Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2d937f66-ace6-42a2-baae-e150b66d0e5e/413de2f35f5bd4d288d9324bfa9b8c7cbff45434.roa
File:                     413de2f35f5bd4d288d9324bfa9b8c7cbff45434.roa (raw, json)
Hash identifier:          2cPp1nHST1u3t+4y45Bw6mrp5KZNjLWRyIdgchsAK6g=
Subject key identifier:   2C:BE:75:F7:E1:01:D4:1A:BB:58:76:14:DE:54:71:E8:23:35:74:78
Certificate issuer:       /CN=a0ece5cb3349a401474499eb301920b68090f2ce
Certificate serial:       0D8C04
Authority key identifier: 94:52:6C:1C:EE:97:CC:0E:93:E7:50:7E:90:7F:EB:BE:B5:E2:99:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0ece5cb3349a401474499eb301920b68090f2ce.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2d937f66-ace6-42a2-baae-e150b66d0e5e/413de2f35f5bd4d288d9324bfa9b8c7cbff45434.roa
Signing time:             Wed 24 Mar 2021 14:38:27 +0000
ROA not before:           Wed 24 Mar 2021 14:38:27 +0000
ROA not after:            Tue 24 Mar 2026 14:38:27 +0000
asID:                     264836
IP address blocks:        192.141.9.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 887812 (0xd8c04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0ece5cb3349a401474499eb301920b68090f2ce
        Validity
            Not Before: Mar 24 14:38:27 2021 GMT
            Not After : Mar 24 14:38:27 2026 GMT
        Subject: CN=413de2f35f5bd4d288d9324bfa9b8c7cbff45434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:39:38:b7:52:d9:af:62:d2:f5:38:60:c9:a0:
                    f8:99:d1:de:f1:38:ef:ba:ef:16:e3:3c:22:66:66:
                    64:0b:2a:71:0c:88:33:31:28:b5:ee:62:05:e5:00:
                    7c:a8:0a:a6:7d:0f:32:0b:77:c9:b0:5e:93:fc:c9:
                    1f:1b:26:07:2a:c7:de:53:9e:a5:4d:18:b9:04:5a:
                    48:6e:29:0d:ed:8a:5e:24:ae:a1:23:a2:39:b3:bb:
                    43:c1:ca:14:38:3b:f7:f2:f4:7c:bf:5a:16:29:9a:
                    bd:8d:2e:9d:b4:7b:75:d4:42:40:72:b9:d6:20:b6:
                    e3:76:53:10:a0:d0:23:ec:68:4a:62:f7:c1:0b:df:
                    25:4a:26:c6:22:50:f0:29:c0:f7:81:95:8f:3e:40:
                    c1:ee:66:a2:5e:ea:d5:c6:52:a1:a2:fa:e5:b7:15:
                    26:e8:37:89:51:ce:fd:97:46:3e:74:34:3c:a3:5e:
                    2b:0e:f5:31:f8:80:37:7a:ff:52:a8:41:e8:00:c3:
                    45:70:0c:70:29:52:e9:7c:b7:48:fc:c4:9a:fe:f6:
                    2c:00:8b:ff:b9:8c:bf:a7:81:a8:ee:1f:2a:94:9f:
                    af:38:4c:79:b0:80:4d:bd:ac:6b:d2:45:33:9c:42:
                    bf:8b:68:c6:d8:98:03:f3:ab:40:8a:e1:7f:ff:72:
                    8d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:BE:75:F7:E1:01:D4:1A:BB:58:76:14:DE:54:71:E8:23:35:74:78
            X509v3 Authority Key Identifier:
                keyid:94:52:6C:1C:EE:97:CC:0E:93:E7:50:7E:90:7F:EB:BE:B5:E2:99:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0ece5cb3349a401474499eb301920b68090f2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2d937f66-ace6-42a2-baae-e150b66d0e5e/413de2f35f5bd4d288d9324bfa9b8c7cbff45434.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2d937f66-ace6-42a2-baae-e150b66d0e5e/a0ece5cb3349a401474499eb301920b68090f2ce.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:e6:18:75:39:de:2c:56:11:48:1a:28:84:15:34:26:bc:67:
         cd:0f:41:a1:80:99:7e:b5:de:b4:3d:9d:c0:11:f6:f8:b3:35:
         b5:99:6e:84:44:77:80:1a:9b:be:f9:69:d1:16:13:e0:0f:8e:
         22:07:49:b9:44:27:55:1c:96:0f:3b:cd:00:ce:16:e9:15:d2:
         6f:f0:f8:3b:22:5c:81:b5:0f:1e:60:a0:73:4f:2c:2e:e9:6a:
         59:f4:29:27:92:29:c1:0d:0f:fb:c9:a2:bc:de:42:80:2f:ca:
         81:2c:c2:71:4e:cb:5a:6c:91:ba:d6:7b:05:69:e0:b5:70:65:
         29:03:14:ab:aa:89:a3:f4:0c:b7:70:df:8c:ca:b3:16:6a:c6:
         e3:6a:95:5c:98:b2:e4:20:f2:0f:02:58:0a:af:82:25:f4:c5:
         ab:d4:aa:ca:66:82:93:f9:2c:10:06:b8:29:a3:e9:7e:f6:5a:
         49:c2:8e:c3:7e:cf:86:3a:fc:e5:c2:7e:ac:dd:95:59:f8:3a:
         6e:12:7b:2f:36:2d:94:2e:9b:80:eb:fb:51:82:8c:8c:e1:a5:
         bc:a4:b9:1f:1d:d5:63:ee:ee:57:84:40:ca:c2:1f:4c:29:2f:
         51:4b:bb:12:ff:9c:68:d0:26:ae:8c:40:68:3d:a3:91:5d:88:
         3b:04:cd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org