Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/332c1583f0d2f16e3f940261ee836bca8f6a595d.roa
File:                     332c1583f0d2f16e3f940261ee836bca8f6a595d.roa (raw, json)
Hash identifier:          lrFkH1jT2fKqjDd5WLl50Uy6S77UUT0bQMPEEMOgD4w=
Subject key identifier:   BD:27:2F:E3:66:04:09:09:52:C7:19:74:A6:74:D6:FE:7A:C0:18:F9
Certificate issuer:       /CN=90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2
Certificate serial:       0959DD
Authority key identifier: 55:D5:F2:96:F9:29:E8:F8:30:C6:A2:7F:8C:95:7F:16:4C:96:FE:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/332c1583f0d2f16e3f940261ee836bca8f6a595d.roa
Signing time:             Fri 15 Mar 2024 12:47:53 +0000
ROA not before:           Fri 15 Mar 2024 12:47:22 +0000
ROA not after:            Thu 15 Mar 2029 12:47:22 +0000
asID:                     6503
IP address blocks:        189.213.128.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 612829 (0x959dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2
        Validity
            Not Before: Mar 15 12:47:22 2024 GMT
            Not After : Mar 15 12:47:22 2029 GMT
        Subject: CN=332c1583f0d2f16e3f940261ee836bca8f6a595d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:34:74:d2:15:af:7c:82:7d:c2:57:4c:40:52:
                    11:df:be:8e:49:ef:f0:de:fe:0b:c2:c5:02:dd:06:
                    22:e3:b4:ce:e2:58:71:85:13:a2:94:4c:b3:7d:4e:
                    a1:6b:b3:cf:0a:78:6f:05:6c:10:4a:29:70:ec:7b:
                    63:2c:fd:c6:b9:83:f7:ca:2d:b2:76:53:c1:ac:d1:
                    27:51:38:cf:80:ed:6f:91:f5:21:38:fd:de:f3:be:
                    16:fd:84:7c:6c:37:c0:56:2d:9f:df:d2:ee:65:1a:
                    bb:2d:9c:c2:b5:67:8b:e6:81:9f:a3:76:0f:c5:6a:
                    68:dc:de:b6:9a:e6:76:c0:e5:95:ed:fc:7d:65:aa:
                    2d:f0:fc:62:b8:8d:ae:f5:9e:d5:00:03:28:df:87:
                    dd:49:7b:9a:db:18:e8:8c:c2:b9:05:a7:fd:d7:13:
                    6d:79:7c:dc:81:4e:b0:99:de:5d:f9:51:3b:df:5a:
                    af:c0:c3:47:6c:8b:96:07:cd:1e:71:83:7f:a1:7a:
                    f1:f7:17:fb:c3:7b:df:e8:76:74:4b:fa:06:ff:b0:
                    f9:01:29:da:96:43:8d:fa:70:9c:f0:43:59:87:b7:
                    d9:2f:7c:6b:ef:ad:bb:ad:59:55:2f:7c:e6:12:25:
                    cd:fe:89:48:ca:10:26:52:f7:b8:ef:75:c0:1f:04:
                    27:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:27:2F:E3:66:04:09:09:52:C7:19:74:A6:74:D6:FE:7A:C0:18:F9
            X509v3 Authority Key Identifier:
                keyid:55:D5:F2:96:F9:29:E8:F8:30:C6:A2:7F:8C:95:7F:16:4C:96:FE:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/332c1583f0d2f16e3f940261ee836bca8f6a595d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.213.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         b2:33:e2:e9:6e:6b:ab:c9:83:43:c1:07:44:f3:49:3e:80:75:
         9d:0f:49:a0:1f:4c:af:60:e3:26:8a:1c:a9:f8:6e:af:cf:55:
         f7:b0:68:14:bb:77:f3:e2:96:3b:cb:0b:3a:c9:70:ee:7c:d2:
         82:74:46:b2:78:d0:b7:c4:d4:94:a0:69:66:5c:1a:d5:5f:92:
         59:ca:bc:45:3e:7b:a6:79:9c:bf:61:8f:b9:6a:37:be:af:ef:
         4d:42:f9:63:b1:a3:fa:53:f2:34:78:b4:1d:b6:fc:9b:f0:e2:
         c1:44:f3:a8:05:0f:7d:60:7d:ea:0f:e2:9d:42:f2:3b:bc:a1:
         26:37:66:86:35:cb:cf:fe:e3:34:e9:16:05:c6:b9:58:43:ed:
         61:13:df:8d:ba:e9:5d:a0:1a:33:71:5d:4b:a6:12:b5:80:a7:
         49:b4:51:05:1d:e7:63:02:6e:1f:22:2c:2a:8f:e1:31:30:ab:
         23:e7:d2:17:1c:23:24:dc:f4:ae:d5:db:65:f0:57:d3:99:9a:
         43:1c:3e:c8:74:16:57:f8:ed:b1:a5:b7:ad:7b:f6:eb:f6:0e:
         de:37:9a:56:3c:79:44:bb:6d:b9:fc:54:29:50:c4:28:f0:09:
         c1:aa:a1:39:0a:c2:41:83:c6:3d:22:1d:43:d4:a4:bd:ee:3e:
         45:03:30:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:33 2024 by rpki-client on console-ams.rpki-client.org