Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e9b2b702-05a6-4f5b-9590-c573294630d0/9d16822859ff057ffd2ce766078f3e1e1f5f6695.roa
File:                     9d16822859ff057ffd2ce766078f3e1e1f5f6695.roa (raw, json)
Hash identifier:          tvzfv6sL6XTzljsqNqsLn3w+zNKAMF+Z5cL7asS6OnA=
Subject key identifier:   53:2B:B2:D3:65:2D:14:D7:E0:4B:41:36:5D:E9:91:46:64:36:22:71
Certificate issuer:       /CN=b1692ab68c975b69e2411b06e4249ca2f134a1c9
Certificate serial:       2165DA
Authority key identifier: E9:6C:D3:BA:24:A1:77:EE:10:8D:36:73:D0:4C:C3:50:4D:CF:D2:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b1692ab68c975b69e2411b06e4249ca2f134a1c9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e9b2b702-05a6-4f5b-9590-c573294630d0/9d16822859ff057ffd2ce766078f3e1e1f5f6695.roa
Signing time:             Wed 01 Nov 2023 14:53:01 +0000
ROA not before:           Wed 01 Nov 2023 14:53:01 +0000
ROA not after:            Sat 01 Nov 2025 14:53:01 +0000
asID:                     269921
IP address blocks:        201.46.116.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2188762 (0x2165da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1692ab68c975b69e2411b06e4249ca2f134a1c9
        Validity
            Not Before: Nov  1 14:53:01 2023 GMT
            Not After : Nov  1 14:53:01 2025 GMT
        Subject: CN=9d16822859ff057ffd2ce766078f3e1e1f5f6695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f7:40:4c:15:54:85:ab:1b:d4:fa:7f:d7:8e:
                    6d:f0:d3:da:e4:a9:1b:61:3b:e0:29:84:b0:53:03:
                    d2:e1:94:88:37:4f:4d:38:b7:3c:1f:6a:04:3a:45:
                    09:57:e1:2f:e9:e7:b0:fc:05:09:85:05:a3:8e:0a:
                    a4:96:c3:b3:8d:6d:07:1a:b1:6c:57:0a:ed:da:9c:
                    a9:10:12:65:7f:81:92:d2:75:c7:0c:60:ed:77:4a:
                    85:68:e2:29:8c:26:8b:d2:bd:0d:f9:a9:a0:17:52:
                    ad:bd:a5:d5:84:f5:56:b5:78:3c:0c:64:ca:0a:3c:
                    d1:c9:80:e6:74:4c:3a:7d:5d:8a:6e:13:ec:b8:bf:
                    e1:56:21:bd:d3:51:b8:80:57:06:a3:e6:67:7d:be:
                    6f:dc:5b:43:14:e3:dc:f1:fb:23:24:4d:00:14:53:
                    ef:19:1d:4c:65:44:03:30:31:73:99:75:be:e8:3f:
                    fe:93:c8:da:52:63:85:c0:a2:ca:71:e4:12:c4:0b:
                    31:75:65:99:05:c0:f1:3e:05:3e:cd:cb:02:78:97:
                    85:06:9f:7b:a6:f9:58:bb:cc:8b:e4:4f:6d:73:0f:
                    6d:36:8d:a5:b3:12:e0:4f:ef:aa:c7:0f:f4:7a:08:
                    17:8d:c6:a5:76:91:4b:fe:16:58:aa:1a:da:0e:a5:
                    28:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:2B:B2:D3:65:2D:14:D7:E0:4B:41:36:5D:E9:91:46:64:36:22:71
            X509v3 Authority Key Identifier:
                keyid:E9:6C:D3:BA:24:A1:77:EE:10:8D:36:73:D0:4C:C3:50:4D:CF:D2:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b1692ab68c975b69e2411b06e4249ca2f134a1c9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e9b2b702-05a6-4f5b-9590-c573294630d0/9d16822859ff057ffd2ce766078f3e1e1f5f6695.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e9b2b702-05a6-4f5b-9590-c573294630d0/b1692ab68c975b69e2411b06e4249ca2f134a1c9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.46.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:31:6e:b7:d7:d4:44:18:89:cf:91:82:ee:b4:6e:3a:a8:e1:
         ce:8f:02:c3:46:47:d9:94:10:86:0c:fa:37:3f:65:b3:84:2c:
         d2:a2:64:30:24:65:a3:61:20:c0:30:30:3e:77:13:d3:43:4a:
         7e:54:22:53:20:ba:6b:d9:bc:a8:ec:11:b7:85:a6:67:f3:e2:
         9c:c8:3a:9b:d7:7c:ee:ce:4d:b5:b8:58:80:3c:96:83:4b:5f:
         d9:12:68:bb:8c:54:ca:03:cb:29:5d:e0:12:4e:5f:5c:00:74:
         5a:c3:32:0c:91:20:15:6c:90:f1:01:7a:59:4e:db:51:9d:34:
         cf:89:41:25:3e:f4:10:7f:22:f3:92:f1:bb:72:da:fe:9d:fd:
         eb:17:a4:d9:4e:82:d9:99:b3:19:69:3d:aa:7b:e3:85:c4:e4:
         50:e9:a5:2b:67:22:13:ea:78:62:b9:4e:38:a6:0d:fe:44:9a:
         6d:50:92:29:6a:c6:b6:b8:63:f0:0e:b2:96:2b:50:e4:9f:5f:
         cf:54:dd:1f:9e:fa:4b:c1:25:b4:c7:74:e6:ea:54:ae:22:79:
         85:27:30:cd:8c:cc:8c:40:54:d2:f6:ad:17:f5:26:80:88:40:
         82:eb:b5:dd:3c:f2:57:a4:b7:f8:e5:40:36:ca:e6:48:74:af:
         27:a5:8d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:33 2024 by rpki-client on console-fra.rpki-client.org