Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/2b792c0e7579f71b823be9913a4d09cac20c0860.roa
File:                     2b792c0e7579f71b823be9913a4d09cac20c0860.roa (raw, json)
Hash identifier:          NmjuHdwvxL/J8edX+RK7Z6C/dS9PfnSqUBryLcouEQk=
Subject key identifier:   A6:AF:19:BB:02:B6:38:85:B0:7E:1A:18:DC:EB:D4:31:8E:29:2E:D7
Certificate issuer:       /CN=aae8cbe9904f103232c002483204f9f2ae04d026
Certificate serial:       20FD33
Authority key identifier: 9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/2b792c0e7579f71b823be9913a4d09cac20c0860.roa
Signing time:             Tue 25 Apr 2023 15:18:41 +0000
ROA not before:           Mon 24 Apr 2023 15:18:38 +0000
ROA not after:            Fri 25 Apr 2025 15:18:38 +0000
asID:                     264825
IP address blocks:        190.9.181.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2161971 (0x20fd33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae8cbe9904f103232c002483204f9f2ae04d026
        Validity
            Not Before: Apr 24 15:18:38 2023 GMT
            Not After : Apr 25 15:18:38 2025 GMT
        Subject: CN=2b792c0e7579f71b823be9913a4d09cac20c0860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:7e:6e:f3:a8:49:e8:f6:48:22:8f:1e:5f:d0:
                    1e:5a:62:26:68:53:58:01:f5:d5:ee:a8:b8:72:16:
                    b9:78:11:c0:0c:9f:0b:60:52:20:40:f3:dd:28:1a:
                    73:0d:c7:2f:5a:24:89:05:b4:48:52:72:68:8f:fb:
                    bb:41:a4:8e:3a:e5:c6:14:9e:79:93:65:12:ae:76:
                    ef:31:4f:c7:7d:46:fa:24:07:11:33:1c:a3:1e:f8:
                    24:98:4f:01:cf:20:b3:a1:00:97:ab:46:78:69:b5:
                    3d:73:d4:1b:98:8e:8b:eb:df:71:ea:52:82:29:27:
                    0c:25:db:00:9f:97:04:f4:90:1f:37:e1:af:ba:4d:
                    ff:d8:82:1e:29:f5:f4:c5:74:37:08:c5:27:dd:9e:
                    a6:de:2a:b5:48:2e:91:fc:59:88:77:b1:c5:34:e2:
                    c3:30:1f:ae:97:5d:78:bc:65:38:4b:dd:50:4a:0c:
                    94:11:27:61:5c:a2:76:03:72:b1:40:f0:d2:f3:b5:
                    bf:8f:2e:eb:4d:86:c2:82:72:69:8a:d3:0b:7c:d9:
                    49:fe:ec:d7:31:59:a0:01:4b:15:c7:2a:54:73:f7:
                    38:b5:ce:60:72:89:d9:53:80:94:c6:ec:73:93:49:
                    1f:ac:35:9f:31:12:b3:49:3f:54:83:b3:61:e7:7f:
                    8e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:AF:19:BB:02:B6:38:85:B0:7E:1A:18:DC:EB:D4:31:8E:29:2E:D7
            X509v3 Authority Key Identifier:
                keyid:9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/2b792c0e7579f71b823be9913a4d09cac20c0860.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/aae8cbe9904f103232c002483204f9f2ae04d026.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:11:17:77:6c:a2:77:97:15:b2:28:cb:3a:db:ec:17:34:9e:
         bc:6a:5a:52:24:62:b1:1d:be:18:f0:61:dc:0d:ab:3e:74:44:
         d0:a0:7a:19:3e:24:6c:1c:45:69:e0:da:0e:9e:be:c8:cd:dd:
         09:a1:c9:bc:1d:62:3a:cd:23:9e:e4:ca:48:ea:91:67:fc:77:
         50:62:00:c8:d0:fe:3d:e4:bc:4a:87:96:1a:ed:92:03:44:a1:
         46:66:be:a2:a9:da:a3:73:49:f8:fe:ed:b7:c0:10:f6:b5:38:
         2e:29:53:82:37:76:6b:cc:a7:73:12:45:d5:74:bb:0a:6b:0e:
         63:cd:a2:b2:c1:ed:16:bd:c2:10:ca:3f:51:fe:b7:d7:cc:dc:
         a6:ef:64:a9:e5:1b:27:a4:c3:a1:97:95:b7:4f:18:cf:d5:f9:
         58:a2:6a:0f:c8:10:a4:cc:3e:b2:fd:27:31:01:9a:46:4a:05:
         82:7b:80:34:f4:d2:f3:d0:77:b2:2b:65:3c:88:9f:01:80:90:
         a8:ff:b7:0c:d1:00:8f:88:52:cc:e1:62:f9:db:3f:ef:92:ee:
         5e:74:53:68:4d:87:cd:31:40:67:0f:ac:da:03:a8:ff:63:b7:
         7b:e3:96:3a:57:a8:ea:c3:0c:47:9c:72:63:01:26:e1:27:d8:
         6e:3b:9a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org