Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/46419d6c5e593ea6925e97d32dd690edea60717a.roa
File:                     46419d6c5e593ea6925e97d32dd690edea60717a.roa (raw, json)
Hash identifier:          MPxKIhbdJ/DNqYjBFaGej3UWIucL8zWd4PPE+jkiAmo=
Subject key identifier:   9E:80:FB:56:E1:BC:62:C8:D2:44:B7:9D:02:ED:AC:8A:5F:52:23:33
Certificate issuer:       /CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Certificate serial:       293A5E
Authority key identifier: 80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/46419d6c5e593ea6925e97d32dd690edea60717a.roa
Signing time:             Tue 23 Jan 2024 17:19:35 +0000
ROA not before:           Tue 23 Jan 2024 17:19:35 +0000
ROA not after:            Fri 23 Jan 2026 17:19:35 +0000
asID:                     27947
IP address blocks:        190.152.249.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2701918 (0x293a5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1059e1e3317704575f2c0b750ee73b166a39cd37
        Validity
            Not Before: Jan 23 17:19:35 2024 GMT
            Not After : Jan 23 17:19:35 2026 GMT
        Subject: CN=46419d6c5e593ea6925e97d32dd690edea60717a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:79:1c:75:67:22:6d:d8:99:83:f6:eb:6e:37:
                    b7:69:a9:16:ff:4b:23:c7:5b:7e:65:03:43:e0:b4:
                    20:95:4e:7e:b0:63:1e:f2:d8:37:80:92:22:b6:4f:
                    9e:82:aa:16:a9:e2:4d:7b:0d:c3:72:99:5d:6e:22:
                    19:ca:10:08:d3:d4:44:b3:ec:d9:24:94:34:5c:3c:
                    0d:07:e9:bc:16:77:53:1a:de:3a:6d:3d:bd:c9:91:
                    7c:a5:1c:64:b4:a3:32:1f:06:de:be:7c:41:95:7d:
                    93:31:de:f3:8c:7e:95:28:a5:23:4e:0a:0a:02:18:
                    ac:5f:d6:6f:a5:2a:90:8c:f4:29:e0:5b:19:f9:5a:
                    b7:2c:32:cb:63:b9:ea:d4:05:df:6f:ee:24:5f:4f:
                    f5:f4:00:c8:78:62:8c:76:28:df:7e:75:b5:a1:75:
                    7d:87:71:64:ea:51:12:8e:a0:3f:9d:a5:ee:9c:f5:
                    4f:f1:b1:44:cc:31:b2:7b:1c:19:48:73:70:5d:99:
                    6a:c3:49:aa:a4:74:eb:73:36:f7:8a:22:eb:05:c9:
                    32:53:a3:b9:32:2d:c7:b7:98:de:1d:ae:0a:9f:b7:
                    b8:a8:45:0f:dd:64:79:2a:81:48:47:c1:8b:27:58:
                    99:d5:b1:b6:43:44:89:71:04:2b:88:17:6b:c4:45:
                    fb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:80:FB:56:E1:BC:62:C8:D2:44:B7:9D:02:ED:AC:8A:5F:52:23:33
            X509v3 Authority Key Identifier:
                keyid:80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/46419d6c5e593ea6925e97d32dd690edea60717a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.152.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:12:03:84:c9:72:ac:2a:7c:43:c8:f5:1a:b9:85:6a:63:03:
         e1:c6:c1:aa:00:9b:10:dd:5f:13:08:11:a4:bc:20:24:b1:fa:
         5c:e3:51:6b:ef:08:4a:c4:36:d5:ba:fb:d2:00:ca:c8:18:b2:
         e4:73:c8:40:93:2e:8a:9f:1a:80:f7:21:c3:94:43:e5:b7:35:
         28:b6:70:3f:2a:b2:b2:e6:32:4e:a3:95:4f:e1:db:82:42:62:
         2d:3d:8e:0c:40:1b:d4:cc:15:60:60:62:62:29:e7:58:89:df:
         ee:e1:a1:68:a5:bd:cd:5b:67:c1:f6:79:6b:a2:d7:48:ff:16:
         30:6e:4e:4a:30:a0:74:32:ec:c1:74:f4:ec:33:fa:a4:83:e0:
         1e:46:ec:fc:4e:11:db:14:6f:ac:25:ec:2f:cc:82:f4:6f:83:
         37:d8:49:a9:56:ee:6a:49:af:35:b2:21:71:cb:66:55:b4:3b:
         80:41:36:80:40:67:da:07:c3:c0:49:bd:15:5b:e3:92:4d:eb:
         41:11:9a:28:cb:25:40:16:65:80:2b:4f:9f:0a:be:b3:9c:fe:
         85:2b:20:28:2d:31:e8:21:0b:65:a4:c9:2b:57:80:dd:14:f3:
         6d:35:00:22:62:f6:be:4b:8f:39:c7:71:5b:85:2d:5f:6f:c9:
         7b:6e:fb:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:01 2024 by rpki-client on console-fra.rpki-client.org