Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/49f5e0b9318ce06a8ece23f91cb26212c866099a.roa
File:                     49f5e0b9318ce06a8ece23f91cb26212c866099a.roa (raw, json)
Hash identifier:          stnxTK3fbJMi8SIGDCswgyHcCYH/KVEE87B0lGqEBi0=
Subject key identifier:   5F:7E:1C:AA:7E:53:D8:03:86:C7:5D:DC:2C:4D:3F:C7:FC:1A:4D:E0
Certificate issuer:       /CN=d5747c1980bcbeed56cb517c667a966b8945ceee
Certificate serial:       1AA4F8
Authority key identifier: 14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/49f5e0b9318ce06a8ece23f91cb26212c866099a.roa
Signing time:             Wed 07 Sep 2022 22:29:18 +0000
ROA not before:           Wed 07 Sep 2022 20:49:37 +0000
ROA not after:            Sat 07 Sep 2024 20:49:37 +0000
asID:                     262145
IP address blocks:        190.211.121.0/24 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1746168 (0x1aa4f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5747c1980bcbeed56cb517c667a966b8945ceee
        Validity
            Not Before: Sep  7 20:49:37 2022 GMT
            Not After : Sep  7 20:49:37 2024 GMT
        Subject: CN=49f5e0b9318ce06a8ece23f91cb26212c866099a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a1:b7:9a:fd:50:aa:ff:e4:96:43:a7:26:7b:
                    f5:e2:82:d5:a7:20:1e:d7:37:de:fa:70:59:8f:60:
                    7f:5a:de:92:9c:ed:ed:77:84:9b:e2:ff:ce:a3:15:
                    cc:b7:8a:6e:92:ca:90:f1:77:c7:c0:66:57:61:32:
                    cb:e7:10:14:5b:c9:1e:80:37:ce:47:b7:52:c3:61:
                    7d:0c:45:2a:27:45:2a:22:00:51:22:66:9b:4f:42:
                    f2:f9:52:fc:15:ff:6b:d7:86:1d:05:62:6e:eb:3d:
                    f7:41:e8:56:a6:75:7b:ea:14:04:c1:a9:b7:5f:bb:
                    c0:10:72:ab:93:00:ed:88:a2:7b:b3:6d:17:de:cf:
                    f4:71:74:8b:eb:2b:51:32:5d:e4:2c:9c:a6:53:e7:
                    d6:9b:bb:fe:89:15:02:21:37:3d:e9:b3:72:fc:de:
                    6f:0b:72:1a:de:27:c2:8e:4c:1d:a4:18:dc:ff:52:
                    8f:cf:95:73:db:85:5b:97:f2:ae:e5:0c:76:39:1c:
                    b4:a8:9e:b9:db:16:5c:09:1f:b1:46:4b:3f:3c:5f:
                    ec:c2:64:d9:45:fa:31:21:3f:06:97:56:d7:e4:ab:
                    80:ad:04:1d:ea:90:52:6b:ce:36:a7:c4:1f:96:94:
                    4c:59:4c:79:57:62:4e:99:14:6e:e3:c0:73:a4:7e:
                    72:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:7E:1C:AA:7E:53:D8:03:86:C7:5D:DC:2C:4D:3F:C7:FC:1A:4D:E0
            X509v3 Authority Key Identifier:
                keyid:14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/49f5e0b9318ce06a8ece23f91cb26212c866099a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/d5747c1980bcbeed56cb517c667a966b8945ceee.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:66:ea:c1:b7:f4:c6:6c:d1:05:1d:90:d6:84:46:78:86:04:
         2b:77:cf:e9:1f:4a:af:ea:76:7f:33:76:13:b6:43:4d:f6:bd:
         90:44:2f:7f:a4:2a:17:77:ea:ff:73:4b:c1:90:f0:c7:ca:5c:
         b5:bd:27:ae:d9:b5:bc:78:9e:66:7a:2d:ce:65:46:22:c6:bf:
         cf:f5:cc:d3:f6:4d:9e:e5:b2:e1:2d:31:28:03:2f:a8:03:21:
         a2:e3:98:b6:e7:09:9b:95:2f:b9:b0:c0:5a:a5:a3:2a:2d:b0:
         e5:ca:5d:0d:2e:02:ec:07:a4:14:56:2a:23:56:c7:75:13:d8:
         bd:f5:13:17:12:c9:53:c5:a4:3a:4b:98:bb:82:8a:c8:06:4f:
         eb:6d:38:38:6f:5f:87:59:d3:c3:48:ae:a8:4b:13:71:62:1a:
         d0:cb:eb:d1:c4:38:0f:69:89:9f:c5:d0:7d:9d:43:77:6e:62:
         20:80:4c:c9:fe:32:fb:3c:d5:c4:54:d0:06:02:37:8a:22:79:
         39:28:0f:11:77:c0:8a:f6:b3:eb:1f:1d:b8:c5:36:af:59:43:
         b7:09:16:42:34:48:92:ae:b7:fd:fc:e4:09:5d:3d:65:b5:b1:
         a6:ba:6a:ac:e6:d6:9a:84:f7:b5:91:1c:b4:cd:f4:00:4c:6b:
         7a:f6:37:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org