Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/6d92b54c4de627feba16e3459d198df8c8393c17.roa
File:                     6d92b54c4de627feba16e3459d198df8c8393c17.roa (raw, json)
Hash identifier:          PhX68/sg/jcXhjKqfD3n/HfVZoD7+Dlg27hwxjodWO8=
Subject key identifier:   63:FA:B6:FF:5F:73:B1:C3:E1:FC:43:09:39:70:F6:AA:66:B3:E0:0B
Certificate issuer:       /CN=0932ed7fc7587a11240901c76c1f6f64f3020149
Certificate serial:       0BAC67
Authority key identifier: 63:E5:E7:0F:A2:3C:0C:80:83:7E:A1:FE:96:50:76:95:C0:CE:5E:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0932ed7fc7587a11240901c76c1f6f64f3020149.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/6d92b54c4de627feba16e3459d198df8c8393c17.roa
Signing time:             Wed 24 Mar 2021 22:49:47 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     15107
IP address blocks:        148.244.42.0/24 maxlen: 24
                          148.244.45.0/24 maxlen: 24
                          148.244.47.0/24 maxlen: 24
                          148.244.48.0/22 maxlen: 24
                          148.244.53.0/24 maxlen: 24
                          148.244.54.0/23 maxlen: 24
                          148.244.57.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 765031 (0xbac67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0932ed7fc7587a11240901c76c1f6f64f3020149
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=6d92b54c4de627feba16e3459d198df8c8393c17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5c:a3:c1:d3:c6:b9:0f:6d:a0:21:72:d4:43:
                    e3:63:ee:8f:5a:85:d2:81:74:b2:36:2b:b5:b3:f2:
                    1c:3a:ae:a8:48:e8:96:cd:78:ac:00:7d:7b:53:b9:
                    4c:4c:04:6e:04:14:f9:33:f7:79:99:eb:10:60:44:
                    36:ac:95:37:78:dd:62:19:1a:af:ba:43:50:d6:a4:
                    71:b9:0d:47:3b:14:07:a0:7b:95:55:a4:e5:74:64:
                    7d:ae:35:17:f5:42:37:97:36:10:70:ac:e8:c2:d9:
                    d7:b9:7e:7b:99:bb:1f:17:f6:5d:e2:48:b3:68:d8:
                    d8:98:41:ea:58:06:20:26:85:52:6b:4d:88:ab:a1:
                    bf:8d:40:c0:3d:e0:aa:10:47:83:33:19:a6:ee:50:
                    d0:35:47:34:82:2a:3b:15:eb:23:d3:c9:89:2f:be:
                    34:b0:b5:45:b9:fb:bb:78:df:c2:c2:c1:3e:c6:54:
                    3d:8e:e9:35:95:87:e5:b1:e3:a8:ff:d6:58:6d:6f:
                    2c:65:a5:2f:8c:89:d6:27:e6:40:51:f0:01:03:b1:
                    79:73:a3:10:be:d2:9a:f2:0e:39:fd:b9:ce:2d:3e:
                    33:0e:19:ff:2e:bf:4b:60:18:e4:79:59:bf:83:9f:
                    e4:a0:bd:64:80:d7:7c:15:13:ea:96:14:8e:ce:0e:
                    00:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:FA:B6:FF:5F:73:B1:C3:E1:FC:43:09:39:70:F6:AA:66:B3:E0:0B
            X509v3 Authority Key Identifier:
                keyid:63:E5:E7:0F:A2:3C:0C:80:83:7E:A1:FE:96:50:76:95:C0:CE:5E:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0932ed7fc7587a11240901c76c1f6f64f3020149.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/6d92b54c4de627feba16e3459d198df8c8393c17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/0932ed7fc7587a11240901c76c1f6f64f3020149.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.244.42.0/24
                  148.244.45.0/24
                  148.244.47.0-148.244.51.255
                  148.244.53.0-148.244.55.255
                  148.244.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:35:0a:fd:44:46:90:8d:17:d4:61:b0:93:1b:fa:31:2d:55:
         0e:0c:8f:d5:ec:16:43:11:38:c6:6b:d3:a3:b2:42:c2:94:dd:
         e6:aa:e5:15:b8:19:cc:f9:02:c6:ae:c2:3b:61:32:5d:ef:56:
         e3:5d:7f:3d:3b:01:72:94:19:88:c4:8a:1a:27:bd:82:67:98:
         76:62:3d:f6:a0:89:ae:78:25:41:c4:31:47:cc:5b:dc:3f:b8:
         6b:40:f8:32:71:2a:e8:1b:80:9a:b5:91:ef:ea:87:93:2f:8f:
         a7:df:5d:5d:af:ca:0f:91:0a:ec:b8:9b:4e:f4:fb:13:d4:11:
         99:85:76:91:0c:13:18:2a:0b:45:e8:6d:a3:68:58:d1:38:bb:
         1b:5e:06:c5:c7:1a:a3:8b:06:2f:3d:fe:fe:cf:3d:64:85:dd:
         ff:1c:19:f3:ed:d1:87:4f:5a:0a:0b:66:1d:3e:fc:ee:ed:ee:
         f2:c7:eb:8a:8d:28:8e:c1:4a:5f:08:2e:7a:34:00:06:e6:8f:
         1a:c5:12:d0:09:ff:54:e1:14:43:69:6a:91:d9:18:13:64:0d:
         24:ba:ff:8b:19:9d:df:b9:d9:94:dc:6c:82:ae:12:e9:f6:c2:
         8c:5e:ef:38:07:38:a0:30:e8:90:a1:5c:e6:23:c9:11:6f:c1:
         8a:b5:d9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:12 2024 by rpki-client on console-fra.rpki-client.org