Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/3035a1890512d0d9204d0f3afad7671420a6634b.roa
File:                     3035a1890512d0d9204d0f3afad7671420a6634b.roa (raw, json)
Hash identifier:          oU1z94Qb7JEYp6UZfZYZRZVmnTHijnoLMGdVAlN03Cs=
Subject key identifier:   77:4D:A6:50:D2:2B:49:12:4C:D2:0C:0A:CF:70:49:90:67:BC:99:5F
Certificate issuer:       /CN=90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2
Certificate serial:       0942A0
Authority key identifier: 55:D5:F2:96:F9:29:E8:F8:30:C6:A2:7F:8C:95:7F:16:4C:96:FE:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/3035a1890512d0d9204d0f3afad7671420a6634b.roa
Signing time:             Fri 15 Mar 2024 12:47:45 +0000
ROA not before:           Fri 15 Mar 2024 12:47:22 +0000
ROA not after:            Thu 15 Mar 2029 12:47:22 +0000
asID:                     11172
IP address blocks:        148.245.184.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 606880 (0x942a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2
        Validity
            Not Before: Mar 15 12:47:22 2024 GMT
            Not After : Mar 15 12:47:22 2029 GMT
        Subject: CN=3035a1890512d0d9204d0f3afad7671420a6634b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:93:e0:ff:ad:f7:3c:68:78:73:39:42:84:ae:
                    dc:ec:81:4a:85:5a:3f:1f:34:05:7b:97:03:26:16:
                    de:72:19:df:51:3f:15:dd:47:cb:b4:49:dd:db:a3:
                    0a:4d:2a:5d:ae:3f:3b:ab:1a:0a:f9:d5:ef:dc:75:
                    df:8c:96:81:69:3d:7b:3b:70:27:bb:47:7e:d1:32:
                    f2:56:fc:b3:b7:88:15:6e:a9:14:b3:f9:80:d1:f3:
                    c5:6a:0b:60:88:32:79:27:10:91:78:9b:3e:7c:d5:
                    73:9b:9a:6d:ce:d5:04:fe:64:fe:f9:52:56:e0:31:
                    6e:37:f9:77:65:00:46:92:4b:21:60:81:f1:5b:20:
                    59:59:51:b4:46:25:cb:30:91:e3:ee:8a:75:36:51:
                    d5:de:95:2b:56:f4:d4:42:86:13:48:a1:58:0f:eb:
                    ce:fd:39:1c:b7:b2:e2:61:6e:b8:94:69:d2:21:d4:
                    ba:73:33:3f:43:d5:da:8d:fb:3a:bb:68:ae:23:04:
                    cb:5e:d2:92:50:1a:2e:41:d8:44:25:40:a7:4b:86:
                    fd:8f:80:e6:52:c6:df:30:eb:18:a8:b5:07:d1:03:
                    00:82:60:65:2b:1e:e1:cb:9e:9c:6a:0b:98:a0:84:
                    8d:d8:64:c0:3a:cd:2f:7c:43:d8:32:72:65:75:09:
                    02:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:4D:A6:50:D2:2B:49:12:4C:D2:0C:0A:CF:70:49:90:67:BC:99:5F
            X509v3 Authority Key Identifier:
                keyid:55:D5:F2:96:F9:29:E8:F8:30:C6:A2:7F:8C:95:7F:16:4C:96:FE:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/3035a1890512d0d9204d0f3afad7671420a6634b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.245.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:8c:0d:3e:08:0b:2c:83:f3:29:fe:07:21:72:db:be:cb:1f:
         ff:e0:a9:4d:b8:a2:7d:20:5f:90:2d:ad:7a:73:1a:ee:cf:21:
         a7:97:3e:b3:56:7e:04:e6:cd:61:3b:84:40:dc:9c:f6:5a:8e:
         db:77:3f:49:d8:57:26:ff:8a:34:fb:51:25:17:e0:f2:04:d6:
         d9:22:12:03:8a:62:1a:0a:5b:4a:1a:4b:9e:90:e4:61:f4:a1:
         e3:fd:44:d1:ce:9d:1c:61:9a:a0:02:e1:30:59:05:aa:d6:91:
         71:09:37:46:73:bd:a5:55:fc:50:e7:32:74:d5:1a:e2:9c:f8:
         f2:6a:4f:db:a0:fc:02:75:11:e8:f7:6b:ea:c5:b7:f2:c7:00:
         50:64:76:7e:bf:e6:50:51:3f:6d:89:39:2e:3e:ac:0b:3c:43:
         d8:8c:9b:bb:7f:9b:c9:90:d5:15:9c:dc:83:60:d9:05:f7:ec:
         15:91:b9:ea:70:75:b2:f9:f6:77:12:ea:c5:d0:64:3c:c1:c1:
         af:74:54:d6:9e:9a:4d:3e:e7:90:eb:29:a6:e9:e2:21:d9:13:
         12:84:ed:b7:1e:45:a7:73:66:ed:f9:76:1a:fd:83:5d:f8:5b:
         98:59:b5:26:72:ed:c4:a4:44:b9:a3:50:fd:23:63:5d:52:08:
         6e:3f:7c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org