Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cd00567-4106-40ca-bbc1-1b069b60a78e/26f7cbf3397aa0b29a2971f9e28c558cca934186.roa
File:                     26f7cbf3397aa0b29a2971f9e28c558cca934186.roa (raw, json)
Hash identifier:          XUsH4zfwiX22F4OE/MuciPkF+LBIEfROobzLLkmNx9s=
Subject key identifier:   E3:CD:33:6B:AA:9F:82:5E:31:4B:73:7B:CD:44:9F:2D:48:3D:B0:39
Certificate issuer:       /CN=1159fdc4276fa3bfc64df717e4ca0a75249cf188
Certificate serial:       21CAC5
Authority key identifier: 2C:D3:D3:7E:8A:EA:10:A8:12:4B:D1:A2:E2:4C:0A:CC:C3:E1:A3:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1159fdc4276fa3bfc64df717e4ca0a75249cf188.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cd00567-4106-40ca-bbc1-1b069b60a78e/26f7cbf3397aa0b29a2971f9e28c558cca934186.roa
Signing time:             Wed 19 Jul 2023 16:30:35 +0000
ROA not before:           Tue 18 Jul 2023 16:30:34 +0000
ROA not after:            Sat 19 Jul 2025 16:30:34 +0000
asID:                     272829
IP address blocks:        190.71.85.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2214597 (0x21cac5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1159fdc4276fa3bfc64df717e4ca0a75249cf188
        Validity
            Not Before: Jul 18 16:30:34 2023 GMT
            Not After : Jul 19 16:30:34 2025 GMT
        Subject: CN=26f7cbf3397aa0b29a2971f9e28c558cca934186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ec:fa:3a:b2:53:22:a4:40:44:ed:2b:c6:25:
                    cd:2b:3e:66:46:14:fc:e5:1a:03:6d:d8:9f:ef:4e:
                    d9:8c:10:84:5a:a7:a2:e7:86:dc:2e:96:cb:33:53:
                    8a:18:aa:bb:96:39:72:2d:b7:24:69:69:91:61:cd:
                    f8:52:db:9e:ce:85:09:73:2d:fa:1a:d5:59:b3:1b:
                    92:e0:6c:ba:d8:72:4a:22:68:ce:0a:e5:10:c2:ba:
                    ab:42:45:bc:c1:a3:8e:4b:a7:5a:26:fe:9f:9c:9b:
                    4b:cb:5a:6a:3f:a5:13:b6:d5:c2:48:01:da:e0:7c:
                    ac:40:66:99:1a:c6:f1:e3:e8:8b:90:d0:c1:18:83:
                    91:3d:2b:ee:4d:01:60:6e:2d:7d:dc:3c:71:6e:1d:
                    13:4a:3b:3b:c6:9a:bf:61:84:a1:a0:3a:6c:c8:0f:
                    6c:0b:2a:46:dc:7b:e8:b2:f4:b5:e1:9b:42:b0:54:
                    07:a4:76:be:46:0e:c4:f0:03:94:c4:ee:66:6e:73:
                    92:bb:21:d6:cc:9e:9c:9b:ec:9a:94:ed:ec:a8:c9:
                    ea:02:9b:b5:a0:80:66:7f:31:6f:32:db:d0:93:21:
                    e0:ea:28:f1:2d:fe:b4:f3:f6:f2:1d:c0:47:8b:e8:
                    6e:3d:94:eb:8a:fe:fe:98:1a:bb:75:27:c4:4f:dc:
                    19:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:CD:33:6B:AA:9F:82:5E:31:4B:73:7B:CD:44:9F:2D:48:3D:B0:39
            X509v3 Authority Key Identifier:
                keyid:2C:D3:D3:7E:8A:EA:10:A8:12:4B:D1:A2:E2:4C:0A:CC:C3:E1:A3:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1159fdc4276fa3bfc64df717e4ca0a75249cf188.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cd00567-4106-40ca-bbc1-1b069b60a78e/26f7cbf3397aa0b29a2971f9e28c558cca934186.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cd00567-4106-40ca-bbc1-1b069b60a78e/1159fdc4276fa3bfc64df717e4ca0a75249cf188.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.71.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:44:00:3e:7f:1d:eb:5f:be:d0:9b:0e:ce:d5:7b:21:da:ed:
         be:b3:2c:3a:51:e8:37:fb:5b:82:88:df:55:3d:22:a0:48:03:
         a7:8b:ce:5b:c0:e0:e2:f4:c9:15:c3:70:70:5a:33:da:68:5f:
         2b:93:5e:eb:64:08:7d:0a:b8:b2:29:ea:a2:45:05:93:19:c8:
         83:d9:64:5d:e3:c6:37:94:09:d5:3f:f9:6c:90:d2:4b:29:1f:
         22:63:0d:5b:42:a7:f9:9f:1f:fe:3c:51:e0:29:ec:38:f4:c7:
         a0:5d:ef:93:f4:5b:a7:91:c8:0d:35:02:ea:68:ff:0e:85:94:
         c1:0d:74:ab:c0:3e:9c:73:24:0b:1d:b8:d5:64:76:92:8b:67:
         da:68:be:12:ab:8c:d5:2e:4e:cb:04:e5:da:e0:1b:97:af:3b:
         a1:3f:df:cc:0a:a9:40:de:e9:73:c3:69:35:31:80:bf:14:25:
         38:d7:e2:82:8d:d4:bc:70:33:fb:c3:48:ac:f0:aa:6a:e2:af:
         6b:e2:75:7f:c3:81:f5:f8:eb:91:bc:9d:4d:2b:be:57:ae:17:
         a3:4b:d0:1e:d1:8d:d9:a9:2b:54:6d:8a:4f:aa:1a:2c:72:e7:
         27:7e:24:6b:8a:82:4d:f4:ae:d8:a4:a8:a6:3f:ac:1a:33:dd:
         1b:ec:40:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:02 2024 by rpki-client on console-ams.rpki-client.org