Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/da3b88eca0a14c9d3cdaec8765253ad47cb137eb.roa
File:                     da3b88eca0a14c9d3cdaec8765253ad47cb137eb.roa (raw, json)
Hash identifier:          jGD65i/4Cml9iEIsSGZqP+31TmXa941J232WX6QFWlk=
Subject key identifier:   89:A8:7F:48:97:3B:6E:7D:68:AD:B4:1F:76:3D:40:39:A8:CC:87:38
Certificate issuer:       /CN=48947433eb003e1a071f4fff5deb96c87a6919a3
Certificate serial:       1DF89B
Authority key identifier: FF:C6:7A:F9:6D:51:27:E4:85:88:39:82:E5:B5:0A:0C:08:63:B6:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/48947433eb003e1a071f4fff5deb96c87a6919a3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/da3b88eca0a14c9d3cdaec8765253ad47cb137eb.roa
Signing time:             Mon 08 May 2023 18:18:32 +0000
ROA not before:           Sun 07 May 2023 18:18:29 +0000
ROA not after:            Thu 08 May 2025 18:18:29 +0000
asID:                     28116
IP address blocks:        146.83.231.0/24 maxlen: 24
                          146.83.232.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1964187 (0x1df89b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48947433eb003e1a071f4fff5deb96c87a6919a3
        Validity
            Not Before: May  7 18:18:29 2023 GMT
            Not After : May  8 18:18:29 2025 GMT
        Subject: CN=da3b88eca0a14c9d3cdaec8765253ad47cb137eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:89:6e:fe:bd:b1:66:15:09:2f:5a:f9:5b:b1:
                    3b:05:9e:fb:93:ce:6f:8c:d9:fe:5f:b7:1c:08:ce:
                    4d:f0:a5:f8:bd:b7:2c:83:4c:6b:17:2a:d1:b4:19:
                    89:38:01:aa:1b:da:4f:b5:d8:42:52:45:1a:33:88:
                    47:43:4f:50:09:a5:cb:91:b9:27:0d:a8:12:2b:2b:
                    7f:ef:69:39:94:36:0e:4c:24:0c:40:3f:99:27:cf:
                    30:50:b1:20:bd:62:ac:a7:1c:85:7d:8b:b8:be:05:
                    b0:94:6e:d4:12:d7:89:1b:c3:2e:4a:ef:32:f2:e1:
                    ac:3a:f0:90:c0:4b:27:91:df:b5:c4:95:d6:2b:95:
                    e1:1b:64:63:4a:7b:6f:70:41:80:e7:6c:42:4e:89:
                    a3:65:b3:ca:3e:5f:d7:11:54:83:02:69:a0:e2:9e:
                    f2:1a:bf:c4:c9:d0:cd:03:85:d8:7d:c0:8c:75:ba:
                    1a:a7:6b:00:00:58:4b:d0:8d:c2:46:fd:45:45:b1:
                    ac:c6:12:67:3b:0a:23:38:c6:3c:da:f6:56:b1:8b:
                    dc:d7:bb:f2:0b:05:1b:d1:e8:5f:f1:ad:07:5c:00:
                    37:6b:fb:e5:5a:35:15:78:52:04:aa:89:ea:27:5b:
                    7d:db:1f:cc:37:07:d0:8a:d5:70:32:25:24:68:c2:
                    fd:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A8:7F:48:97:3B:6E:7D:68:AD:B4:1F:76:3D:40:39:A8:CC:87:38
            X509v3 Authority Key Identifier:
                keyid:FF:C6:7A:F9:6D:51:27:E4:85:88:39:82:E5:B5:0A:0C:08:63:B6:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/48947433eb003e1a071f4fff5deb96c87a6919a3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/da3b88eca0a14c9d3cdaec8765253ad47cb137eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/48947433eb003e1a071f4fff5deb96c87a6919a3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.83.231.0-146.83.233.255

