Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/b24ee2e09c698eb1233cc428398781708ffec540.roa
File:                     b24ee2e09c698eb1233cc428398781708ffec540.roa (raw, json)
Hash identifier:          enrwv9aCjHuJ2So9e1bM47wG9h+srzEENqmdFeWDrPs=
Subject key identifier:   C1:5E:B0:29:A3:13:52:3B:AA:BC:A2:E7:8A:6C:B4:85:19:8A:8C:8B
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       2A2A26
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/b24ee2e09c698eb1233cc428398781708ffec540.roa
Signing time:             Thu 30 Nov 2023 15:45:06 +0000
ROA not before:           Thu 30 Nov 2023 15:45:06 +0000
ROA not after:            Sun 30 Nov 2025 15:45:06 +0000
asID:                     14080
IP address blocks:        190.156.6.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2763302 (0x2a2a26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Nov 30 15:45:06 2023 GMT
            Not After : Nov 30 15:45:06 2025 GMT
        Subject: CN=b24ee2e09c698eb1233cc428398781708ffec540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b1:0a:d9:ae:78:b3:ea:eb:61:99:27:a0:f2:
                    bc:48:13:ba:b3:33:64:3b:c8:34:ed:02:e3:a3:78:
                    92:27:03:6d:80:08:0b:7d:f1:63:62:0a:00:ab:02:
                    1e:44:de:0b:43:8b:85:ea:0e:46:57:bc:e0:ed:70:
                    de:85:c6:06:00:84:90:97:a2:f3:10:60:16:30:98:
                    fb:6c:22:c6:9f:d8:3c:af:2b:43:1e:a1:cb:06:e3:
                    1c:30:40:65:5e:a7:e4:f6:52:c3:3b:5a:bf:4f:07:
                    71:71:99:59:4b:28:04:f5:15:6b:4c:b2:41:78:1f:
                    0f:4a:a8:b7:b5:d7:5b:2e:2b:a9:b8:0c:bf:0c:50:
                    d4:84:92:54:fe:f3:e2:47:53:64:9f:e0:e8:6a:77:
                    ee:fc:81:e3:8e:38:8b:13:03:98:09:5d:36:fc:1d:
                    46:81:bf:99:68:60:36:3a:9b:40:3c:2c:8d:67:91:
                    ca:a9:3c:f9:d2:5f:e5:ff:dc:cf:b2:0f:ca:88:ef:
                    e2:64:2f:3d:bc:e6:ab:13:32:a0:c6:c4:a3:9b:9c:
                    ca:74:ab:6a:89:48:8e:ad:82:02:1f:4c:33:c1:6a:
                    c9:57:03:3d:a5:ab:7e:c9:be:78:78:3a:b9:fb:08:
                    3f:76:7f:e1:67:54:50:0d:8f:26:67:9d:e4:64:62:
                    81:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:5E:B0:29:A3:13:52:3B:AA:BC:A2:E7:8A:6C:B4:85:19:8A:8C:8B
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/b24ee2e09c698eb1233cc428398781708ffec540.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.156.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:8f:4b:db:85:5c:54:2f:87:20:0b:8d:4a:f1:6c:73:90:b9:
         a3:56:6c:8a:a6:00:27:0c:a9:c2:2a:e4:ff:3e:11:22:73:af:
         20:5a:a3:23:c5:bc:31:ee:61:24:de:99:19:2f:4e:1d:20:0a:
         a3:2b:7f:83:1b:c0:89:23:0f:8d:43:a8:b2:06:cb:0b:b4:68:
         15:6d:b2:3e:5f:86:c0:08:99:65:2f:8c:f5:33:d9:92:eb:97:
         f5:4e:8c:f3:30:1e:64:cf:fe:f3:98:50:73:e6:6f:29:78:86:
         31:f0:6e:0f:81:12:d6:75:2a:1c:72:d2:6a:7c:a3:2b:45:46:
         f2:49:94:5d:23:65:59:f6:54:44:a9:bd:57:54:59:9e:2f:61:
         5c:fc:04:8f:50:3c:f6:a3:5c:c2:66:7a:c2:0a:18:7a:14:b9:
         86:b6:57:91:53:4c:88:e7:ee:e0:c5:6a:5b:e6:45:5a:c0:b8:
         a9:b6:85:23:d3:53:91:86:32:47:e9:8f:37:23:d0:ac:be:bb:
         f2:92:bd:53:ff:4d:e0:9c:06:1c:29:7d:bd:47:8e:dc:37:67:
         38:41:8d:77:19:b2:6f:1f:d9:bd:89:3a:4a:50:27:be:ad:49:
         eb:96:bb:3d:1f:58:01:42:d3:66:85:70:77:c5:40:ab:3e:6a:
         60:e7:f6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:17 2024 by rpki-client on console-fra.rpki-client.org