Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/c92ca9df46f7f3b6575ba87854d24f8af9fd5bf5.roa
File:                     c92ca9df46f7f3b6575ba87854d24f8af9fd5bf5.roa (raw, json)
Hash identifier:          miXLMRqgUJSSlRrCsSKguYfSkMknkqwTTBd96olpJi4=
Subject key identifier:   14:96:D9:7D:6B:03:8B:7E:04:41:26:51:BC:2F:CC:10:8D:22:DC:9E
Certificate issuer:       /CN=5a0945c72ff878d76abd9c449f2d3e64afb61ba1
Certificate serial:       23BC15
Authority key identifier: BA:F4:C5:18:0C:1F:B9:B3:86:C0:F6:59:C4:AB:77:58:B5:3D:52:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a0945c72ff878d76abd9c449f2d3e64afb61ba1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/c92ca9df46f7f3b6575ba87854d24f8af9fd5bf5.roa
Signing time:             Thu 10 Aug 2023 06:24:21 +0000
ROA not before:           Wed 09 Aug 2023 06:24:21 +0000
ROA not after:            Sun 10 Aug 2025 06:24:21 +0000
asID:                     198949
IP address blocks:        190.149.164.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2341909 (0x23bc15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a0945c72ff878d76abd9c449f2d3e64afb61ba1
        Validity
            Not Before: Aug  9 06:24:21 2023 GMT
            Not After : Aug 10 06:24:21 2025 GMT
        Subject: CN=c92ca9df46f7f3b6575ba87854d24f8af9fd5bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f3:23:b6:be:94:96:b3:0c:f7:3a:df:ff:d4:
                    51:33:a5:bc:8d:24:c7:b2:35:81:f2:77:08:47:2e:
                    a6:46:2a:09:62:bb:99:81:82:79:fd:03:a6:67:05:
                    04:4a:6e:10:66:4a:34:dd:ab:df:25:8c:94:af:fb:
                    a9:03:67:61:26:a3:0d:48:8d:a6:dd:dd:4c:04:f5:
                    78:c3:06:56:d0:ba:42:0e:65:1f:1c:bd:6e:71:9a:
                    81:ac:00:e5:0a:6a:b4:c9:a6:d6:5a:5a:8d:4d:bf:
                    77:25:0a:fd:05:41:cd:a5:9f:d0:31:bb:39:34:0c:
                    61:53:8c:78:5a:0b:44:a2:16:7f:6d:6b:35:8e:fd:
                    7e:68:f3:f6:a1:21:b7:45:cd:e6:a1:e4:74:dd:c1:
                    d5:e7:9b:ef:82:ef:6f:c0:86:6a:e2:2e:42:a4:b1:
                    45:62:ed:87:90:37:1c:45:fd:69:35:25:8a:e1:5d:
                    4f:9e:d6:6e:f3:3b:64:1b:3d:15:18:7c:77:7f:ad:
                    81:1c:3e:f6:7e:74:c3:6b:03:29:9e:2b:18:4a:9b:
                    83:80:70:c3:46:d3:4b:27:7d:78:f0:03:55:0d:89:
                    f3:fd:24:40:c0:45:da:40:44:4e:e5:e0:9d:b3:55:
                    21:f9:1c:b9:2e:f4:35:c7:e7:af:64:4b:a2:4b:6d:
                    c2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:96:D9:7D:6B:03:8B:7E:04:41:26:51:BC:2F:CC:10:8D:22:DC:9E
            X509v3 Authority Key Identifier:
                keyid:BA:F4:C5:18:0C:1F:B9:B3:86:C0:F6:59:C4:AB:77:58:B5:3D:52:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a0945c72ff878d76abd9c449f2d3e64afb61ba1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/c92ca9df46f7f3b6575ba87854d24f8af9fd5bf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/5a0945c72ff878d76abd9c449f2d3e64afb61ba1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.149.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:91:a2:46:98:1d:1f:eb:87:28:b2:59:f8:c5:59:72:7d:84:
         98:96:25:9a:b1:bb:43:03:f9:fe:47:ab:5d:36:7a:c6:44:c7:
         f4:0f:5b:91:72:11:89:ab:de:7a:12:80:23:51:f2:76:bd:90:
         e7:b4:90:aa:05:24:60:5d:ad:eb:66:ab:88:ca:1e:be:3d:d2:
         15:62:c4:ed:cf:2c:62:5b:3a:8f:2a:f9:32:ff:3c:0c:a2:34:
         25:8e:32:2a:fb:55:36:a9:d0:8e:9a:ff:74:d3:80:b3:60:88:
         0b:5f:c1:5f:58:1e:8b:fe:1e:fe:40:eb:fe:c1:94:20:a8:95:
         44:36:60:eb:a8:66:21:43:46:26:72:ca:f1:5b:28:ca:2a:04:
         99:cc:2c:1f:89:e1:0a:08:35:56:5a:9e:d8:2b:9a:b6:86:43:
         17:a9:cb:df:d5:11:46:9a:5b:ce:07:8c:dd:b2:b8:b5:72:ef:
         e7:78:37:2b:64:b2:6a:a9:5b:1c:09:47:c5:60:73:ad:2e:ab:
         69:ba:bb:07:3d:df:bb:c1:4f:cc:2c:de:31:04:4f:f6:b7:fb:
         aa:8f:45:aa:e5:35:35:62:c3:00:65:f9:6e:4c:ba:29:b1:57:
         1c:32:b0:b7:8a:c0:a4:e3:dd:77:e4:a8:a1:19:64:9a:0e:12:
         2a:f5:b1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 18 17:05:18 2024 by rpki-client on console-fra.rpki-client.org