Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/fea12df760485a04789f16e0d4a2727b74ff1621.roa
File:                     fea12df760485a04789f16e0d4a2727b74ff1621.roa (raw, json)
Hash identifier:          e3xbpDlzSO8ygYTmsUmVFrJVPsF+i/Tpc4NzmDlroTU=
Subject key identifier:   D5:B8:43:97:00:7C:51:23:F2:BD:D4:4E:E1:34:75:56:1C:90:8E:0F
Certificate issuer:       /CN=48947433eb003e1a071f4fff5deb96c87a6919a3
Certificate serial:       1DF1BC
Authority key identifier: FF:C6:7A:F9:6D:51:27:E4:85:88:39:82:E5:B5:0A:0C:08:63:B6:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/48947433eb003e1a071f4fff5deb96c87a6919a3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/fea12df760485a04789f16e0d4a2727b74ff1621.roa
Signing time:             Mon 08 May 2023 18:18:31 +0000
ROA not before:           Sun 07 May 2023 18:18:29 +0000
ROA not after:            Thu 08 May 2025 18:18:29 +0000
asID:                     23140
IP address blocks:        146.83.4.0/22 maxlen: 22
                          146.83.2.0/23 maxlen: 24
                          146.83.8.0/21 maxlen: 21
                          146.83.16.0/20 maxlen: 20
                          146.83.32.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1962428 (0x1df1bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48947433eb003e1a071f4fff5deb96c87a6919a3
        Validity
            Not Before: May  7 18:18:29 2023 GMT
            Not After : May  8 18:18:29 2025 GMT
        Subject: CN=fea12df760485a04789f16e0d4a2727b74ff1621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b1:1e:82:68:c7:ab:50:fc:f0:ed:87:84:73:
                    d0:22:d2:f2:af:fe:18:b9:f7:23:c1:b4:78:01:14:
                    aa:8a:80:fe:15:3e:48:54:db:75:7d:0f:08:9c:c9:
                    7f:39:aa:ba:5a:fe:bb:1b:43:27:a3:19:06:68:25:
                    d2:76:f9:57:c6:7d:8a:89:cd:8b:c9:37:de:96:43:
                    b0:94:98:b5:d7:de:e6:e9:c2:4a:88:e0:e4:2d:a7:
                    e5:3d:e4:75:1e:9d:39:b7:c6:a7:9f:10:9c:8b:0f:
                    f3:62:c5:31:76:2c:7f:be:0e:88:84:d5:78:42:44:
                    33:da:12:37:8b:6c:db:73:2c:57:e6:0c:04:f3:fe:
                    8c:e6:6c:6d:85:28:13:bc:4e:4c:49:6c:de:6e:f9:
                    bb:ee:f3:b3:ae:4f:d4:e4:e9:56:2b:0c:ba:94:42:
                    fc:91:a6:65:fd:69:e9:6b:9a:5c:63:39:ff:be:f6:
                    b8:50:23:3d:15:27:52:69:c0:ad:d1:38:9a:e3:ae:
                    a4:45:01:2c:1b:cc:9d:77:af:c6:fc:22:d0:1c:cc:
                    9b:94:b1:01:7b:4d:8a:f8:d7:59:37:e1:f1:7a:3d:
                    eb:25:58:76:26:57:65:d0:d2:6d:bc:8b:ff:fb:46:
                    a4:8d:92:ec:ac:57:8e:db:b9:9c:1b:e7:88:f9:71:
                    e5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B8:43:97:00:7C:51:23:F2:BD:D4:4E:E1:34:75:56:1C:90:8E:0F
            X509v3 Authority Key Identifier:
                keyid:FF:C6:7A:F9:6D:51:27:E4:85:88:39:82:E5:B5:0A:0C:08:63:B6:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/48947433eb003e1a071f4fff5deb96c87a6919a3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/fea12df760485a04789f16e0d4a2727b74ff1621.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/48947433eb003e1a071f4fff5deb96c87a6919a3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.83.2.0-146.83.63.255

    Signature Algorithm: sha256WithRSAEncryption
         13:3b:4b:1d:3e:56:d4:b6:cd:54:05:6b:38:81:cd:6f:1b:22:
         36:29:a1:ea:31:aa:f9:e6:09:68:58:82:44:51:b7:bd:25:66:
         dc:f0:aa:83:e9:39:bb:98:c6:5a:8f:46:33:85:ad:ee:68:57:
         b7:35:7b:6b:ca:eb:41:ae:23:98:98:a0:b7:c5:50:9e:07:6d:
         f3:ec:4c:25:ee:0e:6b:65:6a:8b:8b:b3:27:bd:ff:88:fb:63:
         5f:42:14:74:2e:8b:53:c2:73:51:59:58:ff:52:1e:b5:89:a5:
         56:a5:8b:8b:ba:0b:22:d7:66:fe:72:f6:e7:24:d6:f5:64:28:
         9c:32:7f:23:51:f9:78:b8:e6:5b:da:48:02:b0:13:f3:88:ce:
         cc:bf:b7:d5:77:f8:76:de:18:11:6f:57:df:fd:3a:dd:25:c0:
         ac:62:77:14:49:ea:e2:9e:99:7f:54:5b:70:38:f3:03:5c:1f:
         11:99:14:e4:c1:5a:c4:1c:a4:59:ea:3d:fc:c4:d0:ee:2c:75:
         12:63:4a:31:dc:fc:7f:f2:05:9a:d5:94:65:53:6a:2e:90:e6:
         9f:47:f1:b8:e5:d1:ac:d3:14:14:5d:66:68:81:66:82:b7:da:
         d2:29:aa:4a:8a:80:7d:2a:ee:7f:35:b1:77:db:ea:0e:c7:46:
         8a:00:f3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:44 2024 by rpki-client on console-ams.rpki-client.org