Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/c7929647aaa93ef3a9ad64150ba03871a5c9ff53.roa
File:                     c7929647aaa93ef3a9ad64150ba03871a5c9ff53.roa (raw, json)
Hash identifier:          WpsR1sVkMTqDF7ac6rLhVusAEBupA6MwuE3dafW+cek=
Subject key identifier:   4E:D4:6E:09:E9:BB:1C:7C:DB:B2:02:CA:96:E9:6B:D2:3F:ED:EA:06
Certificate issuer:       /CN=90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2
Certificate serial:       093F8F
Authority key identifier: 55:D5:F2:96:F9:29:E8:F8:30:C6:A2:7F:8C:95:7F:16:4C:96:FE:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/c7929647aaa93ef3a9ad64150ba03871a5c9ff53.roa
Signing time:             Fri 15 Mar 2024 12:47:43 +0000
ROA not before:           Fri 15 Mar 2024 12:47:22 +0000
ROA not after:            Thu 15 Mar 2029 12:47:22 +0000
asID:                     11172
IP address blocks:        148.245.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 606095 (0x93f8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2
        Validity
            Not Before: Mar 15 12:47:22 2024 GMT
            Not After : Mar 15 12:47:22 2029 GMT
        Subject: CN=c7929647aaa93ef3a9ad64150ba03871a5c9ff53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fc:82:4e:ed:10:b3:b1:7d:8a:fd:d7:c1:71:
                    94:72:03:d5:c6:2e:d1:6e:0c:d1:57:00:14:c3:ff:
                    8e:53:7d:7d:44:19:12:c6:0d:ff:99:02:31:3c:4f:
                    fb:da:18:c0:3a:02:01:0c:84:c0:e1:6f:88:95:d5:
                    17:3a:5f:7b:70:c3:e0:ad:72:64:ea:65:a4:39:96:
                    63:df:51:8f:0f:02:80:49:e5:5e:a6:06:cb:5e:a1:
                    73:79:cd:1c:b7:b2:30:1c:bb:a9:67:20:32:7a:90:
                    5a:90:a5:b2:58:03:c6:c4:f8:46:ab:9b:f3:5c:83:
                    64:2e:cf:b2:19:b4:db:f3:96:f3:2f:35:f5:02:fa:
                    89:1f:2b:5b:36:46:1e:7d:09:6c:30:97:24:78:f5:
                    ac:f9:d1:ce:0d:41:c1:d9:74:0f:9b:9d:aa:e5:d2:
                    d6:ce:8a:f3:ac:33:99:7a:8e:0a:ba:76:b9:b0:eb:
                    42:d4:8d:59:40:ee:78:15:b3:f4:c2:7c:b3:3e:7d:
                    2e:31:6b:a8:1e:1d:23:5a:7a:1f:5d:20:91:80:06:
                    df:99:b4:a0:10:01:3d:e9:5f:a7:bf:6b:1b:4e:67:
                    37:16:a4:7a:6a:55:de:88:cb:ec:10:4e:14:6e:b1:
                    67:9d:b1:f6:92:af:a3:67:a0:9a:00:13:07:f1:88:
                    ad:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D4:6E:09:E9:BB:1C:7C:DB:B2:02:CA:96:E9:6B:D2:3F:ED:EA:06
            X509v3 Authority Key Identifier:
                keyid:55:D5:F2:96:F9:29:E8:F8:30:C6:A2:7F:8C:95:7F:16:4C:96:FE:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/c7929647aaa93ef3a9ad64150ba03871a5c9ff53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.245.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:cb:d4:c9:84:70:2e:f7:20:d5:75:8f:c0:e0:69:9b:81:50:
         f1:ed:f3:00:49:ff:c4:e5:77:16:1c:db:d1:f5:d7:8e:ba:9d:
         e2:8a:d8:10:80:f4:7e:d1:f6:2e:b0:5b:6f:8a:1d:64:c2:e8:
         ae:59:b6:13:01:b8:73:67:ad:31:26:6d:93:db:45:41:c8:84:
         91:97:12:e8:09:c1:de:32:b7:43:35:9c:f4:32:81:f7:77:89:
         ec:fa:d5:85:33:24:02:e1:de:28:d8:9a:35:15:f1:01:af:16:
         2f:a3:6f:8e:6d:01:81:f5:e4:80:0e:66:02:60:bd:e3:26:cb:
         29:f0:c0:d6:a6:be:54:45:f0:9a:f7:55:2f:00:39:87:12:39:
         b1:19:fa:30:eb:04:a9:3d:08:2e:ef:3b:a8:13:37:24:40:ba:
         c2:7e:6b:b2:7c:17:d3:d8:7b:34:26:e9:4c:ca:b4:f3:53:97:
         3a:65:67:47:cc:0d:05:a1:c9:39:1b:5d:b0:5c:2f:d7:ad:a2:
         f4:6b:d0:26:a4:17:42:2d:5f:ff:fd:f0:fe:be:a5:52:ca:4e:
         1d:f2:0b:7d:4d:76:50:62:4e:5f:b1:21:10:10:04:bf:44:12:
         7c:57:f8:2c:23:7e:b3:62:ad:58:d2:a1:77:23:5a:70:a9:21:
         1c:66:c4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:42 2024 by rpki-client on console-ams.rpki-client.org