Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c5aad79c-eb1d-4629-a8e6-69eb4c8bc2cd/fdaa578f658b6e4c97e61e3209db02903fe49ca1.roa
File:                     fdaa578f658b6e4c97e61e3209db02903fe49ca1.roa (raw, json)
Hash identifier:          RomdAgfuY+nvlCXfcRR2S7CKN0dnqw6/6Cjxy1OzIzQ=
Subject key identifier:   94:6B:50:C5:EF:B5:FE:6A:9B:E9:4E:39:D2:16:E9:29:79:8D:3B:9E
Certificate issuer:       /CN=acf2f8bdf63fefc207c62a198746368b3d6991d1
Certificate serial:       242283
Authority key identifier: 19:16:F1:DA:85:AC:C5:FB:D1:A0:F6:25:22:ED:D2:92:80:2C:68:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acf2f8bdf63fefc207c62a198746368b3d6991d1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c5aad79c-eb1d-4629-a8e6-69eb4c8bc2cd/fdaa578f658b6e4c97e61e3209db02903fe49ca1.roa
Signing time:             Tue 05 Sep 2023 08:30:00 +0000
ROA not before:           Mon 04 Sep 2023 08:30:00 +0000
ROA not after:            Wed 03 Sep 2025 08:30:00 +0000
asID:                     271952
IP address blocks:        190.109.49.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2368131 (0x242283)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acf2f8bdf63fefc207c62a198746368b3d6991d1
        Validity
            Not Before: Sep  4 08:30:00 2023 GMT
            Not After : Sep  3 08:30:00 2025 GMT
        Subject: CN=fdaa578f658b6e4c97e61e3209db02903fe49ca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:56:d9:99:5c:97:b7:fc:67:96:5a:2a:61:24:
                    fa:c5:3b:21:73:f1:65:cd:6b:f3:f8:86:20:2e:64:
                    37:fa:4f:0f:d4:51:ea:c6:1d:a9:8e:0b:e4:2c:f8:
                    88:4a:91:28:18:c1:13:11:85:1c:4d:2d:a2:54:e8:
                    c2:c5:ce:44:b2:d2:c7:31:4d:b8:6c:52:83:5d:bb:
                    08:c3:99:7a:6e:5b:d0:87:04:68:a4:2a:b6:23:b7:
                    9e:43:26:56:c7:9e:3b:20:69:63:39:4d:b3:95:63:
                    40:f8:6c:8c:36:28:d8:c2:c0:2d:f0:c5:e9:83:6d:
                    3a:10:a6:68:86:fd:38:2b:5c:43:3d:fa:17:29:0f:
                    37:b1:d9:57:ee:3f:ef:4e:06:c8:37:f4:c3:73:40:
                    77:6b:fa:de:46:ff:0d:db:04:22:35:75:7a:a0:49:
                    be:88:fc:ba:0e:91:76:ec:7f:56:e2:ef:ec:0e:20:
                    d6:3f:fd:00:38:3b:7c:3f:44:86:78:09:85:ab:2d:
                    d7:42:cd:ff:bd:13:ae:f2:e1:86:18:36:63:00:d4:
                    e0:38:bc:86:c5:6b:5b:c9:d1:c5:8c:d0:21:32:d6:
                    f8:7b:42:a2:18:a4:04:6e:66:ac:ab:8a:e3:6b:cd:
                    21:02:14:9b:37:a5:11:bf:7f:c9:0f:56:1d:5f:53:
                    74:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:6B:50:C5:EF:B5:FE:6A:9B:E9:4E:39:D2:16:E9:29:79:8D:3B:9E
            X509v3 Authority Key Identifier:
                keyid:19:16:F1:DA:85:AC:C5:FB:D1:A0:F6:25:22:ED:D2:92:80:2C:68:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acf2f8bdf63fefc207c62a198746368b3d6991d1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c5aad79c-eb1d-4629-a8e6-69eb4c8bc2cd/fdaa578f658b6e4c97e61e3209db02903fe49ca1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c5aad79c-eb1d-4629-a8e6-69eb4c8bc2cd/acf2f8bdf63fefc207c62a198746368b3d6991d1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:21:fb:11:34:4d:97:96:5c:84:24:77:22:71:16:50:87:19:
         55:f4:8e:03:fd:03:c4:0e:ef:0f:b0:8c:e3:e7:e0:da:00:54:
         f1:dc:a6:35:7c:51:ab:e2:bb:c6:35:6a:da:eb:1b:19:5a:ce:
         33:54:25:40:ce:20:4e:d8:30:87:61:20:6c:fb:c1:86:d8:31:
         02:2e:ae:5e:a5:ea:f7:d9:6b:a5:43:0b:09:64:da:c0:7a:3d:
         6e:99:ab:dc:06:a6:9e:0c:b4:0f:bc:c3:9e:fe:7a:dd:0b:36:
         cd:04:0f:51:2e:20:3b:76:69:8c:9e:82:be:ba:54:fe:51:f5:
         79:d9:2c:5d:77:50:db:75:75:a3:c7:00:a8:6c:52:c4:aa:63:
         2d:8d:8f:25:f8:98:41:d4:7d:92:da:70:37:87:0f:31:5e:3a:
         de:16:51:6c:73:a4:68:6b:d5:94:49:11:5f:dd:b7:0c:3d:cf:
         ad:80:8f:26:c8:0a:de:43:08:fd:59:1c:5c:82:2b:ba:93:06:
         ef:68:4b:0c:b5:81:93:7d:78:d6:c3:62:c8:fe:7b:de:00:f5:
         7e:7e:85:fe:a1:a6:43:e9:6b:67:e5:49:e1:c3:15:16:10:1b:
         02:3f:cf:c0:6b:4e:83:c8:2d:70:1a:30:0c:7e:42:ee:f5:c3:
         e8:03:77:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:30 2024 by rpki-client on console-fra.rpki-client.org