Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/154c1582d4b10565ba5ec76e4a8ab7280fa6e85f.roa
File:                     154c1582d4b10565ba5ec76e4a8ab7280fa6e85f.roa (raw, json)
Hash identifier:          4TbpUAPBt38jtnssBAWDpBq+UfcqOEhjdOR7BuV98z0=
Subject key identifier:   66:F9:AD:7A:C3:EA:B5:5B:E4:A2:18:98:E9:28:C1:B6:42:D3:22:1C
Certificate issuer:       /CN=8d2f4d81bbf1e7d227419a51352953ce9c6aca3a
Certificate serial:       25BE75
Authority key identifier: 82:9B:22:8F:F6:D1:CF:D0:15:B1:3E:A7:FF:72:5A:53:FD:CA:3C:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d2f4d81bbf1e7d227419a51352953ce9c6aca3a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/154c1582d4b10565ba5ec76e4a8ab7280fa6e85f.roa
Signing time:             Mon 18 Sep 2023 11:36:32 +0000
ROA not before:           Sun 17 Sep 2023 11:36:31 +0000
ROA not after:            Mon 18 Sep 2028 11:36:31 +0000
asID:                     138915
IP address blocks:        190.98.163.0/25 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2473589 (0x25be75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d2f4d81bbf1e7d227419a51352953ce9c6aca3a
        Validity
            Not Before: Sep 17 11:36:31 2023 GMT
            Not After : Sep 18 11:36:31 2028 GMT
        Subject: CN=154c1582d4b10565ba5ec76e4a8ab7280fa6e85f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:13:66:12:7f:b1:b7:14:ae:25:37:c9:7b:75:
                    49:dc:41:34:e8:89:19:e4:46:31:68:ff:81:57:30:
                    4a:10:04:f4:57:c5:00:26:93:28:55:78:55:0d:a0:
                    54:e9:f3:b6:dc:fd:b9:e0:99:be:98:37:f5:34:fd:
                    a5:e5:84:67:18:a4:f8:70:97:6d:7a:e8:fe:14:1b:
                    34:2f:27:cc:f2:21:92:4d:44:9e:46:aa:2d:99:08:
                    a3:a3:db:78:11:10:55:b3:58:73:49:c4:0a:83:a8:
                    4d:10:8e:f2:fa:fe:ce:e1:e7:6f:ae:e4:af:12:07:
                    83:ee:8a:05:96:de:e9:4a:09:71:e6:59:a0:00:47:
                    79:9d:73:e7:86:7b:da:52:4f:f8:f0:97:31:7b:1a:
                    f6:d0:56:98:5a:1c:5e:bc:ec:a1:f9:01:d3:f0:15:
                    22:8b:4c:42:28:5a:e1:d1:c6:3f:17:43:66:9b:25:
                    35:b2:8f:73:bb:20:e7:19:92:6c:0e:c7:91:71:7b:
                    d1:85:94:7e:ae:c5:2f:fe:ce:72:1b:9d:84:61:a8:
                    1b:48:45:44:41:db:30:8c:4e:74:25:d7:5d:85:46:
                    44:0e:45:a8:3e:50:9e:24:43:ff:d8:9e:52:9b:70:
                    7d:cb:5b:20:40:b6:e1:f3:7e:e6:85:66:ee:bd:e0:
                    ce:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:F9:AD:7A:C3:EA:B5:5B:E4:A2:18:98:E9:28:C1:B6:42:D3:22:1C
            X509v3 Authority Key Identifier:
                keyid:82:9B:22:8F:F6:D1:CF:D0:15:B1:3E:A7:FF:72:5A:53:FD:CA:3C:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d2f4d81bbf1e7d227419a51352953ce9c6aca3a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/154c1582d4b10565ba5ec76e4a8ab7280fa6e85f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/8d2f4d81bbf1e7d227419a51352953ce9c6aca3a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.98.163.0/25

    Signature Algorithm: sha256WithRSAEncryption
         1f:0f:47:eb:ca:96:ff:9f:c9:1e:9a:85:aa:bb:10:f2:71:ec:
         4b:10:ae:ec:ab:69:77:44:2c:77:c9:1b:55:3a:d8:8f:18:59:
         61:62:e4:cd:62:aa:b5:e4:19:4b:d4:86:a3:72:65:3f:b2:32:
         91:d7:e8:35:05:a3:ac:e6:06:49:a8:21:7a:28:27:c5:10:63:
         38:1d:64:e9:b1:85:f0:bf:53:ba:cc:6a:e2:1f:5d:00:be:88:
         4a:7e:8b:9e:d2:fe:4b:a1:eb:3e:92:8e:70:9c:85:32:11:c2:
         30:56:6a:94:7c:4d:72:4d:00:e9:2a:33:64:89:d2:bd:bf:1c:
         2d:8b:0e:a1:33:13:cd:93:32:d8:b7:be:c7:bb:0e:0e:a7:12:
         33:f1:5f:02:39:ef:03:c6:28:cd:62:11:7a:f7:c1:3e:f5:e1:
         4f:4f:6b:2f:5a:ce:cb:23:ef:18:10:9f:c9:79:65:b5:82:59:
         dd:92:3f:a8:a6:eb:4a:90:d8:41:00:51:6e:3b:42:43:18:54:
         e5:3c:34:0c:4d:7c:5c:06:db:91:b4:bc:4e:da:70:a1:99:15:
         6b:89:a0:de:10:8f:88:47:62:b3:13:10:ae:69:1d:a0:e8:53:
         85:81:4f:83:f2:fc:13:b3:51:2a:98:15:08:6a:fa:0a:56:74:
         af:54:35:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:08 2024 by rpki-client on console-fra.rpki-client.org