Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/2d0ebc580adf71e85e2180905c5d03c7a2e3c4fc.roa
File:                     2d0ebc580adf71e85e2180905c5d03c7a2e3c4fc.roa (raw, json)
Hash identifier:          vnUBJ00eNHg17WuFoiMuryfoF86Qifof+2Q7X6ybrvA=
Subject key identifier:   47:6C:0F:B6:B1:7D:D9:C4:95:BA:D7:8D:01:F5:7A:4C:90:97:BD:C4
Certificate issuer:       /CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
Certificate serial:       2E521A
Authority key identifier: FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/2d0ebc580adf71e85e2180905c5d03c7a2e3c4fc.roa
Signing time:             Thu 07 Dec 2023 13:01:09 +0000
ROA not before:           Thu 07 Dec 2023 13:00:46 +0000
ROA not after:            Thu 07 Dec 2028 13:00:46 +0000
asID:                     265809
IP address blocks:        190.228.32.0/24 maxlen: 24
                          190.228.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3035674 (0x2e521a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
        Validity
            Not Before: Dec  7 13:00:46 2023 GMT
            Not After : Dec  7 13:00:46 2028 GMT
        Subject: CN=2d0ebc580adf71e85e2180905c5d03c7a2e3c4fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ea:b8:63:14:e8:6c:70:ab:a4:5a:b5:da:84:
                    fb:4b:58:f2:39:b8:94:b1:8d:a7:54:61:3c:08:31:
                    86:38:8b:76:b3:78:f7:18:0d:2c:2e:93:6c:d7:aa:
                    35:83:f4:14:0d:d7:24:8f:65:d8:ed:74:c8:cc:77:
                    de:d0:ac:4a:d8:79:6c:d9:36:b7:fb:f9:d8:73:6a:
                    70:94:28:b2:77:51:df:21:52:45:c4:23:23:63:7b:
                    05:c9:c9:b0:e7:24:e6:5e:53:ce:fc:c2:0b:21:c2:
                    d7:74:fe:67:b7:52:f5:9b:95:28:92:42:54:45:19:
                    99:d7:1b:52:64:3b:e5:69:01:4c:1e:03:17:eb:d9:
                    50:c1:ab:58:84:90:7c:c8:79:6a:e2:04:9d:a7:e0:
                    65:5c:b5:82:20:e8:66:ab:89:a1:45:12:60:66:a3:
                    22:56:1d:a6:25:15:a8:67:da:10:73:e7:d9:18:ff:
                    d0:51:f3:9c:5c:b0:88:3c:27:f1:6b:8d:79:6e:1c:
                    8b:ab:89:97:89:f0:a6:6b:27:dc:31:96:51:ad:b2:
                    15:6e:3e:56:58:b9:65:8f:68:ac:02:14:de:d8:af:
                    76:fd:4d:a6:f5:4f:8e:fc:6b:5b:ff:89:77:7d:8b:
                    26:fa:44:cd:47:29:f3:65:32:58:34:1e:fc:3e:7e:
                    66:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:6C:0F:B6:B1:7D:D9:C4:95:BA:D7:8D:01:F5:7A:4C:90:97:BD:C4
            X509v3 Authority Key Identifier:
                keyid:FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/2d0ebc580adf71e85e2180905c5d03c7a2e3c4fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c974409d0c2a70c921dd685e863e9f00cb1e262a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.228.32.0/24
                  190.228.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:f9:34:18:e3:45:43:52:a0:11:d5:37:45:c4:ed:1e:65:08:
         c5:d0:1f:39:7f:16:b3:ed:82:a5:d1:ac:91:93:b4:c6:07:4f:
         34:73:e5:00:8e:a0:83:d5:a4:6d:c7:94:c6:a9:cd:a6:24:b4:
         c8:d4:4e:f0:3b:d1:f9:71:f6:0c:8f:ac:5f:46:0a:3d:e9:eb:
         07:ea:8d:cf:09:22:cd:87:1f:90:e7:79:af:cb:c7:a9:82:c4:
         a6:8f:b2:1a:3d:db:8b:c0:06:cb:cf:eb:25:af:dd:08:c1:53:
         e4:34:1e:cb:89:0d:18:bd:ad:1f:89:4f:69:49:df:fa:bd:9a:
         9a:14:d7:3e:fe:9a:39:91:20:2c:04:75:61:a3:1b:29:81:8a:
         29:df:24:e9:26:49:04:0f:c7:2c:37:79:97:ef:a6:57:ef:7d:
         72:c0:03:f8:7a:39:6c:b6:dc:54:74:05:50:f4:4b:6c:e2:70:
         23:9e:c3:f7:70:24:56:31:db:6e:66:b6:ac:56:de:34:34:17:
         ec:1e:c2:e0:69:1d:9b:a8:bb:19:4e:88:e7:09:f6:01:98:f8:
         c2:17:29:5d:25:9e:6d:fb:ee:9b:4f:cc:e2:9e:e3:11:72:2d:
         83:d4:41:be:d0:a5:53:93:29:51:74:71:9a:ee:fc:54:8e:12:
         62:47:c4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org