Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/68117752ed8accd42ab585281ad452346ae8d91d.roa
File:                     68117752ed8accd42ab585281ad452346ae8d91d.roa (raw, json)
Hash identifier:          reylU/kJ03+ZZ1CYlL4fi//Ogdf6mxKcjAPQBGyqS7g=
Subject key identifier:   3D:8E:45:0E:CE:C0:B0:67:A3:4B:27:70:8A:C3:4E:87:40:C8:85:FC
Certificate issuer:       /CN=90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2
Certificate serial:       0912A5
Authority key identifier: 55:D5:F2:96:F9:29:E8:F8:30:C6:A2:7F:8C:95:7F:16:4C:96:FE:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/68117752ed8accd42ab585281ad452346ae8d91d.roa
Signing time:             Fri 15 Mar 2024 12:47:27 +0000
ROA not before:           Fri 15 Mar 2024 12:47:22 +0000
ROA not after:            Thu 15 Mar 2029 12:47:22 +0000
asID:                     28492
IP address blocks:        148.243.115.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 594597 (0x912a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2
        Validity
            Not Before: Mar 15 12:47:22 2024 GMT
            Not After : Mar 15 12:47:22 2029 GMT
        Subject: CN=68117752ed8accd42ab585281ad452346ae8d91d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:87:0d:93:87:79:8a:6a:72:5a:65:f8:dd:b7:
                    e7:40:86:da:95:0b:0f:15:89:65:d9:54:ec:e1:5c:
                    48:19:0d:fe:17:68:f6:17:d6:24:a5:35:3b:ee:2c:
                    3a:d8:cf:9d:49:fe:1a:27:fb:8f:e3:8b:5a:11:b1:
                    70:75:6b:d9:59:c2:19:33:0d:4c:b2:84:60:fd:ac:
                    40:98:27:71:db:23:ef:a8:77:51:cd:40:e3:0d:49:
                    81:95:8d:59:65:a2:6f:4a:f9:26:4e:ac:73:fc:74:
                    5c:1f:b0:8e:46:51:6b:06:b8:ab:22:b9:4c:da:1d:
                    45:f3:d0:5d:ef:12:3b:52:e4:76:fd:97:aa:2b:4c:
                    9c:e5:83:96:21:85:e4:3e:6e:84:02:24:35:48:b1:
                    ec:44:0d:48:50:81:9e:3f:e1:34:61:63:b6:b8:25:
                    2b:b9:1f:0b:9a:f5:39:8a:55:9f:71:e9:02:d3:64:
                    6d:e4:e7:fb:4b:81:9b:58:a3:f1:8e:3d:b5:31:26:
                    21:90:8c:17:15:cc:5a:0f:16:93:c9:c8:85:4b:36:
                    71:03:f7:96:3a:bf:5a:9a:51:7a:c4:4e:c2:69:5a:
                    ab:e7:23:55:70:65:e5:dc:0b:03:4c:28:2e:0c:eb:
                    f5:bb:f1:41:ea:36:f2:27:9b:b4:0f:a1:8c:05:89:
                    2e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:8E:45:0E:CE:C0:B0:67:A3:4B:27:70:8A:C3:4E:87:40:C8:85:FC
            X509v3 Authority Key Identifier:
                keyid:55:D5:F2:96:F9:29:E8:F8:30:C6:A2:7F:8C:95:7F:16:4C:96:FE:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/68117752ed8accd42ab585281ad452346ae8d91d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.243.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:83:64:77:2c:9b:ce:06:8b:50:7f:75:f9:89:51:9c:a5:d4:
         b0:3e:40:90:ce:01:d6:69:4c:b6:8e:97:54:b8:1e:c0:e0:34:
         da:25:cd:34:74:8c:e4:1b:9c:d6:c9:5c:a0:cb:1a:0e:b7:45:
         d4:61:69:a3:18:ee:4e:6c:5b:21:60:4c:10:b3:17:44:60:f6:
         14:ba:50:30:12:e3:d2:af:05:e6:46:e8:cc:a0:03:b7:56:3f:
         ef:b3:91:26:b6:7b:39:35:99:65:a6:f9:27:e1:ba:f7:af:fa:
         bf:4b:b6:15:ca:c5:07:60:c3:18:89:bf:98:1c:29:62:5e:b1:
         81:16:be:97:31:f2:4b:b8:4a:29:94:4f:34:c1:d5:75:e3:9a:
         81:11:c9:3e:ff:df:56:32:05:5d:9f:aa:fb:b8:67:96:a3:a6:
         12:d1:98:32:07:3f:c7:80:11:59:82:2d:c2:06:b5:86:ec:52:
         11:74:ba:d2:c8:a8:42:91:04:b0:51:3e:24:99:67:96:f0:f8:
         cc:4e:1f:64:4c:20:3d:6c:cc:48:27:af:d9:a4:d4:cc:69:21:
         92:aa:c3:f2:bb:c8:fd:d9:12:d3:57:cf:ef:04:82:7c:75:4f:
         dc:d0:64:70:8f:bc:88:2d:87:62:12:b7:fa:68:71:e0:b2:ea:
         8e:06:99:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org