Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ec1bd58-9166-47f7-9aad-24e43f9e2838/acad5206fc31ef3825868e9d2279fb91b08fce8a.roa
File:                     acad5206fc31ef3825868e9d2279fb91b08fce8a.roa (raw, json)
Hash identifier:          NLhWJrsdTNeiYAdlFwNQeFxotNUYLajvMI3bhT3mJK8=
Subject key identifier:   3E:DA:ED:61:1E:BD:5F:38:5D:A5:5B:B0:0E:83:F6:D0:72:7A:D2:2A
Certificate issuer:       /CN=8977e71e589f7dff93910384f64766de5bd105bb
Certificate serial:       16C84F
Authority key identifier: 1B:49:28:C6:49:A2:49:A6:BE:47:24:CB:54:AD:8F:5F:4A:F7:B3:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8977e71e589f7dff93910384f64766de5bd105bb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ec1bd58-9166-47f7-9aad-24e43f9e2838/acad5206fc31ef3825868e9d2279fb91b08fce8a.roa
Signing time:             Wed 20 Sep 2023 08:30:00 +0000
ROA not before:           Tue 19 Sep 2023 08:30:00 +0000
ROA not after:            Thu 18 Sep 2025 08:30:00 +0000
asID:                     262191
IP address blocks:        191.102.60.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1493071 (0x16c84f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8977e71e589f7dff93910384f64766de5bd105bb
        Validity
            Not Before: Sep 19 08:30:00 2023 GMT
            Not After : Sep 18 08:30:00 2025 GMT
        Subject: CN=acad5206fc31ef3825868e9d2279fb91b08fce8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e2:91:bf:9f:49:87:df:f3:17:d6:4f:c7:32:
                    dc:db:01:32:3e:5f:32:2e:70:44:2d:ba:48:87:e9:
                    77:ad:df:8c:6a:0a:df:bf:20:46:e0:c9:d7:e2:e9:
                    4c:53:dd:59:ab:90:19:ec:e3:4d:0e:36:72:1c:ba:
                    42:a2:b7:66:7a:d5:80:6c:34:f8:53:2b:26:5a:73:
                    2b:d7:c2:bc:1b:b3:05:b2:46:c1:e8:bf:6a:da:71:
                    4d:7d:bd:17:2b:6c:0f:49:1f:6e:1d:74:7e:fd:8f:
                    47:36:62:f4:58:e1:d4:f6:20:d9:d9:06:db:f7:bb:
                    91:59:9a:5e:30:d5:24:40:84:7a:e7:4d:16:a7:1f:
                    fb:cc:f7:6d:f2:7f:aa:5c:8c:71:68:99:27:76:95:
                    7c:01:76:e6:57:1d:0b:54:68:e8:14:df:43:49:28:
                    cc:b2:c7:61:95:27:6e:e0:4b:55:7d:e5:82:e7:0a:
                    32:28:f5:92:80:f7:cf:69:69:16:7a:83:c4:07:7d:
                    d7:38:f4:bd:9c:ef:3c:48:bc:58:c3:f8:32:2f:0e:
                    de:c8:93:25:62:86:4c:b8:22:6f:25:6f:e8:b4:b2:
                    b9:a7:ac:86:53:f0:18:fd:d2:88:93:76:9f:f1:41:
                    81:3c:f4:ba:ac:bb:ff:ae:a6:d1:b3:d8:43:ba:5e:
                    53:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:DA:ED:61:1E:BD:5F:38:5D:A5:5B:B0:0E:83:F6:D0:72:7A:D2:2A
            X509v3 Authority Key Identifier:
                keyid:1B:49:28:C6:49:A2:49:A6:BE:47:24:CB:54:AD:8F:5F:4A:F7:B3:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8977e71e589f7dff93910384f64766de5bd105bb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ec1bd58-9166-47f7-9aad-24e43f9e2838/acad5206fc31ef3825868e9d2279fb91b08fce8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ec1bd58-9166-47f7-9aad-24e43f9e2838/8977e71e589f7dff93910384f64766de5bd105bb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:f7:bf:32:9c:5f:c6:d8:79:b3:f2:51:64:a3:4b:49:40:f8:
         42:81:76:26:00:f5:d6:4f:b1:18:c3:d4:00:df:50:d6:04:06:
         07:a0:f1:ba:91:ef:e7:be:14:1b:fd:cc:a2:64:62:8d:14:88:
         e9:a4:c7:d9:10:5a:12:c9:85:4a:dc:13:0f:6a:ca:fb:7f:eb:
         5f:ff:76:94:39:64:28:5a:45:0d:60:a7:db:34:c7:ea:5b:e8:
         b2:ed:6f:c9:a2:fa:bd:c2:b8:9d:f4:c7:a9:7a:12:4c:c7:41:
         59:8d:48:35:f6:1b:d5:78:22:c0:bd:c1:b5:58:77:4f:4d:7f:
         cd:61:db:b9:d8:a1:4b:f5:f1:08:2b:bd:40:5c:8d:77:d0:67:
         82:e5:d8:fd:06:36:3b:cf:a6:b9:12:94:3e:cf:e4:c0:10:7d:
         27:45:48:ab:19:ab:36:5f:8c:16:50:a8:91:11:44:7e:99:31:
         7e:0b:06:ba:5b:06:b2:7e:79:d5:53:dc:3d:61:ad:48:b5:f8:
         3e:35:98:60:74:ab:17:9f:da:6c:8a:ee:88:c2:92:8b:42:32:
         63:fd:7b:85:a0:91:d3:eb:c1:de:f4:1e:58:2c:10:31:dd:44:
         60:af:a6:bd:75:c7:d7:e4:29:b9:d6:4a:4b:57:47:d7:de:68:
         5f:35:df:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:17 2024 by rpki-client on console-ams.rpki-client.org