Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c4947a3f-992e-4ce4-8eca-867007c7e84b/50d8027aad95e44b9e062f1bfc55babb580e03fe.roa
File:                     50d8027aad95e44b9e062f1bfc55babb580e03fe.roa (raw, json)
Hash identifier:          MLn8r7tt6W2lCbhYXPxupLUgl7ShlLEe2SfGDKq0Imo=
Subject key identifier:   F5:F0:85:B1:1A:40:44:23:0E:C5:26:84:8B:2F:27:E0:CA:75:A0:9D
Certificate issuer:       /CN=6c6b207acd0d793b67c78c49bfe9ffadc4c0336d
Certificate serial:       03ED34
Authority key identifier: 4D:89:D9:6B:BE:72:AE:8C:07:F6:EE:15:30:10:C4:10:0C:78:A5:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c6b207acd0d793b67c78c49bfe9ffadc4c0336d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c4947a3f-992e-4ce4-8eca-867007c7e84b/50d8027aad95e44b9e062f1bfc55babb580e03fe.roa
Signing time:             Fri 01 Dec 2023 17:14:32 +0000
ROA not before:           Fri 01 Dec 2023 17:14:32 +0000
ROA not after:            Mon 01 Dec 2025 17:14:32 +0000
asID:                     25799
IP address blocks:        109.104.148.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 257332 (0x3ed34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c6b207acd0d793b67c78c49bfe9ffadc4c0336d
        Validity
            Not Before: Dec  1 17:14:32 2023 GMT
            Not After : Dec  1 17:14:32 2025 GMT
        Subject: CN=50d8027aad95e44b9e062f1bfc55babb580e03fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:50:1e:5e:1a:58:4d:42:7b:41:68:3e:4d:40:
                    8c:5c:ff:79:4d:9e:5c:3c:3e:3f:4d:0e:92:be:9e:
                    c0:3b:fb:98:60:cd:a2:64:ca:2a:bd:95:3f:61:0d:
                    a7:48:44:df:14:c9:8e:fa:2c:b7:9b:b5:59:39:50:
                    be:fd:20:f2:7a:4a:a1:7e:ee:16:04:a9:fb:83:9a:
                    4a:dc:b7:58:5b:65:3c:9a:80:9e:3c:a6:40:f9:12:
                    dd:d8:45:45:1a:bf:b7:66:3a:c6:ec:9e:36:29:8c:
                    58:e9:6d:6f:40:e5:6b:98:8c:40:4f:73:15:3c:ab:
                    aa:20:61:65:21:e5:e4:4e:29:62:6e:8f:05:36:f8:
                    93:ce:1e:e7:b7:92:48:2f:3d:0d:fe:6b:6d:6b:a4:
                    7a:2f:97:3c:cb:ae:4e:82:70:60:d2:8c:54:15:c7:
                    ec:f1:6b:bf:80:c0:4c:1e:01:d2:a1:fe:84:64:75:
                    11:b6:98:ec:0b:86:79:35:44:d4:d1:a0:c2:f5:19:
                    c4:ea:f6:04:c8:45:42:cf:9a:ab:c1:b2:d0:4c:48:
                    df:5d:5e:67:63:ce:2e:70:7e:a7:64:f0:e2:8a:40:
                    fd:9b:a4:09:10:09:08:2d:b0:7b:f7:c2:92:55:94:
                    6e:b1:0c:72:66:3d:9e:2e:82:0d:39:a7:8a:63:f2:
                    dc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F0:85:B1:1A:40:44:23:0E:C5:26:84:8B:2F:27:E0:CA:75:A0:9D
            X509v3 Authority Key Identifier:
                keyid:4D:89:D9:6B:BE:72:AE:8C:07:F6:EE:15:30:10:C4:10:0C:78:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c6b207acd0d793b67c78c49bfe9ffadc4c0336d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c4947a3f-992e-4ce4-8eca-867007c7e84b/50d8027aad95e44b9e062f1bfc55babb580e03fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c4947a3f-992e-4ce4-8eca-867007c7e84b/6c6b207acd0d793b67c78c49bfe9ffadc4c0336d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.104.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:de:c9:41:a0:e4:a4:74:68:9d:7c:00:44:9c:d2:25:47:6e:
         ce:a3:5c:8f:2f:f4:71:27:ed:c4:ea:90:f6:2c:83:fa:5b:02:
         17:23:68:5f:21:e3:e0:3b:75:13:75:75:a9:a9:36:d4:a5:99:
         88:d2:f5:80:b3:21:ae:a4:46:b3:c5:16:9e:cb:5d:8b:7e:df:
         39:64:2c:bb:b4:2e:2a:7f:27:80:86:a9:5c:b0:83:c6:af:5d:
         69:d0:e5:2c:9f:6e:7a:6b:c3:1a:0e:69:41:9d:16:ec:96:4e:
         64:33:b4:b5:8b:9d:4f:a2:19:e3:fc:05:4c:87:f3:2d:b8:9b:
         91:1d:a0:a3:5c:e4:a8:f5:58:93:5c:31:5d:19:68:1c:84:10:
         59:13:ce:22:2c:a3:4d:8b:f5:a1:bd:93:13:b6:18:41:da:b2:
         be:8c:d5:8f:51:ef:78:90:58:ea:2e:6a:c3:49:b4:a4:73:db:
         fc:34:5b:55:de:8f:53:7d:1b:38:2c:6d:d9:39:e4:50:55:ec:
         47:7f:32:61:2e:07:be:ef:74:e3:05:28:32:b5:5f:3d:d6:98:
         4f:e4:93:1d:51:14:b2:64:c7:2d:1f:8c:a3:69:c6:5b:88:c5:
         2e:9e:76:76:e9:29:21:55:02:1b:3c:67:5c:19:57:3f:9c:83:
         83:16:56:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:06 2024 by rpki-client on console-fra.rpki-client.org