Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/bf91598f0898e7389631f518613f3a733866a4c7.roa
File:                     bf91598f0898e7389631f518613f3a733866a4c7.roa (raw, json)
Hash identifier:          TZFOgjJza5piOr7N5gJENhik734zT+i4u4pufnc4S7g=
Subject key identifier:   0B:3E:DD:3E:37:69:B9:A4:7B:77:F2:59:24:4F:9D:81:14:C9:B1:3B
Certificate issuer:       /CN=aae8cbe9904f103232c002483204f9f2ae04d026
Certificate serial:       20F48C
Authority key identifier: 9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/bf91598f0898e7389631f518613f3a733866a4c7.roa
Signing time:             Tue 25 Apr 2023 15:18:38 +0000
ROA not before:           Mon 24 Apr 2023 15:18:38 +0000
ROA not after:            Fri 25 Apr 2025 15:18:38 +0000
asID:                     263238
IP address blocks:        190.9.179.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2159756 (0x20f48c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae8cbe9904f103232c002483204f9f2ae04d026
        Validity
            Not Before: Apr 24 15:18:38 2023 GMT
            Not After : Apr 25 15:18:38 2025 GMT
        Subject: CN=bf91598f0898e7389631f518613f3a733866a4c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1b:f2:e8:ec:32:92:60:fe:7a:57:6d:72:05:
                    7c:49:3b:ee:2f:e7:63:f8:ce:35:96:74:2a:35:59:
                    be:06:4e:0d:97:c9:8e:21:9d:0e:f8:41:e2:b6:ec:
                    7b:fd:9c:d3:7f:6b:7e:60:eb:8b:40:60:7e:0f:1d:
                    db:58:f9:a7:e9:3c:31:c5:53:88:6d:25:28:98:d7:
                    ab:e8:fe:95:35:37:5d:4d:c2:3a:c3:56:4b:ca:7b:
                    27:10:e3:bc:a3:17:f0:34:5f:03:f3:3a:fd:6b:e9:
                    a8:a5:3e:6f:b4:0a:28:66:ad:68:b7:5d:b4:98:f6:
                    75:8c:38:8a:a6:20:18:64:c5:39:59:dd:ca:c5:48:
                    7b:1e:2e:97:7b:23:5e:96:16:c0:78:54:41:25:5d:
                    e0:d6:9a:42:f4:67:26:51:a1:f6:7b:9b:67:16:bc:
                    7f:16:07:bd:57:16:31:9a:be:f8:b3:84:18:9a:df:
                    04:76:36:f8:c4:33:57:21:f7:cf:e2:ee:68:d9:34:
                    25:69:3d:b0:8d:e6:1b:0b:e8:9d:81:41:80:25:55:
                    7a:1f:c8:22:cb:bf:85:c8:d6:8f:d2:71:4f:fa:21:
                    19:d7:5e:df:3d:4c:21:a0:6f:1e:b8:e0:f9:2a:0e:
                    cc:fe:ad:82:f1:c1:e4:59:95:21:93:63:8d:d2:23:
                    5d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:3E:DD:3E:37:69:B9:A4:7B:77:F2:59:24:4F:9D:81:14:C9:B1:3B
            X509v3 Authority Key Identifier:
                keyid:9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/bf91598f0898e7389631f518613f3a733866a4c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/aae8cbe9904f103232c002483204f9f2ae04d026.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:6c:35:de:b2:ff:8f:6f:96:34:da:a4:f0:08:e3:7d:4a:ac:
         c8:2d:2a:86:38:c0:f9:22:a5:e5:3d:02:63:81:4e:77:07:62:
         cc:c1:82:fd:ad:93:a2:f7:ab:d8:18:49:45:d0:04:5d:28:24:
         e1:b3:c3:37:af:6a:c5:de:03:00:28:3b:f6:31:1b:8f:78:f9:
         9c:8e:b1:53:98:0c:bf:79:d2:12:98:d4:00:d9:cb:30:31:84:
         50:ea:81:36:81:5e:0a:74:af:f3:39:c7:6b:71:af:31:31:1d:
         0f:46:09:89:f2:c1:46:eb:f1:eb:74:1e:db:da:06:3b:1b:6c:
         5d:15:b9:e3:a4:29:17:f5:d5:9b:03:a8:72:c4:ab:ab:b1:be:
         f5:99:2f:50:42:15:29:45:12:08:8f:41:75:09:cf:0c:39:6d:
         bb:3b:ec:e0:ce:26:e1:c9:9d:8f:9c:2e:aa:6a:b8:6b:e2:8d:
         5f:d9:3a:31:ec:2b:d4:fd:74:0d:d0:bb:25:9f:2f:ad:5f:2f:
         9c:6e:2d:f2:cd:09:b3:78:55:5a:79:2d:f9:82:7a:5f:b6:cd:
         e6:b7:83:19:23:36:e0:87:66:1d:3a:da:e5:ae:6f:d5:e2:b2:
         c9:51:3d:66:b4:5e:92:6b:55:30:26:75:73:33:61:d2:42:13:
         8e:6d:1f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org