Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/ee4864375f238f87088e22a331a66b9530c28510.roa
File:                     ee4864375f238f87088e22a331a66b9530c28510.roa (raw, json)
Hash identifier:          QoX7B7hLN6177Jm9ZUtzB6p0vCPGtZti0hHky+7ba+k=
Subject key identifier:   A6:0F:4D:A9:42:DF:4F:5F:70:1D:DC:0E:73:55:50:3B:B8:B4:61:5E
Certificate issuer:       /CN=90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2
Certificate serial:       0914EF
Authority key identifier: 55:D5:F2:96:F9:29:E8:F8:30:C6:A2:7F:8C:95:7F:16:4C:96:FE:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/ee4864375f238f87088e22a331a66b9530c28510.roa
Signing time:             Fri 15 Mar 2024 12:47:28 +0000
ROA not before:           Fri 15 Mar 2024 12:47:22 +0000
ROA not after:            Thu 15 Mar 2029 12:47:22 +0000
asID:                     22011
IP address blocks:        148.243.65.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 595183 (0x914ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2
        Validity
            Not Before: Mar 15 12:47:22 2024 GMT
            Not After : Mar 15 12:47:22 2029 GMT
        Subject: CN=ee4864375f238f87088e22a331a66b9530c28510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b0:95:4c:b4:9c:94:64:88:07:d4:ff:d2:c4:
                    96:d5:ef:7f:1a:92:4f:47:d2:7e:8d:ca:7d:61:28:
                    83:3d:fb:f8:44:15:5a:08:bf:81:b1:bc:43:6e:c4:
                    49:5c:92:68:e3:7f:d3:0f:02:3f:73:a2:35:3a:8c:
                    c0:39:30:d0:93:ab:d3:30:db:74:d5:14:9f:91:07:
                    2c:12:0a:bd:b8:4c:36:fc:7f:cd:ad:e6:cf:a2:14:
                    d1:4a:83:c1:84:b3:6d:2f:a8:34:7c:5d:c0:a7:13:
                    1a:7d:2f:fd:65:b3:a6:aa:1f:b8:f2:c2:bd:eb:13:
                    e6:17:c2:5d:5f:55:c5:69:6c:7a:04:cf:a8:e2:d7:
                    67:de:c1:29:62:7f:ad:c3:40:e3:93:e2:40:44:73:
                    8b:ff:29:76:a9:d8:a7:67:f3:f0:dd:34:45:ee:fd:
                    84:98:ac:a8:d1:e8:2d:f6:c5:d6:32:2d:6b:7f:72:
                    18:a3:86:58:d8:98:ca:13:81:1c:8c:7b:8b:97:2a:
                    fd:0d:85:9a:02:3e:77:60:1d:36:8b:58:e5:09:8e:
                    b6:45:3e:41:8e:fd:92:90:a4:26:1d:ce:f1:e2:c8:
                    c7:66:89:e8:27:fb:95:53:6d:9d:83:fa:d8:58:e5:
                    d3:0a:60:87:97:cb:89:88:15:ce:7c:14:87:8d:e1:
                    20:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:0F:4D:A9:42:DF:4F:5F:70:1D:DC:0E:73:55:50:3B:B8:B4:61:5E
            X509v3 Authority Key Identifier:
                keyid:55:D5:F2:96:F9:29:E8:F8:30:C6:A2:7F:8C:95:7F:16:4C:96:FE:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/ee4864375f238f87088e22a331a66b9530c28510.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.243.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:f6:13:7f:b4:79:18:e4:08:1f:8c:e6:f1:b0:76:ae:68:7a:
         1d:a5:89:c2:ac:cf:6f:a8:c4:b1:64:f3:6a:25:9a:de:d9:0c:
         cf:39:61:09:57:07:3b:ba:a4:5e:4e:9e:ce:66:36:81:4f:f0:
         59:ad:2c:00:52:26:3a:37:95:33:24:c0:e0:6b:54:49:cb:07:
         2a:ef:b6:ad:a8:cd:d8:be:90:70:16:b8:fe:d5:84:fb:8c:b0:
         b2:42:32:f2:54:62:45:e2:c0:cb:5c:25:4d:38:77:07:e7:10:
         f8:27:aa:aa:4d:2f:cf:73:c1:aa:ac:8e:13:18:15:99:dc:d4:
         63:59:6b:3d:76:ae:5c:b8:7d:e7:1d:76:7e:d8:af:3d:96:cc:
         88:ca:a3:a7:15:cd:42:86:e7:c3:cd:4a:40:ae:fc:95:b3:a0:
         8a:c7:24:16:a5:3b:6b:12:09:a4:16:71:8c:fd:97:32:d0:61:
         d7:5e:b9:49:23:55:57:8e:9d:d1:d1:a5:99:72:3d:aa:44:ab:
         fe:ca:c4:1e:04:6f:e0:78:ba:82:fe:cf:db:9e:da:52:c8:e3:
         51:c2:4c:f5:7a:b5:3a:33:90:fe:84:10:23:60:4c:74:11:a0:
         ec:2c:59:d8:18:70:3e:03:73:99:27:58:8a:89:76:5b:24:2c:
         3e:fe:8d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:33 2024 by rpki-client on console-ams.rpki-client.org