Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/575f6ca5acfdfce198a9243f5224a0704bcb0a93.roa
File:                     575f6ca5acfdfce198a9243f5224a0704bcb0a93.roa (raw, json)
Hash identifier:          CUvaj8jVIrHDUSPxZb1YX4J473z4BaebAmol8JXKEfY=
Subject key identifier:   D8:7F:7F:4D:D3:01:53:90:99:8E:87:84:55:63:E7:E6:F2:A1:6E:AB
Certificate issuer:       /CN=b29e0207ef6228f7f5d5995ae3679dc81aaf3156
Certificate serial:       08567D
Authority key identifier: 9E:8F:64:B0:67:3E:F1:A0:8C:1E:A8:D8:8A:49:CA:D4:3E:8F:C3:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b29e0207ef6228f7f5d5995ae3679dc81aaf3156.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/575f6ca5acfdfce198a9243f5224a0704bcb0a93.roa
Signing time:             Tue 27 Feb 2024 00:46:28 +0000
ROA not before:           Tue 27 Feb 2024 00:46:28 +0000
ROA not after:            Fri 27 Feb 2026 00:46:28 +0000
asID:                     28509
IP address blocks:        148.245.246.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 546429 (0x8567d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b29e0207ef6228f7f5d5995ae3679dc81aaf3156
        Validity
            Not Before: Feb 27 00:46:28 2024 GMT
            Not After : Feb 27 00:46:28 2026 GMT
        Subject: CN=575f6ca5acfdfce198a9243f5224a0704bcb0a93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a5:cc:c2:87:8f:4e:f2:16:e4:f5:68:69:a1:
                    ca:c3:b8:da:92:0e:7b:73:fb:52:af:2b:ed:a6:9b:
                    a1:69:b9:ed:af:dd:8f:5e:90:3c:5e:ea:7f:05:5c:
                    e9:ff:b3:25:6a:38:e3:28:6a:50:1b:f8:1e:91:ca:
                    13:75:7d:4d:65:ae:70:d6:2b:1e:5d:cb:ad:b2:f6:
                    ab:29:b5:84:5a:ce:c5:2f:cc:92:19:6e:37:0a:19:
                    36:80:26:28:c2:9a:ed:18:fd:e7:9b:e9:0c:31:33:
                    ce:b3:6f:ad:af:46:de:66:77:4b:3c:1f:a5:8c:a0:
                    27:38:8c:df:c4:28:93:bb:a6:2f:e7:3a:d9:a5:81:
                    0f:18:6e:01:b8:6e:d8:8a:be:dd:b2:2a:3b:81:c5:
                    a9:76:e2:43:e9:35:a8:03:76:09:8e:a1:fa:b5:38:
                    1f:fb:83:f1:50:4a:fb:b3:4e:6c:b8:14:97:d1:2f:
                    13:c0:67:2d:bd:45:08:a4:8e:a4:65:8d:cd:2c:2f:
                    2b:a2:09:f7:50:42:e9:1a:62:b7:4c:bc:8a:81:f7:
                    c9:e3:94:b8:da:34:76:92:1f:c8:0c:4f:50:db:11:
                    3d:a8:57:54:dd:b0:ec:88:6f:dd:94:82:91:26:68:
                    f7:0d:bb:2e:8b:5b:42:88:7d:89:15:e3:85:0e:f1:
                    a7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:7F:7F:4D:D3:01:53:90:99:8E:87:84:55:63:E7:E6:F2:A1:6E:AB
            X509v3 Authority Key Identifier:
                keyid:9E:8F:64:B0:67:3E:F1:A0:8C:1E:A8:D8:8A:49:CA:D4:3E:8F:C3:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b29e0207ef6228f7f5d5995ae3679dc81aaf3156.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/575f6ca5acfdfce198a9243f5224a0704bcb0a93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/b29e0207ef6228f7f5d5995ae3679dc81aaf3156.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.245.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:ab:33:bd:bd:19:91:c0:b4:2d:ae:a2:b9:32:57:c7:3a:40:
         6c:0f:5f:ab:77:ac:6a:15:ff:7d:cf:dc:c6:5b:f0:4f:40:04:
         78:2a:87:6a:ca:1e:62:2c:8e:90:bb:75:2b:5d:17:14:c7:87:
         00:c4:6b:7f:47:22:47:ca:62:2f:8b:e1:d6:a0:a2:6b:78:96:
         20:52:b7:43:21:7d:76:d7:1e:f9:00:cd:47:88:d6:a2:ac:2b:
         25:ac:b3:e4:dd:46:ee:80:1c:4b:37:90:5a:44:bf:4f:38:ff:
         a8:94:0f:e1:48:a0:97:f5:89:ae:6f:8b:74:f5:5f:b5:e7:7a:
         0e:cb:06:e8:bb:e5:c6:54:45:bb:cb:88:73:03:cb:fa:b1:25:
         c2:3e:22:cd:7d:d0:56:4e:8b:fd:1a:a9:68:28:b0:e7:e2:99:
         8b:d8:66:f9:16:22:78:e8:fd:c9:ee:a6:b0:8c:e6:23:de:54:
         9f:39:2b:e5:ff:f6:77:4d:8c:c2:6b:15:41:62:74:83:a8:00:
         94:14:71:02:57:8f:30:af:0a:21:bc:66:43:2e:08:46:a3:1c:
         ec:47:5c:56:79:dc:95:c1:44:bf:a8:0e:cb:18:b7:76:37:22:
         a9:7f:d3:d9:68:04:da:de:68:7e:c7:b1:db:9e:87:1a:1e:05:
         99:f5:24:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:42 2024 by rpki-client on console-fra.rpki-client.org