                    dd:6b:33:6b:ad:fa:22:3c:f5:c0:e8:0c:1e:00:38:
                    a3:82:32:26:88:c9:db:61:02:2d:d5:be:7e:c3:6b:
                    51:10:3b:77:5f:92:d9:92:27:62:09:6e:f2:41:d8:
                    9a:da:83:ce:5d:02:c1:68:37:cd:4c:d4:2d:f4:7c:
                    78:4b:a3:59:36:eb:f9:35:2b:74:df:2e:28:18:de:
                    a1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:2E:0E:C6:FC:53:53:F2:35:5A:C9:71:8F:9B:20:8F:3B:53:5F:1D
            X509v3 Authority Key Identifier:
                keyid:FF:C6:7A:F9:6D:51:27:E4:85:88:39:82:E5:B5:0A:0C:08:63:B6:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/48947433eb003e1a071f4fff5deb96c87a6919a3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/982b123e22bf41b44d398dcab1b6a65a0f783b5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/48947433eb003e1a071f4fff5deb96c87a6919a3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.83.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:fd:79:84:7c:d9:13:3f:3f:35:fd:68:4b:2b:bd:97:c8:95:
         ae:2f:cb:4f:f6:d8:8f:eb:0c:59:d2:70:7d:19:29:8c:ea:9f:
         69:48:51:18:f3:7e:dc:41:80:f8:5d:31:f0:c2:12:ae:56:3a:
         aa:87:08:a7:59:79:80:bc:0d:0d:af:a4:73:8d:9f:0b:bc:8c:
         10:37:c3:4b:52:38:7e:5a:a5:f3:be:12:33:97:94:ad:6c:ee:
         d5:51:02:b0:0b:49:1a:b1:37:3f:a0:aa:72:16:6f:bd:f6:a2:
         c5:34:4d:18:a0:cd:05:15:21:8d:2a:0a:5f:4c:53:a6:3f:1d:
         02:12:c0:e5:bb:41:11:06:d3:1b:a7:1c:93:ae:e6:20:e2:d7:
         0b:b4:e3:cf:97:0c:d7:1e:a2:3d:f1:04:40:8b:a2:21:f9:63:
         c0:0b:3b:db:5b:9a:90:ee:31:c3:b6:04:62:12:31:11:b3:41:
         0c:36:06:45:6a:e1:d0:ce:ab:df:7d:f8:13:15:ec:21:f5:9c:
         27:54:74:51:bb:63:2e:39:d7:2c:83:ad:5d:d4:98:30:e0:dc:
         c1:ee:fd:13:1f:85:21:cb:2e:33:8c:da:e3:9f:16:fa:c1:2b:
         bc:3b:30:55:08:8e:a5:da:bf:c0:28:8f:d0:65:0d:2a:a7:2f:
         d3:a0:e9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:00 2024 by rpki-client on console-fra.rpki-client.org