Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/15c7921c9c8a245e6eb7c1469eede28bb02be25e.roa
File:                     15c7921c9c8a245e6eb7c1469eede28bb02be25e.roa (raw, json)
Hash identifier:          OdY6AabpMUz4ifCIHOjU+z3i4/nxA/8hg5nv25mjESs=
Subject key identifier:   25:B0:0A:75:8F:44:32:3D:15:9A:1A:7C:C1:FE:00:72:36:A7:BD:BE
Certificate issuer:       /CN=90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2
Certificate serial:       093602
Authority key identifier: 55:D5:F2:96:F9:29:E8:F8:30:C6:A2:7F:8C:95:7F:16:4C:96:FE:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/15c7921c9c8a245e6eb7c1469eede28bb02be25e.roa
Signing time:             Fri 15 Mar 2024 12:47:40 +0000
ROA not before:           Fri 15 Mar 2024 12:47:22 +0000
ROA not after:            Thu 15 Mar 2029 12:47:22 +0000
asID:                     28506
IP address blocks:        148.245.248.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 603650 (0x93602)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2
        Validity
            Not Before: Mar 15 12:47:22 2024 GMT
            Not After : Mar 15 12:47:22 2029 GMT
        Subject: CN=15c7921c9c8a245e6eb7c1469eede28bb02be25e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:de:d1:39:81:2f:8d:5d:ef:38:f4:fa:e1:a9:
                    6e:fb:6d:2d:a7:15:3e:4a:1d:0f:c1:b1:d4:93:72:
                    41:86:2f:75:3e:93:64:75:e2:e5:05:a7:7c:5b:e3:
                    92:92:d8:02:a9:a4:9c:49:6a:ed:a4:bc:e8:9f:b4:
                    df:cd:ab:d5:6d:e2:75:c0:15:63:c9:80:c6:07:40:
                    86:b7:c9:e9:93:f1:69:6a:63:79:d8:a7:ba:2a:ef:
                    09:9e:43:b5:30:cd:09:02:f2:ec:cb:0f:b6:46:9d:
                    7c:cb:c2:11:c0:93:04:c3:39:44:a0:d6:c3:2e:dd:
                    4a:bd:05:bb:cb:f8:b2:de:f6:32:c4:29:36:75:86:
                    7b:42:e2:e4:d4:8f:09:f2:58:b4:25:89:d3:de:6c:
                    b0:4b:ef:ac:37:ea:4d:8e:54:4c:8c:40:1d:07:ce:
                    28:14:d9:c3:0b:b5:f7:b3:6b:f0:fe:d3:ea:17:da:
                    dc:61:59:93:b5:3f:1d:6c:c9:08:fc:77:5d:7f:54:
                    cf:aa:6c:04:20:4a:cc:8e:55:af:fd:76:5e:8f:54:
                    38:3c:23:1a:ac:de:a1:be:8e:c5:a7:16:62:cc:c6:
                    58:eb:02:df:5b:4d:1c:af:44:5c:40:e0:34:12:91:
                    84:ce:8c:63:58:aa:fa:c3:2a:61:96:48:e8:db:af:
                    76:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B0:0A:75:8F:44:32:3D:15:9A:1A:7C:C1:FE:00:72:36:A7:BD:BE
            X509v3 Authority Key Identifier:
                keyid:55:D5:F2:96:F9:29:E8:F8:30:C6:A2:7F:8C:95:7F:16:4C:96:FE:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/15c7921c9c8a245e6eb7c1469eede28bb02be25e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.245.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:97:35:41:6e:a6:fb:6a:9d:75:53:ea:43:1b:4e:5e:63:16:
         70:c2:74:03:ac:98:aa:79:8b:d7:f5:ca:6f:71:37:30:c5:f4:
         0e:73:f9:0e:a1:47:fc:6b:0b:a6:76:ad:69:6e:86:b1:29:e3:
         98:39:d1:b4:9f:98:7e:61:38:31:f3:10:ef:e0:2e:c7:27:0c:
         53:6d:56:30:ce:f2:1b:02:3e:02:9d:a3:bb:72:93:53:da:c3:
         71:63:ce:f5:4f:1e:7d:4c:27:57:3b:79:cd:70:58:55:16:ba:
         5d:82:de:93:19:db:78:81:3d:35:98:c4:46:a4:9b:d2:ab:cc:
         63:cf:59:bf:df:11:bb:96:d7:80:0a:be:55:39:7d:95:bc:58:
         44:f0:f9:bb:32:eb:e4:b8:88:bc:de:ae:e8:a2:d4:97:a0:86:
         37:1e:73:5d:4d:6b:bf:4d:ce:18:83:ed:45:b9:3e:36:08:ad:
         fc:cd:c8:b1:dd:45:90:cf:c3:93:a0:35:2b:31:48:ec:32:1f:
         b5:71:c9:16:2f:68:8c:0e:06:f2:63:24:d0:dc:6e:1c:56:bd:
         5a:ee:39:36:61:65:58:29:98:59:9c:fe:2a:e8:4c:b9:0c:1b:
         b7:de:a2:62:a6:47:5d:89:35:19:fd:5a:92:2b:8e:53:ab:b6:
         30:2f:35:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:42 2024 by rpki-client on console-fra.rpki-client.org