Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/800b32ede87d0e8739b44c9f506c0374b5d289ca.roa
File:                     800b32ede87d0e8739b44c9f506c0374b5d289ca.roa (raw, json)
Hash identifier:          tvp9/OFZOG7RArpyo1/bKt7i+C0jQvuePXVODgY+JO4=
Subject key identifier:   0D:59:BB:B0:26:BD:38:85:2F:67:08:89:B1:B4:99:49:9A:3D:8D:63
Certificate issuer:       /CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
Certificate serial:       2E9F2A
Authority key identifier: FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/800b32ede87d0e8739b44c9f506c0374b5d289ca.roa
Signing time:             Thu 07 Dec 2023 13:02:01 +0000
ROA not before:           Thu 07 Dec 2023 13:00:46 +0000
ROA not after:            Thu 07 Dec 2028 13:00:46 +0000
asID:                     52271
IP address blocks:        190.137.142.0/24 maxlen: 24
                          190.136.15.0/24 maxlen: 24
                          190.136.16.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3055402 (0x2e9f2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
        Validity
            Not Before: Dec  7 13:00:46 2023 GMT
            Not After : Dec  7 13:00:46 2028 GMT
        Subject: CN=800b32ede87d0e8739b44c9f506c0374b5d289ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2f:60:8b:b8:1c:57:9b:24:a9:a0:65:47:82:
                    87:5c:c5:3a:c9:e9:45:60:26:36:7e:a7:cd:0b:df:
                    f3:9d:b1:43:cb:c5:df:e1:ab:af:62:1d:94:c0:65:
                    ac:1e:3c:81:3d:ef:3d:01:e8:f8:fc:17:fe:35:42:
                    84:10:11:9e:4c:22:7b:cd:71:26:6f:d3:db:21:fe:
                    0e:7a:57:8a:40:0c:a0:6f:92:5d:f5:30:e3:2e:f1:
                    a1:85:7c:44:c0:e1:a4:46:52:61:fa:1d:e4:3f:94:
                    98:0c:32:86:ba:e8:a1:ae:f0:3e:d0:a5:b4:7d:ce:
                    5f:cb:44:ed:64:bb:77:b2:f4:9a:39:d3:71:b1:86:
                    7d:80:f4:81:f2:17:ce:29:cd:0b:44:bc:32:46:e7:
                    7f:fa:be:a2:43:d7:94:c4:4b:d4:36:a7:fc:e1:30:
                    8c:c1:60:c6:ad:34:34:38:d1:f5:91:9c:fe:49:a9:
                    f8:85:ca:3f:ba:56:5d:b5:33:4a:c0:70:de:68:5c:
                    c4:bc:a5:ae:0a:16:d5:81:26:9d:29:b9:35:8e:9d:
                    f5:f1:40:5e:31:16:7c:0e:e3:36:5a:ed:ab:10:bb:
                    7a:58:72:ff:7a:59:79:9a:f3:d6:ec:50:56:c6:f7:
                    79:23:88:1d:60:bd:41:8d:c5:da:a3:ad:78:fa:0a:
                    e0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:59:BB:B0:26:BD:38:85:2F:67:08:89:B1:B4:99:49:9A:3D:8D:63
            X509v3 Authority Key Identifier:
                keyid:FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/800b32ede87d0e8739b44c9f506c0374b5d289ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c974409d0c2a70c921dd685e863e9f00cb1e262a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.136.15.0-190.136.16.255
                  190.137.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:05:05:4f:b0:99:23:9f:93:1f:6c:22:13:e4:0f:32:2a:a3:
         78:19:37:c8:31:35:7d:10:87:a8:bc:4a:cf:17:c8:0a:e5:6f:
         b2:b9:3b:52:d6:3d:aa:0d:49:e8:2a:4c:9e:78:44:71:01:79:
         33:5c:af:66:82:d2:0f:0b:21:6a:84:1d:94:90:ba:f5:93:86:
         e9:10:69:32:29:03:12:63:25:e3:c3:ff:34:03:b0:42:8e:d7:
         40:5a:38:0e:26:ef:57:ba:ac:fa:eb:12:d1:94:b1:f2:c2:c4:
         cc:df:5a:61:6c:5d:d9:b4:58:bf:48:c4:a7:70:f6:c8:32:f2:
         b1:73:32:77:0b:76:9d:f1:37:2c:5c:c3:ad:7e:83:08:b6:2b:
         4a:27:7b:e1:27:20:c7:63:6b:73:00:55:4c:cf:b0:88:e8:0f:
         ed:05:c4:66:b2:c4:cd:f0:a5:ac:ac:83:7e:3a:46:c7:69:df:
         38:35:16:51:58:05:35:09:bf:95:5a:fa:fd:ea:09:ac:73:66:
         65:bc:0d:60:8c:cc:0a:a5:32:f3:ac:d2:a9:78:c1:86:d1:ef:
         b5:c4:ae:8c:7a:97:21:83:9d:1b:98:c6:d7:34:9f:a8:4b:b4:
         26:7a:93:b2:73:42:b6:87:cb:ba:01:97:c6:a5:99:ab:69:53:
         88:19:23:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org