Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/06778c34faf6b349f01f21274bcc344bd581d9c0.roa
File:                     06778c34faf6b349f01f21274bcc344bd581d9c0.roa (raw, json)
Hash identifier:          e9YEHcw63lPbeIFWc3ZXFi3EkvakohW967z35bPk8gQ=
Subject key identifier:   4E:82:2B:89:7C:53:77:38:05:9C:E7:91:01:86:F5:07:28:9D:1E:E0
Certificate issuer:       /CN=b29e0207ef6228f7f5d5995ae3679dc81aaf3156
Certificate serial:       0858C9
Authority key identifier: 9E:8F:64:B0:67:3E:F1:A0:8C:1E:A8:D8:8A:49:CA:D4:3E:8F:C3:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b29e0207ef6228f7f5d5995ae3679dc81aaf3156.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/06778c34faf6b349f01f21274bcc344bd581d9c0.roa
Signing time:             Tue 27 Feb 2024 00:47:19 +0000
ROA not before:           Tue 27 Feb 2024 00:47:19 +0000
ROA not after:            Fri 27 Feb 2026 00:47:19 +0000
asID:                     28506
IP address blocks:        148.245.248.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 547017 (0x858c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b29e0207ef6228f7f5d5995ae3679dc81aaf3156
        Validity
            Not Before: Feb 27 00:47:19 2024 GMT
            Not After : Feb 27 00:47:19 2026 GMT
        Subject: CN=06778c34faf6b349f01f21274bcc344bd581d9c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:47:ad:1b:72:28:d0:d4:b6:1b:e9:da:02:3e:
                    38:8b:81:93:bb:0d:55:1e:da:09:6b:c8:db:cc:e5:
                    98:16:61:d9:25:fc:a1:41:d7:3f:ad:c2:10:79:59:
                    d3:f2:d0:36:6a:ac:15:36:b9:93:6c:40:d0:82:be:
                    69:34:d0:aa:53:6f:03:05:33:35:7a:4e:c8:82:b9:
                    8c:3f:cf:43:47:b0:49:c9:c7:3c:dd:4a:7e:f2:38:
                    c0:bb:d2:56:17:a2:aa:1a:5a:bb:49:a3:23:33:da:
                    06:9a:1a:67:56:40:44:d9:71:c5:31:a9:27:07:bd:
                    83:f8:9b:9e:27:8f:f9:56:99:08:dc:e3:8f:d6:d6:
                    8f:be:f7:a7:7c:9b:7e:4a:d4:02:7b:8f:62:cc:a2:
                    02:26:64:da:0a:35:a3:5f:27:24:fa:9f:3c:a6:36:
                    4a:18:c6:74:43:7a:80:dc:f3:9a:37:95:ae:bf:d9:
                    92:ec:16:04:da:73:64:9c:1e:63:81:59:ea:10:ef:
                    49:46:a7:2b:49:3f:83:45:dc:b9:8e:5c:de:ea:8b:
                    47:9c:0d:35:01:df:7b:71:10:3f:a6:f3:5e:91:d3:
                    2f:20:74:06:86:9b:ba:c7:32:d1:40:8b:7b:2b:23:
                    f9:eb:01:11:a3:c0:00:fe:2c:46:dc:cd:e6:d0:d3:
                    38:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:82:2B:89:7C:53:77:38:05:9C:E7:91:01:86:F5:07:28:9D:1E:E0
            X509v3 Authority Key Identifier:
                keyid:9E:8F:64:B0:67:3E:F1:A0:8C:1E:A8:D8:8A:49:CA:D4:3E:8F:C3:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b29e0207ef6228f7f5d5995ae3679dc81aaf3156.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/06778c34faf6b349f01f21274bcc344bd581d9c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/b29e0207ef6228f7f5d5995ae3679dc81aaf3156.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.245.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:2a:be:0a:fe:4a:f0:35:21:0a:39:f9:3e:55:bd:da:14:ef:
         65:cb:58:af:86:30:90:b2:8d:aa:00:98:46:89:f8:21:08:50:
         70:3c:3c:2e:91:6e:df:44:5e:d3:55:87:f5:8f:0c:c2:03:3d:
         f3:10:49:2b:dd:fb:dc:6e:37:d2:4e:9e:16:d3:f8:9c:00:48:
         96:93:b8:64:b2:13:ec:d2:04:58:9c:1e:40:03:0c:73:42:c5:
         d2:91:25:54:fd:ee:b0:9f:14:76:70:d9:07:a7:78:4b:34:48:
         c6:94:68:bc:c7:0a:3f:ce:3d:a1:b5:9d:50:b4:19:13:5b:37:
         bf:98:90:47:6f:6b:8d:15:6b:a4:14:4d:28:dc:31:a7:74:63:
         ea:e5:c0:9f:22:a0:05:02:3e:e7:a7:44:ee:a2:12:ed:7e:97:
         20:c1:96:c0:88:2e:36:5a:f2:98:df:17:1e:30:0a:65:04:d5:
         8d:da:f1:3d:af:47:25:cb:c8:1a:2b:52:29:bf:a3:e7:c8:7b:
         d3:5f:51:0e:a4:a4:a8:8e:e7:8e:77:39:0c:69:2a:88:25:ea:
         cd:da:6d:4b:f9:1c:a6:99:c6:21:a4:eb:75:e6:bc:62:55:43:
         e6:d1:ed:2d:9c:7d:c6:a1:dc:e5:04:d1:11:b6:89:f8:aa:f4:
         6d:02:c2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 15 16:00:18 2024 by rpki-client on console-fra.rpki-client.org