Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ee9c2f01-af18-4839-9f33-1a304a7ee88c/f5c491e5c84f54c74a652595aede3aee4b0dc084.roa
File:                     f5c491e5c84f54c74a652595aede3aee4b0dc084.roa (raw, json)
Hash identifier:          4G6q8RBs5DPyqGfhaC99ADEfFSxnz7PmBRlrN4Cc3Ew=
Subject key identifier:   3D:EB:AB:C3:3C:62:7D:61:C2:23:E8:04:7C:34:08:6A:A2:3F:53:5F
Certificate issuer:       /CN=819e92973b36aa90cd88dd3d3aee9b75bde9a5dc
Certificate serial:       17D990
Authority key identifier: 6F:2B:0B:C9:D4:DC:CB:B7:20:4C:A2:45:3C:37:0D:C8:3E:33:D6:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/819e92973b36aa90cd88dd3d3aee9b75bde9a5dc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ee9c2f01-af18-4839-9f33-1a304a7ee88c/f5c491e5c84f54c74a652595aede3aee4b0dc084.roa
Signing time:             Tue 14 Nov 2023 21:34:22 +0000
ROA not before:           Tue 14 Nov 2023 21:34:22 +0000
ROA not after:            Fri 14 Nov 2025 21:34:22 +0000
asID:                     269986
IP address blocks:        201.49.128.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1563024 (0x17d990)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=819e92973b36aa90cd88dd3d3aee9b75bde9a5dc
        Validity
            Not Before: Nov 14 21:34:22 2023 GMT
            Not After : Nov 14 21:34:22 2025 GMT
        Subject: CN=f5c491e5c84f54c74a652595aede3aee4b0dc084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:68:8a:d9:69:c1:1a:f9:9f:ab:83:36:e5:2e:
                    b4:66:fe:7d:a3:2c:d4:18:77:ed:c7:68:f5:00:22:
                    b1:72:55:19:7f:92:01:44:ae:95:c6:1b:2b:a8:1a:
                    b3:86:d2:18:4a:c1:14:a1:23:37:a3:a6:06:50:b8:
                    4c:1a:9a:90:de:f6:39:bc:0e:b8:58:85:ed:e8:84:
                    86:2a:a6:06:be:27:60:ca:56:3e:c4:60:57:2f:da:
                    b0:a9:20:cf:2b:e6:63:a6:9f:3d:43:e6:d2:5c:27:
                    04:a6:70:b7:f3:12:2e:5b:f1:ee:14:8c:97:80:12:
                    b0:c8:54:1d:b7:5f:6e:0a:33:eb:65:16:e9:59:99:
                    47:78:eb:f2:b7:bb:09:4d:33:c5:da:e2:df:d1:40:
                    9d:5a:7d:e5:6d:cb:27:fe:66:ca:00:8f:59:a0:b7:
                    a6:f6:4f:14:14:04:9a:57:a7:cc:08:cf:94:0f:4c:
                    ee:21:3c:c0:dc:74:7a:89:99:57:6c:f3:f7:e2:f8:
                    48:94:b0:99:24:25:be:c4:b3:6f:84:99:0a:96:86:
                    03:f7:e5:36:3c:b4:94:36:cf:09:0d:46:a5:4c:0c:
                    a0:b0:06:b7:3e:e7:0e:3f:0c:5a:b1:35:65:82:ae:
                    aa:27:e7:47:27:c4:89:ec:91:86:8b:49:31:f3:52:
                    ed:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:EB:AB:C3:3C:62:7D:61:C2:23:E8:04:7C:34:08:6A:A2:3F:53:5F
            X509v3 Authority Key Identifier:
                keyid:6F:2B:0B:C9:D4:DC:CB:B7:20:4C:A2:45:3C:37:0D:C8:3E:33:D6:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/819e92973b36aa90cd88dd3d3aee9b75bde9a5dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ee9c2f01-af18-4839-9f33-1a304a7ee88c/f5c491e5c84f54c74a652595aede3aee4b0dc084.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ee9c2f01-af18-4839-9f33-1a304a7ee88c/819e92973b36aa90cd88dd3d3aee9b75bde9a5dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:bb:c9:93:30:ef:4d:5a:79:4e:ef:d3:67:7e:1c:63:af:d8:
         0d:bb:88:1c:f1:e8:ad:71:9c:3d:59:91:9d:ff:a6:57:04:2d:
         88:e6:d3:c0:41:39:93:1e:94:8a:97:e0:39:37:f0:ea:7d:29:
         20:47:6f:ea:d4:26:e1:df:0a:6c:d9:08:d7:d9:ca:3b:9f:3a:
         37:4a:a5:12:d9:90:f5:a8:4b:ea:44:70:ea:01:2c:50:5c:38:
         2e:da:37:27:f8:88:11:a5:56:a0:d0:c3:59:a4:e4:cc:7a:2c:
         0c:96:78:d3:ec:a3:a6:03:63:57:c2:10:ad:c7:50:4c:a9:14:
         0e:e3:92:68:5c:ca:e4:da:3b:f2:24:c5:d6:b8:41:37:e3:b1:
         d8:ed:3a:16:9e:93:f3:b7:d8:5e:77:ac:44:aa:d6:94:77:57:
         4a:49:02:9e:b3:fd:2e:b1:3a:15:39:c6:57:ff:e5:40:05:7d:
         94:88:00:4c:4c:32:78:6f:49:20:78:48:04:e5:04:7d:37:0b:
         26:a6:ce:1a:de:51:67:f6:26:12:43:2c:35:ae:34:63:a9:42:
         c8:d2:a4:73:c9:5a:50:13:b1:d2:0c:b6:a0:03:5d:0b:78:a7:
         8c:fa:1f:27:41:74:06:df:3a:7a:91:14:9f:7a:5a:b5:a1:54:
         c1:bf:b0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:51 2024 by rpki-client on console-ams.rpki-client.org