Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2f16fcba-e2f1-44ce-9a1e-d32098b43b25/90f9faf4bf79624c721084cf7a6bcab046d98237.roa
File:                     90f9faf4bf79624c721084cf7a6bcab046d98237.roa (raw, json)
Hash identifier:          HpNjPg7X57wwolEFGV9QwR7q4GdjPjGwV8vsK/gMtRU=
Subject key identifier:   B2:E8:21:58:73:47:1B:C1:4F:CC:FF:86:CB:71:54:54:B4:78:00:CD
Certificate issuer:       /CN=a304c169b451d94193cc6eac8d9a85234df37734
Certificate serial:       0AB8
Authority key identifier: E5:36:28:00:AD:40:EE:1C:78:93:21:9F:50:99:62:41:25:AE:5C:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a304c169b451d94193cc6eac8d9a85234df37734.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2f16fcba-e2f1-44ce-9a1e-d32098b43b25/90f9faf4bf79624c721084cf7a6bcab046d98237.roa
Signing time:             Mon 13 Jun 2022 23:44:57 +0000
ROA not before:           Mon 13 Jun 2022 03:00:00 +0000
ROA not after:            Thu 13 Jun 2024 03:00:00 +0000
asID:                     265823
IP address blocks:        192.141.92.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2744 (0xab8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a304c169b451d94193cc6eac8d9a85234df37734
        Validity
            Not Before: Jun 13 03:00:00 2022 GMT
            Not After : Jun 13 03:00:00 2024 GMT
        Subject: CN=90f9faf4bf79624c721084cf7a6bcab046d98237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:25:e9:9d:de:a4:37:1b:a3:43:fe:58:92:8b:
                    b9:31:d1:c7:ad:60:a6:89:1b:98:9d:b1:6d:c9:83:
                    12:88:07:5b:01:51:d8:a2:e1:b6:3f:c3:a3:fe:74:
                    9e:fc:06:7d:35:83:33:d9:87:8d:6b:43:50:03:42:
                    33:90:64:da:8a:a8:39:66:da:e3:1b:f0:9d:1e:74:
                    f6:73:60:ab:2a:0b:46:a0:d3:82:be:73:6d:75:c2:
                    13:f9:fc:69:b8:54:52:2c:d7:3b:fc:e6:9a:1f:63:
                    26:a6:c9:91:fc:33:1f:8a:98:10:d1:ee:5a:6d:f0:
                    0d:0e:94:92:a8:43:6b:4a:3b:d4:a1:68:31:96:66:
                    e8:de:45:71:93:7d:9d:d8:2a:67:ea:da:9f:19:ba:
                    05:07:e2:8d:1e:06:0f:76:dc:d3:79:c8:ab:60:c6:
                    fb:eb:0d:5f:28:d2:ee:54:9e:89:76:c0:7f:a8:07:
                    85:02:fc:1c:68:cc:e2:0e:1a:b3:b4:37:bb:ed:ad:
                    95:a3:e5:82:b9:98:9c:91:dc:dc:8f:a2:b2:de:8a:
                    74:6a:15:2b:2a:fa:94:d8:bb:b5:8a:00:7d:ba:8f:
                    6c:b0:25:54:ce:6d:fb:c9:b0:79:f0:bf:5c:60:86:
                    5e:84:c4:18:ac:90:00:a3:c2:33:d8:86:c8:bc:1d:
                    16:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E8:21:58:73:47:1B:C1:4F:CC:FF:86:CB:71:54:54:B4:78:00:CD
            X509v3 Authority Key Identifier:
                keyid:E5:36:28:00:AD:40:EE:1C:78:93:21:9F:50:99:62:41:25:AE:5C:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a304c169b451d94193cc6eac8d9a85234df37734.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2f16fcba-e2f1-44ce-9a1e-d32098b43b25/90f9faf4bf79624c721084cf7a6bcab046d98237.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2f16fcba-e2f1-44ce-9a1e-d32098b43b25/a304c169b451d94193cc6eac8d9a85234df37734.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:83:89:90:5b:a5:6a:a9:4f:1f:4c:de:40:1e:cf:3e:e9:ee:
         d9:64:14:bd:d8:5b:bc:54:60:59:5e:fe:7d:47:bf:a6:84:fe:
         4e:77:ba:0f:70:ef:0b:85:e4:f3:99:dd:14:b1:cf:5a:4c:9a:
         7d:c6:6e:8d:d2:1f:a8:20:9f:11:9d:99:45:0a:c7:9c:9f:2c:
         ec:f3:26:57:a5:96:8c:8e:01:8e:0f:6e:62:c9:f2:dc:6f:04:
         88:7d:3a:2b:a0:54:a6:79:49:c4:31:75:12:17:47:8e:c5:df:
         72:8c:9d:50:18:79:f2:ed:07:8a:3e:08:ca:75:27:bb:fa:5e:
         4a:92:dc:b4:a0:5e:da:56:64:9c:6d:6b:e0:1b:95:83:d0:80:
         c4:22:ff:b5:93:8c:50:cb:52:4f:9f:6a:72:b8:f5:72:73:60:
         e5:a6:5f:62:5a:34:b2:19:1a:f3:a6:2f:80:51:08:dd:3e:0e:
         7a:23:11:24:a2:09:eb:c7:19:21:1d:84:6e:fb:09:a8:1f:36:
         08:4a:58:36:39:23:64:25:7a:26:cd:dc:35:ac:d3:5e:2b:bc:
         a4:31:ff:ce:12:a2:ee:fa:18:63:89:76:77:c9:52:47:69:0c:
         e3:0b:94:36:a5:c0:a0:38:1a:be:7c:ba:ed:1c:c5:59:a2:66:
         ea:c0:38:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org