Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3944f360-1628-4803-9619-c0c125791fe6/3bd618dc2bceab3e70c0fa99a2f341fb93500a8c.roa
File:                     3bd618dc2bceab3e70c0fa99a2f341fb93500a8c.roa (raw, json)
Hash identifier:          I8XT2aGpGiyM9dRh5S+vDU5eNORDCnijOXSeRb4vVz4=
Subject key identifier:   C2:09:BB:CD:29:C0:B2:E8:10:6F:18:81:34:DD:FF:B2:A7:1C:30:29
Certificate issuer:       /CN=fb92d21fcea7525e717939e36376f350b65b04d5
Certificate serial:       04E4
Authority key identifier: 87:22:7C:23:44:54:6F:46:54:F1:19:BE:8F:18:CA:6E:A4:DE:B6:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fb92d21fcea7525e717939e36376f350b65b04d5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3944f360-1628-4803-9619-c0c125791fe6/3bd618dc2bceab3e70c0fa99a2f341fb93500a8c.roa
Signing time:             Mon 03 Oct 2022 20:05:40 +0000
ROA not before:           Mon 03 Oct 2022 20:04:46 +0000
ROA not after:            Thu 03 Oct 2024 21:04:46 +0000
asID:                     52246
IP address blocks:        190.99.88.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1252 (0x4e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb92d21fcea7525e717939e36376f350b65b04d5
        Validity
            Not Before: Oct  3 20:04:46 2022 GMT
            Not After : Oct  3 21:04:46 2024 GMT
        Subject: CN=3bd618dc2bceab3e70c0fa99a2f341fb93500a8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5d:b7:5d:52:e1:b4:42:e6:93:9d:43:1b:10:
                    c5:17:c4:f9:43:00:37:b8:ab:3b:c9:a9:82:e1:ad:
                    cd:81:d7:86:db:ce:8e:4d:c3:57:2f:0c:11:a5:36:
                    bd:c2:b0:57:9b:7c:e9:a8:04:7e:57:bc:34:e7:e6:
                    a7:04:36:fc:2b:93:84:fb:f0:ac:43:fa:d5:39:bc:
                    8e:a3:35:3b:21:73:b1:bc:96:e0:ae:bc:2c:9d:76:
                    da:ec:46:b4:fb:5e:23:52:6f:6c:7d:fd:f0:39:a2:
                    11:af:fa:ac:4e:16:3e:ab:ce:6f:bb:0e:ae:56:fd:
                    2b:8a:b3:1e:89:58:c3:c4:a3:cc:e7:71:49:98:20:
                    63:dd:1f:1b:9d:32:78:6d:06:fd:23:a5:be:f4:c9:
                    08:e2:fb:0d:61:46:5a:dd:e8:f0:0b:8b:ca:70:d1:
                    53:81:bf:a6:71:28:1d:dc:a8:e7:2e:6f:3c:fb:a0:
                    fd:33:a4:e9:e6:27:ee:6a:93:1b:22:20:2a:28:be:
                    fd:d9:56:d8:40:d2:f7:df:66:d6:a0:42:50:33:d9:
                    d2:3a:14:4b:d2:5b:ca:c5:94:e2:12:e7:cf:d0:4c:
                    db:da:fd:c4:c6:e6:8b:65:17:eb:5b:70:8a:1c:4d:
                    4b:45:df:b0:fc:2a:78:c6:8e:e5:1d:33:65:e6:cc:
                    fc:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:09:BB:CD:29:C0:B2:E8:10:6F:18:81:34:DD:FF:B2:A7:1C:30:29
            X509v3 Authority Key Identifier:
                keyid:87:22:7C:23:44:54:6F:46:54:F1:19:BE:8F:18:CA:6E:A4:DE:B6:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fb92d21fcea7525e717939e36376f350b65b04d5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3944f360-1628-4803-9619-c0c125791fe6/3bd618dc2bceab3e70c0fa99a2f341fb93500a8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3944f360-1628-4803-9619-c0c125791fe6/fb92d21fcea7525e717939e36376f350b65b04d5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:41:ae:c7:37:86:64:c1:19:31:75:22:33:1d:05:1f:dd:ec:
         c7:d7:20:08:02:75:d1:3f:c4:42:f6:35:dc:c6:1d:8b:19:0f:
         4e:57:c8:a1:a6:75:63:5b:bd:03:fc:26:77:d6:48:a9:e9:c3:
         1a:9c:fd:0f:7d:85:35:e0:f8:b5:4d:cc:46:ad:0e:c2:1a:ec:
         5c:83:a8:91:9d:5f:75:3f:0a:c6:ba:59:ad:16:af:97:a1:8a:
         57:39:96:87:32:8a:e5:09:aa:17:d1:53:21:bb:1e:eb:61:d7:
         2b:ba:32:1c:b4:aa:1e:57:9b:69:56:21:10:12:30:71:a0:a9:
         51:a6:bc:35:6e:a0:af:97:f9:9f:64:de:db:e1:88:7a:ee:e8:
         6f:0b:e4:45:2e:95:2f:41:18:3d:a8:aa:01:59:c4:bf:7d:dd:
         e4:82:df:c4:9d:81:ca:1c:38:58:72:8c:a2:de:a1:df:76:3a:
         36:53:8a:88:39:26:52:f8:a8:8d:d8:a8:c5:cd:36:d2:bd:cf:
         2a:ec:29:3a:8b:f1:46:a0:f3:6f:9f:be:fc:9e:c5:25:82:33:
         45:84:97:2f:e8:4f:c2:55:0e:2f:0b:d4:b9:f0:2c:6d:df:ed:
         ed:1d:63:dc:79:ef:06:d9:e0:ea:c8:89:69:1f:f6:74:f8:56:
         bf:5e:2b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org