Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/fdc7df575008f06c8999c556791ece035021e322.roa
File:                     fdc7df575008f06c8999c556791ece035021e322.roa (raw, json)
Hash identifier:          NYCn1nkir1Uf9897xucOCGAqsWSL8l21vMf9hKRfZvg=
Subject key identifier:   37:2B:1C:ED:C0:8C:89:9E:14:1D:A8:69:2F:B2:70:18:49:3B:91:6E
Certificate issuer:       /CN=b29e0207ef6228f7f5d5995ae3679dc81aaf3156
Certificate serial:       08303D
Authority key identifier: 9E:8F:64:B0:67:3E:F1:A0:8C:1E:A8:D8:8A:49:CA:D4:3E:8F:C3:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b29e0207ef6228f7f5d5995ae3679dc81aaf3156.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/fdc7df575008f06c8999c556791ece035021e322.roa
Signing time:             Tue 27 Feb 2024 00:40:52 +0000
ROA not before:           Tue 27 Feb 2024 00:40:50 +0000
ROA not after:            Tue 27 Feb 2029 00:40:50 +0000
asID:                     6503
IP address blocks:        189.208.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 536637 (0x8303d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b29e0207ef6228f7f5d5995ae3679dc81aaf3156
        Validity
            Not Before: Feb 27 00:40:50 2024 GMT
            Not After : Feb 27 00:40:50 2029 GMT
        Subject: CN=fdc7df575008f06c8999c556791ece035021e322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d4:7b:f4:4d:00:ea:77:5f:a5:02:5c:10:57:
                    d6:76:49:40:8e:1d:d8:c2:ad:70:ad:6f:e3:ae:8a:
                    51:35:5a:57:79:ab:ce:a7:58:07:a1:36:6d:eb:df:
                    77:39:71:ae:f0:28:93:e5:e8:49:66:f3:c0:6e:46:
                    5c:87:ab:65:fd:70:c8:ef:40:cb:6f:d6:a9:e3:be:
                    e3:2f:d0:66:fc:07:fa:e2:85:24:c4:f4:b7:38:81:
                    36:71:30:0d:c2:5f:bb:c4:6e:72:70:e7:6c:2b:81:
                    d3:3d:f4:5c:8e:e8:d0:88:fc:8e:3f:91:af:2e:07:
                    3c:dc:0e:a0:52:90:0e:6d:c0:bc:55:5c:dd:d0:bf:
                    32:48:b1:8f:3c:16:0e:b3:35:f9:b7:88:da:1a:84:
                    0e:e3:0c:44:ed:42:e6:da:b6:2e:07:74:a4:75:8b:
                    1b:3f:72:84:39:ee:7e:09:cc:6f:b4:97:d3:a0:ec:
                    52:8a:c9:c2:45:c0:0a:0f:43:f6:bb:cc:96:b3:56:
                    b6:d8:d5:4f:85:d1:85:9a:98:0f:bd:34:66:d0:f2:
                    45:a3:92:b5:5b:88:55:53:d0:39:6d:07:c9:b1:4f:
                    3b:f2:4f:3a:02:5f:51:c8:f9:06:76:df:b8:54:5e:
                    3c:f9:b2:74:45:e8:28:e3:52:fa:f8:81:50:2e:aa:
                    b0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:2B:1C:ED:C0:8C:89:9E:14:1D:A8:69:2F:B2:70:18:49:3B:91:6E
            X509v3 Authority Key Identifier:
                keyid:9E:8F:64:B0:67:3E:F1:A0:8C:1E:A8:D8:8A:49:CA:D4:3E:8F:C3:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b29e0207ef6228f7f5d5995ae3679dc81aaf3156.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/fdc7df575008f06c8999c556791ece035021e322.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/b29e0207ef6228f7f5d5995ae3679dc81aaf3156.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.208.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5b:05:35:79:56:9a:ee:dc:4d:44:d5:f4:08:03:a7:00:08:a6:
         d2:21:36:71:7f:bc:e5:ac:37:63:fb:cb:b4:24:25:6a:13:b6:
         7a:90:ce:18:59:7c:82:50:49:75:83:57:92:11:73:4b:9d:61:
         99:2e:2c:61:c2:7a:a5:b6:1d:31:da:60:72:d0:d6:e5:55:6b:
         ad:60:28:f6:f4:e5:84:95:21:e3:9e:15:77:c5:c5:30:35:20:
         ac:64:37:5e:78:5a:01:81:a6:4d:c7:db:70:2e:93:5f:a6:a8:
         5e:0f:c7:13:33:31:a9:e8:d6:4f:05:bb:f8:1a:a7:46:24:d0:
         b3:55:3f:16:de:a7:1e:69:1f:ca:a6:b4:8f:a7:c1:2a:34:31:
         28:5c:6f:8b:05:3f:cd:00:32:0d:73:da:15:c0:f3:7e:37:ea:
         59:b2:77:d1:98:77:a4:a9:d5:04:90:36:66:31:d3:9c:b9:55:
         7a:b8:37:8c:84:4b:3d:95:a3:a2:26:b0:7a:f8:b4:d8:60:d3:
         0a:2f:f8:da:44:80:78:aa:20:6e:a1:cc:e3:d9:01:46:f4:fe:
         f0:20:43:6f:d9:6a:74:e0:56:c8:54:6a:96:6a:67:f7:f0:3a:
         0b:b9:db:8e:ee:a3:ef:b9:99:35:a4:0b:bc:36:69:74:58:78:
         2f:2f:2b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 15 16:00:18 2024 by rpki-client on console-fra.rpki-client.org