Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/8cc2e1361219af7945338eb3244ea18913955874.roa
File:                     8cc2e1361219af7945338eb3244ea18913955874.roa (raw, json)
Hash identifier:          pn7Ke24IhGRuPkMS5MzdZcTuWF+q2dfYhIkdZr74Qkg=
Subject key identifier:   6F:EB:07:D6:3A:30:07:D4:D7:E6:18:DB:0D:0B:3F:C1:58:D6:E3:28
Certificate issuer:       /CN=90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2
Certificate serial:       09059F
Authority key identifier: 55:D5:F2:96:F9:29:E8:F8:30:C6:A2:7F:8C:95:7F:16:4C:96:FE:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/8cc2e1361219af7945338eb3244ea18913955874.roa
Signing time:             Fri 15 Mar 2024 12:47:24 +0000
ROA not before:           Fri 15 Mar 2024 12:47:22 +0000
ROA not after:            Thu 15 Mar 2029 12:47:22 +0000
asID:                     28506
IP address blocks:        148.243.37.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 591263 (0x9059f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2
        Validity
            Not Before: Mar 15 12:47:22 2024 GMT
            Not After : Mar 15 12:47:22 2029 GMT
        Subject: CN=8cc2e1361219af7945338eb3244ea18913955874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f6:35:98:08:69:5b:0a:b5:88:53:b6:42:d9:
                    07:f3:a5:35:28:07:44:05:9e:5b:6b:40:6b:b5:75:
                    aa:68:df:fa:02:21:7e:10:10:8f:6f:e7:4c:96:c4:
                    45:f1:42:c7:bb:13:8a:01:ee:b9:ad:21:ba:bc:25:
                    31:87:00:ce:5b:c5:44:e9:6c:4d:b2:c3:90:9d:29:
                    95:43:03:ae:ba:aa:cf:17:c5:c4:80:b4:b5:5a:5e:
                    ae:54:c6:94:1e:11:0f:e2:b2:64:16:ce:43:d2:e8:
                    6b:79:bd:f5:80:5e:b9:70:fd:53:0d:f1:16:7d:61:
                    47:8d:de:4e:e0:f8:68:ca:85:e5:9c:81:3f:97:78:
                    db:5a:04:4b:52:38:b4:68:8a:11:d4:ed:ab:02:b5:
                    06:55:07:6f:d6:79:8e:a6:40:c2:ff:32:ea:54:9d:
                    da:b3:e3:bc:1d:c9:70:6a:36:0c:c3:91:b1:c0:9a:
                    ea:59:7e:03:f6:dd:3f:9f:c0:a1:ba:5f:2e:38:d9:
                    85:d8:da:13:71:24:50:dc:20:7b:9d:ea:2b:ea:08:
                    ae:9a:06:87:82:3c:e4:00:9b:c9:bc:b2:79:67:c3:
                    f8:ef:64:d3:64:6a:70:f7:ba:fd:38:8f:37:a6:d1:
                    f6:d9:db:cd:67:33:b6:74:66:d8:f6:4b:6b:a6:8f:
                    97:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:EB:07:D6:3A:30:07:D4:D7:E6:18:DB:0D:0B:3F:C1:58:D6:E3:28
            X509v3 Authority Key Identifier:
                keyid:55:D5:F2:96:F9:29:E8:F8:30:C6:A2:7F:8C:95:7F:16:4C:96:FE:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/8cc2e1361219af7945338eb3244ea18913955874.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.243.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         db:43:a9:49:f5:ca:6e:1d:ef:8e:13:a1:de:44:1b:41:ed:9c:
         73:06:b3:fd:99:e7:45:d2:c4:82:cd:b8:55:18:ad:36:3a:5b:
         0e:74:84:c2:24:89:5a:88:d3:7a:33:05:2a:c2:8a:b9:e7:52:
         61:f4:a4:61:97:16:df:d1:50:01:60:e2:d3:73:6c:31:f6:87:
         cb:b5:f5:e0:19:73:82:24:11:6a:69:5d:fb:33:41:47:10:bc:
         af:05:d8:25:89:7b:fd:57:d1:71:64:0d:38:2d:e9:e7:d1:4f:
         b2:a4:14:6e:6a:4c:5e:15:c7:34:46:a6:06:0a:75:f3:fd:2e:
         40:34:5f:ed:e3:a7:49:82:80:9d:12:3a:e7:b3:dc:b4:9a:a8:
         93:0b:99:2d:a1:0d:38:93:f1:5f:c2:3b:e0:a9:fe:7d:a1:66:
         a6:77:a0:50:37:4f:3f:29:79:3e:d0:b9:f4:f5:62:87:30:0e:
         de:17:b5:96:f4:46:af:50:9e:39:8a:09:be:ca:36:e0:0c:89:
         37:3a:bc:61:84:13:70:3f:4b:51:35:0e:c5:56:d1:64:1e:8d:
         68:d0:af:ef:f8:ea:a0:28:2c:87:8f:d0:07:52:4e:f2:f4:b5:
         b7:40:19:90:ab:78:a3:a1:50:93:08:0b:5a:a2:9c:e2:f9:8b:
         b7:14:09:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:33 2024 by rpki-client on console-ams.rpki-client.org