Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/5b1d2a63af33f8d409253dd804f91b7e161a50a4.roa
File:                     5b1d2a63af33f8d409253dd804f91b7e161a50a4.roa (raw, json)
Hash identifier:          TJQ4Lh1yYXzpELb2sV6Jg14YsYKtj3MeWLuF3uileSQ=
Subject key identifier:   AE:01:4E:8D:28:E9:8E:F9:54:15:38:50:4D:B8:0E:DC:5C:58:F2:35
Certificate issuer:       /CN=463cab8887b80a1beafb23f455d7d8458c8c1c5a
Certificate serial:       0C04A2
Authority key identifier: 40:6A:7E:62:D1:E4:77:0F:E0:61:AA:9B:62:82:E8:F0:B3:69:01:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/463cab8887b80a1beafb23f455d7d8458c8c1c5a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/5b1d2a63af33f8d409253dd804f91b7e161a50a4.roa
Signing time:             Tue 03 Oct 2023 17:17:41 +0000
ROA not before:           Mon 02 Oct 2023 17:17:41 +0000
ROA not after:            Fri 03 Oct 2025 18:17:41 +0000
asID:                     272150
IP address blocks:        192.141.20.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 787618 (0xc04a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=463cab8887b80a1beafb23f455d7d8458c8c1c5a
        Validity
            Not Before: Oct  2 17:17:41 2023 GMT
            Not After : Oct  3 18:17:41 2025 GMT
        Subject: CN=5b1d2a63af33f8d409253dd804f91b7e161a50a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2d:46:6f:31:44:96:1d:61:2b:ca:85:05:a8:
                    9f:ba:55:7b:8b:b5:53:61:3b:0f:c7:1b:8c:37:7e:
                    b8:33:b1:d7:d1:63:16:23:2c:28:4c:6b:b4:c4:c5:
                    23:bd:b5:b1:23:51:d4:8d:8a:b2:6e:26:25:bf:85:
                    23:6f:56:63:aa:23:0c:f8:30:2e:64:e9:2a:57:cd:
                    14:41:53:87:ba:ab:2f:fd:f0:90:9d:54:02:65:df:
                    93:da:97:a5:0b:16:ce:c6:7d:ee:f2:1a:03:e1:5c:
                    7a:fb:d3:28:c9:67:ca:e9:ef:8a:f8:e3:44:8b:3d:
                    06:30:13:1c:6f:f3:94:ad:da:be:5a:4a:78:6c:43:
                    95:71:f7:c7:1e:d3:73:89:05:a4:58:56:42:14:48:
                    0e:83:39:4c:14:85:2b:d3:28:62:87:6f:71:63:26:
                    1f:86:ae:ab:b5:b0:a9:30:e0:26:a1:fd:12:aa:6d:
                    70:6c:3f:ee:a3:2d:7a:a2:e8:5a:38:7b:e9:f2:3e:
                    0c:75:bc:ef:42:97:02:c0:14:25:58:20:86:2e:f8:
                    45:94:20:64:00:02:fb:dc:d3:95:7b:ea:0c:94:01:
                    98:d2:87:4c:f4:56:5f:3e:ed:4d:24:d6:7c:1e:aa:
                    2b:71:50:c2:0f:25:6b:20:31:fe:ad:36:b0:0c:da:
                    98:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:01:4E:8D:28:E9:8E:F9:54:15:38:50:4D:B8:0E:DC:5C:58:F2:35
            X509v3 Authority Key Identifier:
                keyid:40:6A:7E:62:D1:E4:77:0F:E0:61:AA:9B:62:82:E8:F0:B3:69:01:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/463cab8887b80a1beafb23f455d7d8458c8c1c5a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/5b1d2a63af33f8d409253dd804f91b7e161a50a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/463cab8887b80a1beafb23f455d7d8458c8c1c5a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:83:bf:da:ed:63:ef:b7:91:71:e9:49:25:e6:83:9c:3a:32:
         13:02:98:37:36:af:9f:17:84:51:af:12:01:7d:2a:c4:0f:c1:
         ff:2c:b3:b3:a3:90:fc:ca:56:ab:12:a7:22:d4:9c:f4:2c:3c:
         64:34:ae:57:ab:b7:9f:12:83:25:f2:90:e8:44:bc:67:a4:de:
         da:39:bf:ce:25:54:d5:9d:c1:fa:f8:11:c1:d0:cd:a3:ad:28:
         6d:73:21:fd:ea:1b:e9:f5:27:76:e9:1e:90:89:59:ad:b6:15:
         3d:97:44:99:87:35:97:dc:fb:81:d7:39:4b:7f:1a:2b:5a:31:
         3d:00:02:2a:62:b1:b9:8b:ca:79:1f:76:1f:fd:18:fd:78:c2:
         d3:c2:02:23:3f:4d:b4:62:38:b8:3d:cf:29:54:a8:6a:9f:d4:
         57:bc:83:f5:2e:13:17:7a:77:6a:86:29:df:6d:fd:a4:bc:02:
         6a:58:67:74:dd:b4:4e:39:ce:a4:35:72:c3:02:30:9f:91:2a:
         63:19:79:03:e6:75:68:6a:8b:f4:50:3a:b2:bf:fd:e2:15:43:
         db:29:0e:61:a7:5d:21:55:83:36:9c:9a:6e:d5:69:3d:bc:bc:
         b6:26:27:e5:84:d5:59:75:66:78:ad:35:62:a5:03:ae:b0:43:
         58:70:69:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:09 2024 by rpki-client on console-fra.rpki-client.org