Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/aca9391548ace6dc6881c3b2009641f350f0ba29.roa
File:                     aca9391548ace6dc6881c3b2009641f350f0ba29.roa (raw, json)
Hash identifier:          63mHtNNx7pA4XScWLakOvAIgTaPvXQcDJtMo96cGLg8=
Subject key identifier:   7C:42:8E:3B:A6:42:8A:2B:54:75:24:3A:27:E3:58:6F:48:2A:48:3F
Certificate issuer:       /CN=b29e0207ef6228f7f5d5995ae3679dc81aaf3156
Certificate serial:       0837A7
Authority key identifier: 9E:8F:64:B0:67:3E:F1:A0:8C:1E:A8:D8:8A:49:CA:D4:3E:8F:C3:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b29e0207ef6228f7f5d5995ae3679dc81aaf3156.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/aca9391548ace6dc6881c3b2009641f350f0ba29.roa
Signing time:             Tue 27 Feb 2024 00:40:55 +0000
ROA not before:           Tue 27 Feb 2024 00:40:50 +0000
ROA not after:            Tue 27 Feb 2029 00:40:50 +0000
asID:                     22011
IP address blocks:        148.243.65.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 538535 (0x837a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b29e0207ef6228f7f5d5995ae3679dc81aaf3156
        Validity
            Not Before: Feb 27 00:40:50 2024 GMT
            Not After : Feb 27 00:40:50 2029 GMT
        Subject: CN=aca9391548ace6dc6881c3b2009641f350f0ba29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:86:25:1f:b3:f6:0f:2b:d2:4d:32:f6:d9:39:
                    e7:78:b0:9e:56:f7:cf:ae:e9:52:c3:a1:fd:a3:52:
                    e7:ab:0a:37:75:44:54:15:a9:6c:84:fd:2d:0d:db:
                    39:48:bb:f0:9f:b5:05:6c:10:46:54:0a:31:e7:82:
                    1c:b5:91:02:0f:38:39:db:e0:01:8a:54:af:01:bc:
                    4e:63:93:37:75:f1:91:cf:0a:12:1f:68:aa:c2:ed:
                    5a:64:98:75:8c:23:ac:f3:82:39:1e:7b:85:cb:cb:
                    f2:93:6b:41:5e:be:81:df:5a:cc:0c:7c:71:86:33:
                    db:cd:9d:54:56:b0:6a:d5:d3:b0:a4:36:23:cc:be:
                    d9:ea:6d:ad:40:88:97:b6:ab:ba:20:9f:02:d3:c0:
                    8c:26:b5:6c:19:22:48:63:97:28:ca:26:99:96:64:
                    5c:06:64:07:cf:06:df:75:e4:ea:31:70:22:d3:5c:
                    c0:c5:e3:34:76:7d:46:87:26:61:c8:b3:73:41:c3:
                    41:81:28:cd:58:bd:80:c2:eb:c2:ef:3d:7a:c5:95:
                    22:19:62:00:ee:74:2e:11:92:10:d9:05:69:54:30:
                    21:3c:d1:45:02:2e:ad:fa:04:f9:18:ca:e5:5a:73:
                    25:34:e3:2f:66:c0:24:55:af:32:fd:50:d7:29:d8:
                    ad:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:42:8E:3B:A6:42:8A:2B:54:75:24:3A:27:E3:58:6F:48:2A:48:3F
            X509v3 Authority Key Identifier:
                keyid:9E:8F:64:B0:67:3E:F1:A0:8C:1E:A8:D8:8A:49:CA:D4:3E:8F:C3:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b29e0207ef6228f7f5d5995ae3679dc81aaf3156.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/aca9391548ace6dc6881c3b2009641f350f0ba29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/b29e0207ef6228f7f5d5995ae3679dc81aaf3156.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.243.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:d7:b6:a9:e8:6a:9f:ea:9d:a3:85:cb:28:b5:c0:79:45:ba:
         83:1c:3c:12:63:a2:a7:93:a9:fb:7c:f3:75:46:dc:08:56:6d:
         95:38:8a:45:57:03:0e:6c:10:2b:0e:a2:70:b1:82:6f:91:85:
         88:23:44:d5:70:76:87:48:7d:e0:4a:ed:d2:66:be:6a:d9:71:
         db:c4:0b:57:8b:ca:69:ac:e7:da:37:cc:a9:66:d2:cf:5c:27:
         54:19:17:61:77:41:89:23:b8:c5:34:b7:d6:b9:52:f6:15:a3:
         55:20:c4:75:a1:53:f7:b9:d2:9b:a9:60:6a:27:6e:5d:60:af:
         48:87:20:9f:86:5c:f5:ba:41:25:4c:e0:9e:d9:8c:53:ff:c7:
         f8:08:c9:48:77:ad:55:23:b2:45:56:f5:bf:84:b1:e9:9e:0f:
         73:63:c5:ee:c4:f2:1a:c3:bf:e6:f5:1b:c6:fc:e9:ca:af:9e:
         44:c7:e2:ee:2e:ab:7c:c1:5b:ba:42:36:74:32:59:d8:00:b6:
         10:cc:1b:02:c2:c2:44:76:00:64:d4:ee:70:95:55:18:83:37:
         e3:97:48:a9:32:f1:4c:5b:4c:8f:7d:02:52:81:84:cf:f4:b6:
         d9:b6:ca:6b:47:41:92:94:7f:17:37:33:8b:ca:15:f4:ba:39:
         15:6e:e9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 15 16:00:18 2024 by rpki-client on console-fra.rpki-client.org