Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/ec6af87296031199e7b2166405cadc47b79b7f40.roa
File:                     ec6af87296031199e7b2166405cadc47b79b7f40.roa (raw, json)
Hash identifier:          zOnY/0mCdvafAzQw2CoibuuxrX9M+DGaeDtfdixFfiA=
Subject key identifier:   9D:77:91:D1:0D:45:DF:A5:F4:18:E7:CC:F4:B1:74:28:1A:96:B9:E5
Certificate issuer:       /CN=90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2
Certificate serial:       090DDE
Authority key identifier: 55:D5:F2:96:F9:29:E8:F8:30:C6:A2:7F:8C:95:7F:16:4C:96:FE:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/ec6af87296031199e7b2166405cadc47b79b7f40.roa
Signing time:             Fri 15 Mar 2024 12:47:26 +0000
ROA not before:           Fri 15 Mar 2024 12:47:22 +0000
ROA not after:            Thu 15 Mar 2029 12:47:22 +0000
asID:                     28509
IP address blocks:        148.243.99.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 593374 (0x90dde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2
        Validity
            Not Before: Mar 15 12:47:22 2024 GMT
            Not After : Mar 15 12:47:22 2029 GMT
        Subject: CN=ec6af87296031199e7b2166405cadc47b79b7f40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6c:1d:79:75:89:40:42:50:88:96:b5:0e:34:
                    e6:91:bd:c4:57:9c:ae:9d:a4:83:af:07:61:8d:4d:
                    34:e9:49:87:4b:15:42:5f:19:1e:8a:ae:bb:ff:fc:
                    07:86:36:dd:27:57:ce:79:aa:a4:e5:d7:c5:2b:2c:
                    c0:6d:3b:4e:f4:22:d9:94:1b:ee:6f:4b:fc:e7:c9:
                    c0:6e:d7:f3:27:fa:d2:99:4d:a1:8b:2e:23:b0:c3:
                    f2:18:a6:c2:7e:c1:be:2c:d7:0b:41:d8:b9:bd:e1:
                    e1:fe:64:24:44:af:4c:57:0f:ff:0d:8b:76:95:72:
                    66:d2:d8:44:eb:40:7f:27:3f:ce:cb:11:0f:1c:e9:
                    9b:0d:e4:25:fd:fb:5e:9b:08:7b:a6:1b:ae:bd:1e:
                    e0:59:66:24:83:f8:20:2f:b6:00:01:de:e5:f5:bb:
                    b8:1f:a8:8f:14:99:e2:9a:fe:ae:09:fb:e5:7c:e9:
                    62:d9:11:0f:ec:45:78:bd:bc:00:ba:d8:e6:4c:9d:
                    bc:9f:12:10:e4:72:19:df:73:5c:31:9b:a0:6c:01:
                    82:17:9a:b5:1d:31:3c:0a:b7:0e:e7:82:f2:48:32:
                    ae:95:63:90:04:2d:1a:f2:b3:07:ce:01:90:15:c8:
                    6e:e8:5d:4d:f7:cd:ee:94:b2:3a:ae:e4:a3:5c:f8:
                    fe:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:77:91:D1:0D:45:DF:A5:F4:18:E7:CC:F4:B1:74:28:1A:96:B9:E5
            X509v3 Authority Key Identifier:
                keyid:55:D5:F2:96:F9:29:E8:F8:30:C6:A2:7F:8C:95:7F:16:4C:96:FE:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/ec6af87296031199e7b2166405cadc47b79b7f40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.243.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:34:19:3c:92:92:d0:23:a8:0e:8b:db:1a:3e:b2:f9:1c:cf:
         27:ba:6c:ab:0b:b7:2b:a2:f3:58:1d:c8:7b:7d:44:b9:48:bb:
         29:74:e2:a8:d1:9d:de:08:ab:53:50:fd:7e:a2:c9:db:9c:c5:
         11:21:81:bd:70:f5:47:71:e1:59:ec:df:50:43:c8:b2:e2:13:
         f3:bb:fc:08:f1:03:c8:7f:9f:7c:9d:8e:52:31:85:f0:b9:82:
         d2:39:d0:47:ce:27:36:1c:8e:28:ba:a2:c9:20:c9:12:99:71:
         be:5d:23:f9:55:b4:40:96:23:57:1a:72:63:b0:d2:11:90:d1:
         a1:14:34:53:fb:23:60:38:cd:d0:5a:81:6d:96:66:6d:e6:86:
         fc:14:75:08:60:28:61:61:01:28:71:dc:e1:31:44:2e:87:09:
         78:13:76:6e:bf:85:c8:37:b7:9c:f3:73:ea:ca:20:c3:07:82:
         75:e6:17:9d:e7:00:d2:6a:09:c1:24:1d:fa:f5:9e:55:36:34:
         b2:97:e1:f0:8a:3f:25:b1:57:b2:0a:46:05:8f:c7:8b:17:c4:
         d3:7b:eb:56:9b:ab:0d:8f:ef:57:5a:d6:3f:d7:08:e4:fb:7b:
         1e:b3:9f:2d:48:08:98:74:39:b0:48:3f:b9:32:f9:4c:77:f5:
         93:b2:be:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:42 2024 by rpki-client on console-fra.rpki-client.org