Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/8efb696ba756ac3722e8812cec72cfa6d63d4e83.roa
File:                     8efb696ba756ac3722e8812cec72cfa6d63d4e83.roa (raw, json)
Hash identifier:          cEA7yPvD9i2cHg78Lvb5wwiwHjsv92PGecaoUMFOCtI=
Subject key identifier:   8B:02:F2:B7:13:1F:D1:C1:30:4E:E2:C2:10:C9:13:B5:FD:B1:5A:A1
Certificate issuer:       /CN=b29e0207ef6228f7f5d5995ae3679dc81aaf3156
Certificate serial:       083426
Authority key identifier: 9E:8F:64:B0:67:3E:F1:A0:8C:1E:A8:D8:8A:49:CA:D4:3E:8F:C3:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b29e0207ef6228f7f5d5995ae3679dc81aaf3156.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/8efb696ba756ac3722e8812cec72cfa6d63d4e83.roa
Signing time:             Tue 27 Feb 2024 00:40:53 +0000
ROA not before:           Tue 27 Feb 2024 00:40:50 +0000
ROA not after:            Tue 27 Feb 2029 00:40:50 +0000
asID:                     28509
IP address blocks:        148.243.99.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 537638 (0x83426)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b29e0207ef6228f7f5d5995ae3679dc81aaf3156
        Validity
            Not Before: Feb 27 00:40:50 2024 GMT
            Not After : Feb 27 00:40:50 2029 GMT
        Subject: CN=8efb696ba756ac3722e8812cec72cfa6d63d4e83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:82:9e:5c:4e:de:de:d1:76:6d:43:f8:9a:1e:
                    45:5f:eb:0a:69:55:de:05:72:e5:e8:52:12:1a:f4:
                    26:15:e3:27:33:ce:9e:18:cb:c8:0c:65:05:16:8e:
                    75:50:e8:22:d4:e0:ed:7d:57:e1:43:89:52:6a:14:
                    c0:4e:31:5a:5c:6c:55:d4:35:34:11:c4:81:b8:d3:
                    3b:47:f6:61:55:d7:c7:34:19:f4:ef:ed:ca:2e:e6:
                    45:fe:48:73:e8:3e:55:db:d6:18:ad:c0:ed:21:f9:
                    f5:ab:a8:16:9d:1b:fd:cb:28:87:d6:9b:3d:fc:2f:
                    97:75:1a:45:27:6e:bc:62:e3:c3:06:02:36:ee:4b:
                    f9:e8:46:ed:b7:7c:a7:b5:66:76:14:b3:93:7c:e7:
                    04:91:52:69:3f:98:58:f4:52:fb:a7:6f:60:3c:e4:
                    6b:f2:88:67:f3:e4:33:12:83:7a:bc:69:f5:11:5f:
                    0f:2d:4f:18:47:5d:5f:af:8b:f5:d4:e9:a4:15:43:
                    cb:bc:30:23:c1:3a:2a:5b:89:bf:80:23:92:2a:bd:
                    e9:31:ea:84:08:13:20:3e:61:33:b0:62:08:37:55:
                    c6:39:cb:3f:47:6b:a6:bf:45:14:0b:82:02:4d:82:
                    1d:70:2f:fa:27:ee:de:a1:1c:e1:c2:5f:eb:b9:58:
                    89:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:02:F2:B7:13:1F:D1:C1:30:4E:E2:C2:10:C9:13:B5:FD:B1:5A:A1
            X509v3 Authority Key Identifier:
                keyid:9E:8F:64:B0:67:3E:F1:A0:8C:1E:A8:D8:8A:49:CA:D4:3E:8F:C3:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b29e0207ef6228f7f5d5995ae3679dc81aaf3156.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/8efb696ba756ac3722e8812cec72cfa6d63d4e83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/b29e0207ef6228f7f5d5995ae3679dc81aaf3156.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.243.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:0f:6f:eb:74:f1:b5:6e:a9:ab:04:5c:bb:e7:50:39:89:fc:
         88:5a:7b:c3:6c:06:64:c0:46:dd:48:6c:59:de:3e:c9:1a:d2:
         a6:d9:f9:7d:df:b8:cb:84:e8:27:63:9d:96:6a:69:e5:01:90:
         a4:a0:22:34:70:17:fe:96:d1:46:fc:45:7c:20:73:da:3f:96:
         cb:45:fa:a5:0e:71:75:5f:ca:2d:e8:ab:76:c2:6b:45:4b:35:
         e9:eb:52:d2:01:73:f0:15:42:82:fc:d4:4b:11:71:dc:d7:68:
         16:87:cb:76:f1:5c:0f:cb:83:ac:32:da:52:e5:f8:c8:86:92:
         e5:99:42:60:dd:51:01:d4:09:cd:e1:0d:97:6a:e2:2d:a1:57:
         8b:e2:51:fd:7e:88:dc:4b:59:fc:df:de:8d:26:05:ba:81:8e:
         04:66:4e:12:8b:92:c7:21:c1:d6:0a:d4:7d:0c:62:b3:f3:7a:
         c7:bf:fb:67:5e:0f:b2:12:d2:9d:ff:80:f0:2b:68:dd:b8:9f:
         90:00:27:44:e0:b9:76:77:30:79:cf:07:50:4f:f4:80:0e:c2:
         88:a4:d4:1c:b3:44:1b:e0:c8:91:a6:52:c1:21:f7:d9:65:82:
         c7:75:5a:fa:cc:49:f5:5c:59:6d:d0:46:b9:79:6f:e5:8c:b3:
         3f:59:3d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 15 16:15:27 2024 by rpki-client on console-ams.rpki-client.org