Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e6e2889e-d7df-4128-87a2-97aa942dd7f4/896ac5834bd2704798cae81033f83bd5fbf0016c.roa
File:                     896ac5834bd2704798cae81033f83bd5fbf0016c.roa (raw, json)
Hash identifier:          KeYUMIZKQqVUrmZG37+I53ZDkln60gRpipe2C+6BieM=
Subject key identifier:   E0:CC:5A:35:24:9D:B3:90:58:04:17:F0:74:5F:5B:F7:37:BD:8F:AB
Certificate issuer:       /CN=57219f78d566e162a57018833fb256200a65949f
Certificate serial:       226335
Authority key identifier: 2A:AD:A1:B1:EE:72:B3:63:3E:A9:F7:A4:DA:16:FB:7F:41:A6:6D:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/57219f78d566e162a57018833fb256200a65949f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e6e2889e-d7df-4128-87a2-97aa942dd7f4/896ac5834bd2704798cae81033f83bd5fbf0016c.roa
Signing time:             Fri 25 Aug 2023 22:42:31 +0000
ROA not before:           Thu 24 Aug 2023 22:42:30 +0000
ROA not after:            Mon 25 Aug 2025 22:42:30 +0000
asID:                     61468
IP address blocks:        192.188.46.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2253621 (0x226335)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57219f78d566e162a57018833fb256200a65949f
        Validity
            Not Before: Aug 24 22:42:30 2023 GMT
            Not After : Aug 25 22:42:30 2025 GMT
        Subject: CN=896ac5834bd2704798cae81033f83bd5fbf0016c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:87:92:d4:2f:22:43:9d:20:aa:8f:01:13:8a:
                    cb:d5:d9:4e:0c:ae:2f:a0:ca:2b:4e:df:a8:e4:4b:
                    b9:78:22:3c:61:5c:6c:30:92:79:ee:1c:49:32:1e:
                    8e:7c:37:4c:38:e9:f3:6d:80:63:38:43:ab:12:89:
                    50:93:f5:ed:08:c2:ec:2d:d2:6f:55:61:85:c8:2a:
                    0b:d1:32:d9:53:5a:2e:22:d1:dc:aa:b9:d3:e6:83:
                    d0:b7:34:66:a1:ea:c8:c4:28:6f:6e:50:20:fc:89:
                    0d:7a:37:ef:ad:a9:b1:b5:ad:3c:eb:a1:55:67:36:
                    37:f6:5a:79:12:98:a8:02:be:25:30:9b:ae:52:5a:
                    a6:db:1f:18:27:f0:a1:c3:e6:e8:cf:cf:6a:9f:cc:
                    d1:8a:2f:26:2f:f8:fb:ac:76:29:b7:3b:3b:9e:0e:
                    8a:4b:93:6b:df:0a:b3:3a:21:1d:46:92:73:b3:96:
                    13:cd:cf:02:46:1b:be:59:f3:ea:b1:0d:b8:cf:be:
                    d3:75:b1:2f:ee:09:ae:51:11:9e:02:71:e2:8c:07:
                    bd:09:ef:c6:27:28:ed:a1:dd:0a:52:69:cf:01:11:
                    9c:3d:8e:71:18:64:8c:4c:df:d9:7b:f8:88:fd:6d:
                    41:71:c0:cb:e2:18:9e:61:de:e8:83:2f:91:54:cf:
                    2a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:CC:5A:35:24:9D:B3:90:58:04:17:F0:74:5F:5B:F7:37:BD:8F:AB
            X509v3 Authority Key Identifier:
                keyid:2A:AD:A1:B1:EE:72:B3:63:3E:A9:F7:A4:DA:16:FB:7F:41:A6:6D:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/57219f78d566e162a57018833fb256200a65949f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e6e2889e-d7df-4128-87a2-97aa942dd7f4/896ac5834bd2704798cae81033f83bd5fbf0016c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e6e2889e-d7df-4128-87a2-97aa942dd7f4/57219f78d566e162a57018833fb256200a65949f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:5e:d4:9f:f7:97:0b:35:51:1c:83:2b:fa:da:6f:1f:3c:91:
         61:6b:ac:03:d4:73:e7:d8:4f:28:ad:6f:74:ad:fd:bf:ba:23:
         32:25:b1:ef:5d:e5:ad:5b:e0:31:4f:59:9f:cd:82:9a:74:f4:
         e4:7d:fa:53:d1:f9:57:0d:f5:2b:6b:18:fc:52:28:72:44:f2:
         12:5f:43:be:95:d7:3a:a9:90:11:1e:8f:86:99:cd:79:5c:50:
         20:61:93:9c:c3:a7:d7:f3:d1:68:70:25:dc:a4:d0:3e:eb:36:
         8b:9d:6a:29:7e:24:78:2d:f7:99:c8:58:62:2f:69:ff:c3:27:
         6b:df:36:42:98:42:9d:82:72:1f:53:e4:5b:75:37:1a:7d:8e:
         73:4b:d7:c7:03:d7:a4:e3:6c:c8:68:c3:d0:ee:41:b6:5c:de:
         0c:66:1e:6f:a0:7f:ce:fa:e7:8f:a2:6d:88:50:b8:b0:2b:f0:
         fa:a7:6b:07:4c:d0:e3:88:de:57:d8:93:21:54:b2:99:b6:ed:
         83:cc:3c:33:4c:21:a9:ad:ae:83:1a:55:f1:45:d5:00:f6:4b:
         95:5e:e1:05:03:f1:28:6a:17:b5:c8:34:8f:16:22:0d:55:14:
         b4:6b:10:7a:f5:f5:2e:34:6d:47:88:d4:91:cf:29:4b:cf:4a:
         83:dc:97:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:33 2024 by rpki-client on console-fra.rpki-client.org