    Signature Algorithm: sha256WithRSAEncryption
         72:ac:8f:3c:f0:dd:95:6b:47:4b:f4:8b:6a:e5:16:f6:82:b3:
         ad:5d:8f:b7:39:17:8b:b5:7a:ca:fa:68:cd:47:0a:b6:f4:94:
         31:81:39:7f:c5:29:54:a3:23:8d:da:2a:bc:57:c1:9a:71:25:
         5e:7b:22:b3:89:74:b3:4d:1c:12:ed:e7:82:53:7f:36:ea:14:
         4a:61:8a:e4:20:cf:48:13:7f:f7:1d:5b:ec:85:73:6e:a0:85:
         a0:7c:a9:5d:e9:fe:a6:83:12:81:dd:8b:6d:82:aa:7d:47:ce:
         67:f0:2d:be:46:18:ae:29:04:24:bf:87:0a:d7:4f:ef:67:c7:
         b4:e1:be:33:13:a2:81:a1:70:43:37:c7:ca:1c:f5:bf:36:f1:
         61:40:e3:47:89:ce:40:c6:72:2f:27:e0:47:79:fc:17:d7:4e:
         fa:97:84:9f:6f:cc:fa:65:37:31:bd:00:5f:ce:e9:99:4b:f4:
         04:1d:5a:1a:ea:d7:b8:ba:24:9f:77:b7:22:ff:ea:65:7c:15:
         ab:9c:94:7e:d9:c0:85:a9:4c:17:08:c7:a2:fe:d2:e6:61:69:
         06:db:ce:d4:c1:67:d3:6e:94:1f:ad:1c:7d:85:37:df:1b:15:
         7d:9e:86:fe:a5:b8:c8:6f:9e:26:14:7c:23:6f:72:52:ae:a5:
         ca:70:bf:84
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDHfibMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ4
OTQ3NDMzZWIwMDNlMWEwNzFmNGZmZjVkZWI5NmM4N2E2OTE5YTMwHhcNMjMwNTA3
MTgxODI5WhcNMjUwNTA4MTgxODI5WjAzMTEwLwYDVQQDEyhkYTNiODhlY2EwYTE0
YzlkM2NkYWVjODc2NTI1M2FkNDdjYjEzN2ViMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAz4lu/r2xZhUJL1r5W7E7BZ77k85vjNn+X7ccCM5N8KX4vbcs
g0xrFyrRtBmJOAGqG9pPtdhCUkUaM4hHQ09QCaXLkbknDagSKyt/72k5lDYOTCQM
QD+ZJ88wULEgvWKspxyFfYu4vgWwlG7UEteJG8MuSu8y8uGsOvCQwEsnkd+1xJXW
K5XhG2RjSntvcEGA52xCTomjZbPKPl/XEVSDAmmg4p7yGr/EydDNA4XYfcCMdboa
p2sAAFhL0I3CRv1FRbGsxhJnOwojOMY82vZWsYvc17vyCwUb0ehf8a0HXAA3a/vl
WjUVeFIEqonqJ1t92x/MNwfQitVwMiUkaML9twIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFImof0iXO259aK20H3Y9QDmozIc4MB8GA1UdIwQYMBaAFP/GevltUSfkhYg5
guW1CgwIY7aCMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDg5NDc0
MzNlYjAwM2UxYTA3MWY0ZmZmNWRlYjk2Yzg3YTY5MTlhMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTQ5M2I0MDgtNWFjMS00M2E4LTllYmUtOTk2ZDI5
OTM4ZWYyL2RhM2I4OGVjYTBhMTRjOWQzY2RhZWM4NzY1MjUzYWQ0N2NiMTM3ZWIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hNDkzYjQwOC01YWMxLTQzYTgtOWViZS05OTZk
Mjk5MzhlZjIvNDg5NDc0MzNlYjAwM2UxYTA3MWY0ZmZmNWRlYjk2Yzg3YTY5MTlh
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQAklPnAwQBklPoMA0GCSqGSIb3DQEBCwUAA4IBAQByrI88
8N2Va0dL9Itq5Rb2grOtXY+3OReLtXrK+mjNRwq29JQxgTl/xSlUoyON2iq8V8Ga
cSVeeyKziXSzTRwS7eeCU3826hRKYYrkIM9IE3/3HVvshXNuoIWgfKld6f6mgxKB
3Yttgqp9R85n8C2+RhiuKQQkv4cK10/vZ8e04b4zE6KBoXBDN8fKHPW/NvFhQONH
ic5AxnIvJ+BHefwX1076l4Sfb8z6ZTcxvQBfzumZS/QEHVoa6te4uiSfd7ci/+pl
fBWrnJR+2cCFqUwXCMei/tLmYWkG287UwWfTbpQfrRx9hTffGxV9nob+pbjIb54m
FHwjb3JSrqXKcL+E
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:28 2024 by rpki-client on console-fra.rpki-client.org