Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/1e4d2912512811ead37c26b8bcd230a09a6b9035.roa
File:                     1e4d2912512811ead37c26b8bcd230a09a6b9035.roa (raw, json)
Hash identifier:          aDXWOzzp7Xil4k+lTQTuf7XTbqKRsTPPnFiKpvDLZPE=
Subject key identifier:   A1:12:0C:CC:5C:13:43:82:24:CA:A1:3D:E1:3E:A9:D3:A8:F8:DA:F1
Certificate issuer:       /CN=463cab8887b80a1beafb23f455d7d8458c8c1c5a
Certificate serial:       0C3EA8
Authority key identifier: 40:6A:7E:62:D1:E4:77:0F:E0:61:AA:9B:62:82:E8:F0:B3:69:01:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/463cab8887b80a1beafb23f455d7d8458c8c1c5a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/1e4d2912512811ead37c26b8bcd230a09a6b9035.roa
Signing time:             Thu 05 Oct 2023 12:08:05 +0000
ROA not before:           Wed 04 Oct 2023 03:00:00 +0000
ROA not after:            Sun 05 Oct 2025 03:00:00 +0000
asID:                     272150
IP address blocks:        192.141.23.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 802472 (0xc3ea8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=463cab8887b80a1beafb23f455d7d8458c8c1c5a
        Validity
            Not Before: Oct  4 03:00:00 2023 GMT
            Not After : Oct  5 03:00:00 2025 GMT
        Subject: CN=1e4d2912512811ead37c26b8bcd230a09a6b9035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:47:63:94:42:ce:ee:4f:ff:68:ff:27:77:23:
                    2b:07:f0:48:5b:a1:b4:77:35:d4:50:fb:86:23:60:
                    af:15:80:db:98:b8:64:9a:71:09:64:ee:e4:f5:51:
                    60:46:eb:69:49:a4:db:cf:9f:b4:71:7e:06:70:59:
                    e5:53:36:91:5f:c5:ab:e1:c0:62:71:ec:90:4e:fc:
                    3c:38:29:a4:c7:59:58:a3:b8:b7:7f:bc:66:e0:9e:
                    48:a5:ee:44:83:64:4b:0e:d6:26:9a:8e:1f:50:20:
                    27:63:06:e3:f0:35:ee:ed:10:b7:92:ee:d8:10:70:
                    11:f3:29:85:ba:e2:b0:6b:9c:89:84:f7:9e:80:39:
                    6a:0c:f0:85:b9:b3:4f:01:98:fa:88:e9:be:63:45:
                    94:7d:90:33:ee:f8:20:6f:dd:29:d6:07:d0:80:d7:
                    72:d4:e5:72:d9:48:46:d8:47:90:25:2b:f7:23:93:
                    fe:7a:b5:41:d5:57:c3:0b:e9:5e:42:99:82:40:81:
                    95:28:67:c5:c6:ce:0b:67:d1:cd:a8:87:33:30:d8:
                    d6:ca:30:f4:96:8a:18:21:be:fe:22:7d:d0:42:d3:
                    11:64:bb:45:49:71:4b:af:4b:e1:72:3b:c3:c9:89:
                    fc:aa:b0:5d:06:30:73:30:b5:be:fc:c7:a3:77:51:
                    21:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:12:0C:CC:5C:13:43:82:24:CA:A1:3D:E1:3E:A9:D3:A8:F8:DA:F1
            X509v3 Authority Key Identifier:
                keyid:40:6A:7E:62:D1:E4:77:0F:E0:61:AA:9B:62:82:E8:F0:B3:69:01:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/463cab8887b80a1beafb23f455d7d8458c8c1c5a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/1e4d2912512811ead37c26b8bcd230a09a6b9035.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/463cab8887b80a1beafb23f455d7d8458c8c1c5a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:64:e1:49:29:26:8e:38:17:69:7a:d0:99:dd:7c:49:2a:cd:
         5e:15:47:9d:b9:8b:39:84:ba:b1:09:27:de:60:36:13:af:37:
         ff:c2:86:47:05:b3:45:1d:4f:96:f6:f0:07:5f:08:27:c6:d6:
         0a:97:96:d4:c3:ee:d8:6d:18:84:a2:fd:99:ce:4e:e7:5d:fa:
         5d:0f:b6:71:21:dd:9a:a0:06:88:e5:6b:b6:cd:72:5e:85:0e:
         39:9d:ad:69:a7:39:88:9b:e4:9e:6c:e6:98:1b:03:e8:30:d5:
         e9:02:44:d9:2a:fd:e7:ce:3d:99:61:db:9d:08:5f:eb:8b:39:
         e3:70:9f:fd:0f:14:23:5e:ed:91:16:07:33:6e:28:03:18:67:
         2f:19:ff:ae:0c:7a:ac:90:cf:dd:07:83:23:90:7a:cd:46:25:
         c4:67:e6:ed:25:73:22:e2:4e:83:44:f0:83:af:08:0a:b2:2e:
         4f:a9:4d:15:be:3f:d2:69:df:50:cf:1e:55:cb:e1:b9:0f:9f:
         69:01:f5:79:d7:d0:e9:60:f5:cf:83:79:4a:fe:3a:9b:d7:b7:
         2f:f5:91:db:8e:a1:11:c1:10:ad:ed:ed:96:7e:69:2a:f0:96:
         15:f2:48:9b:e5:d6:ee:a4:dd:b3:e0:7d:43:8d:26:b9:99:18:
         bb:36:2d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org