Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/fc50924d91b9806f6fedb721031a19b8fa1dc63d.roa
File:                     fc50924d91b9806f6fedb721031a19b8fa1dc63d.roa (raw, json)
Hash identifier:          bEIXlLxZS3aDajZGHcf3dcTX7/z7WskQ39FJyMa0Aig=
Subject key identifier:   11:0B:64:EF:4F:B4:15:AA:93:B2:F7:66:71:10:C1:F7:05:EC:E8:6B
Certificate issuer:       /CN=da0cd30df4491331691a183f5b0a9260b7daadec
Certificate serial:       28F093
Authority key identifier: 21:83:18:7D:91:8F:F4:C5:B1:D9:9E:62:E6:F1:15:ED:BB:60:82:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/da0cd30df4491331691a183f5b0a9260b7daadec.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/fc50924d91b9806f6fedb721031a19b8fa1dc63d.roa
Signing time:             Mon 18 Mar 2024 14:12:20 +0000
ROA not before:           Mon 18 Mar 2024 14:12:19 +0000
ROA not after:            Sun 18 Mar 2029 14:12:19 +0000
asID:                     52451
IP address blocks:        190.149.164.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2683027 (0x28f093)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da0cd30df4491331691a183f5b0a9260b7daadec
        Validity
            Not Before: Mar 18 14:12:19 2024 GMT
            Not After : Mar 18 14:12:19 2029 GMT
        Subject: CN=fc50924d91b9806f6fedb721031a19b8fa1dc63d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:38:c8:a0:43:a7:66:b3:75:40:fd:c9:06:e9:
                    29:8b:a0:f3:9d:a5:ce:e2:51:e2:d4:a6:9f:f0:fe:
                    25:5d:e6:9e:fe:63:0e:db:c2:11:d4:57:04:1b:6e:
                    e2:89:69:3d:9c:a2:93:6e:81:ed:b8:85:89:48:03:
                    dd:4b:47:eb:72:ed:51:f5:82:53:42:95:de:c0:15:
                    ea:a7:19:84:f2:4b:57:8d:4d:db:ed:0b:0f:e0:27:
                    ac:ca:2f:0f:ee:d7:3c:27:4c:d6:8a:0c:d5:53:df:
                    07:1f:10:16:65:c7:47:44:e9:00:44:0a:94:47:67:
                    48:c3:78:26:87:14:61:e6:8a:fe:38:4a:63:22:33:
                    9d:db:86:d2:ed:99:8c:02:b3:6f:c5:f0:5c:c5:a4:
                    c7:ab:14:25:8c:3c:14:5a:ca:ef:d9:e3:c6:23:b5:
                    1f:8b:02:cd:4c:42:1c:de:9a:16:53:17:5f:41:84:
                    20:d7:4c:ec:f0:82:9e:93:da:31:65:85:3a:1a:fb:
                    50:17:cb:1f:8a:16:2f:8c:08:f7:4b:c6:b2:37:ad:
                    a0:2f:4d:81:ef:83:93:ab:27:5c:68:d0:2a:cb:d1:
                    66:85:a2:a1:1f:1d:21:28:a4:c0:7d:7c:90:87:c6:
                    94:d5:0a:02:a5:2e:92:ab:10:51:97:8f:7b:29:37:
                    1e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:0B:64:EF:4F:B4:15:AA:93:B2:F7:66:71:10:C1:F7:05:EC:E8:6B
            X509v3 Authority Key Identifier:
                keyid:21:83:18:7D:91:8F:F4:C5:B1:D9:9E:62:E6:F1:15:ED:BB:60:82:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/da0cd30df4491331691a183f5b0a9260b7daadec.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/fc50924d91b9806f6fedb721031a19b8fa1dc63d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/da0cd30df4491331691a183f5b0a9260b7daadec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.149.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:4f:84:2e:8b:e9:ba:ec:d3:90:b0:e3:2d:d2:cc:e6:9b:45:
         82:db:6d:70:b6:6c:09:19:7d:73:64:28:61:f2:c7:b6:24:14:
         87:8d:ec:2d:a6:cb:cf:e7:f5:f9:c5:73:cb:ad:60:d5:74:92:
         73:b0:8a:87:c1:4f:d8:61:09:4e:ce:f0:35:8f:24:3b:d1:7c:
         8b:9e:b9:59:b5:1f:19:ac:c2:e3:14:d9:20:88:7c:57:52:d7:
         7c:25:2f:92:5e:23:c1:f3:24:23:c9:16:94:f2:3a:8a:59:eb:
         59:ba:9a:e8:c4:94:2d:46:f9:d9:a6:74:d1:e9:d4:06:d2:4f:
         0e:97:5c:e7:14:81:b2:74:2e:fa:33:ba:0d:99:72:9c:8b:d2:
         63:ed:cc:93:07:c4:5b:2b:12:06:bf:22:f2:43:43:94:9a:27:
         4c:c4:fe:c5:69:a5:17:a8:08:e9:60:6f:85:b6:91:4c:51:b3:
         18:89:ac:15:40:79:49:94:e4:ef:ee:02:05:c5:02:9a:00:a2:
         5c:7c:f0:e5:20:df:68:2e:2b:29:cf:cd:d8:11:d9:48:9b:94:
         4b:be:1a:7c:e3:78:6a:6e:89:11:0e:3c:99:e3:1f:4a:eb:e2:
         c1:50:de:65:e2:f7:08:97:7b:61:b4:9b:f2:23:ff:65:25:7f:
         fa:36:b0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:28 2024 by rpki-client on console-fra.rpki-client.org