Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/045d41ed610573ee012777eb005896a9a347a963.roa
File:                     045d41ed610573ee012777eb005896a9a347a963.roa (raw, json)
Hash identifier:          T8GbvxanWypSnS3beGNXEzcHU0ILwWR7LuWd5dLQOfw=
Subject key identifier:   81:20:90:84:C2:8D:30:B3:26:65:D6:78:44:EB:93:9A:49:F5:22:DB
Certificate issuer:       /CN=529d28a5769af1e1987aada52d4d9ac3bec39b68
Certificate serial:       29ED42
Authority key identifier: 43:76:7A:C8:B9:C4:46:E4:13:DD:A2:B5:C9:85:3A:17:68:A4:E1:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/529d28a5769af1e1987aada52d4d9ac3bec39b68.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/045d41ed610573ee012777eb005896a9a347a963.roa
Signing time:             Tue 30 Jan 2024 15:00:57 +0000
ROA not before:           Tue 30 Jan 2024 15:00:49 +0000
ROA not after:            Tue 30 Jan 2029 15:00:49 +0000
asID:                     272903
IP address blocks:        190.110.254.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2747714 (0x29ed42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=529d28a5769af1e1987aada52d4d9ac3bec39b68
        Validity
            Not Before: Jan 30 15:00:49 2024 GMT
            Not After : Jan 30 15:00:49 2029 GMT
        Subject: CN=045d41ed610573ee012777eb005896a9a347a963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:60:f5:c4:64:94:a8:af:55:f8:a2:91:dd:49:
                    e2:df:2e:ac:85:b0:98:c4:ec:0a:08:90:3e:7a:46:
                    3e:7e:86:54:86:2d:bc:48:98:e9:3c:17:d5:a1:68:
                    f0:60:d9:b6:04:c6:90:3f:91:d0:d6:40:3a:f5:4a:
                    68:54:e1:36:02:d3:f6:75:34:71:f9:2f:b9:b2:c3:
                    03:2d:8d:aa:a8:85:c2:1d:44:76:c1:db:c5:46:b3:
                    0d:d0:6d:ab:70:40:92:8a:ca:55:f1:8b:55:a5:13:
                    c9:ac:c6:e7:ab:d1:db:d3:08:8d:e8:fa:7e:ee:be:
                    16:07:e9:11:85:e7:41:2a:3f:67:c9:71:70:ca:a6:
                    a6:95:2e:74:83:e4:0d:35:cd:df:68:0b:d1:61:76:
                    87:b8:53:27:20:9a:5e:14:0f:da:37:6c:69:34:ac:
                    70:e5:15:bc:44:c3:c2:8c:d3:e0:0f:0b:ae:ff:d3:
                    06:43:af:cf:f7:bc:22:6a:7a:c7:b4:13:56:00:b9:
                    4c:46:f3:3e:d3:00:a9:6f:03:58:70:06:9a:7c:97:
                    47:5d:4f:56:4f:7d:54:9f:6a:15:04:40:66:c7:44:
                    1e:93:6c:2f:43:47:10:52:a4:a0:3b:3f:1f:f1:0b:
                    ed:66:15:f0:25:0e:c0:44:5b:06:be:09:66:f8:fc:
                    05:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:20:90:84:C2:8D:30:B3:26:65:D6:78:44:EB:93:9A:49:F5:22:DB
            X509v3 Authority Key Identifier:
                keyid:43:76:7A:C8:B9:C4:46:E4:13:DD:A2:B5:C9:85:3A:17:68:A4:E1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/529d28a5769af1e1987aada52d4d9ac3bec39b68.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/045d41ed610573ee012777eb005896a9a347a963.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/529d28a5769af1e1987aada52d4d9ac3bec39b68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:cf:78:59:45:2c:65:ac:22:1a:0d:24:d0:23:85:08:a8:3b:
         e5:10:69:e3:b0:e0:20:b6:d2:92:f9:d6:f6:f9:22:a3:71:18:
         06:b4:77:92:88:d2:56:45:fc:6c:14:3c:5d:df:99:84:01:43:
         bc:95:99:bc:b7:c3:b0:b2:dc:0e:36:02:7e:1c:56:f7:90:1d:
         b3:08:16:4c:35:10:db:5f:4c:e2:72:8c:bc:db:42:50:f1:bf:
         f4:6a:32:a4:e1:9e:2b:1f:44:10:1d:01:43:9b:36:6e:13:45:
         a9:a3:a7:d9:f8:2c:b7:fc:0f:9c:fe:89:d3:13:ae:4c:17:50:
         8f:03:58:c3:79:96:aa:e1:92:7f:4f:11:23:05:a0:d8:ea:cd:
         03:e7:59:30:cb:73:28:15:0b:4a:3b:cd:64:98:35:8e:5a:37:
         d7:bd:4c:1c:0d:63:81:fb:ab:89:e5:50:d6:da:fc:9f:8e:0f:
         13:8f:f2:1e:1e:b0:d3:3e:8e:09:99:19:c2:4e:3a:be:ba:82:
         b5:74:dc:21:9f:dd:4a:85:54:93:25:38:e4:d3:e1:49:37:bc:
         7c:6d:0d:f0:e3:c7:08:30:5a:32:c1:de:04:1c:63:9a:4e:dc:
         c5:da:b9:44:ac:5b:d1:4a:60:b8:2b:45:14:0b:9e:0d:fc:5d:
         97:c8:f1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:26 2024 by rpki-client on console-fra.rpki-client.org