Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/afdc5edd7004e28848a81db4c190eb4ab09b4258.roa
File:                     afdc5edd7004e28848a81db4c190eb4ab09b4258.roa (raw, json)
Hash identifier:          d33ymg7p1yO/KfsW2qyMC0vsdz1jiXUKnk14TdKjwME=
Subject key identifier:   E7:C5:AD:1B:D5:B9:03:BD:F7:88:38:23:7C:A9:01:E0:68:4C:99:18
Certificate issuer:       /CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Certificate serial:       2DB8D9
Authority key identifier: C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/afdc5edd7004e28848a81db4c190eb4ab09b4258.roa
Signing time:             Thu 07 Dec 2023 12:42:24 +0000
ROA not before:           Thu 07 Dec 2023 12:41:57 +0000
ROA not after:            Thu 07 Dec 2028 12:41:57 +0000
asID:                     263198
IP address blocks:        190.225.160.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2996441 (0x2db8d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8263f0ea1b563289205ad0264530f8e6c30e569
        Validity
            Not Before: Dec  7 12:41:57 2023 GMT
            Not After : Dec  7 12:41:57 2028 GMT
        Subject: CN=afdc5edd7004e28848a81db4c190eb4ab09b4258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d1:ac:2a:46:2d:b6:be:71:0f:32:a9:6b:a7:
                    8e:2c:b3:6d:10:62:ac:1c:c9:5e:2f:22:3c:39:b2:
                    bc:cb:0f:20:f7:b8:2e:94:6d:64:f8:45:7c:90:76:
                    6c:b9:38:c5:a0:a3:87:d8:db:45:fb:bf:c2:15:0e:
                    6b:67:de:5a:af:ac:3d:27:99:77:d7:c8:f5:e8:d4:
                    ad:ea:c2:61:59:e2:a8:58:36:c5:ea:27:95:d9:6e:
                    8c:96:79:eb:c9:85:dd:30:0e:b3:bb:34:e4:f5:ac:
                    68:35:25:1a:62:e6:3c:d3:5a:ef:a6:0e:20:88:ab:
                    77:0d:10:e3:16:48:4a:ff:68:0b:5b:5a:92:cf:b3:
                    0c:5f:e2:5e:99:72:06:2f:6e:fd:a7:0c:33:7b:e1:
                    97:41:49:af:a0:a4:51:2b:c0:1e:88:92:f0:8f:69:
                    61:6f:db:42:7a:11:d9:85:30:41:77:82:2b:0c:3a:
                    13:95:30:98:be:30:dd:d9:f3:ad:44:f5:22:1b:0f:
                    5c:d5:0e:ca:9f:76:bb:4c:ad:a1:2e:04:28:e9:26:
                    54:b3:d5:6b:ae:dd:27:18:21:6c:11:68:fa:fc:9e:
                    8c:26:45:30:6b:e1:8b:da:d7:c6:00:4c:2a:fb:df:
                    76:42:7e:ce:fc:ee:71:2f:9d:4b:17:db:2d:b1:9c:
                    1c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C5:AD:1B:D5:B9:03:BD:F7:88:38:23:7C:A9:01:E0:68:4C:99:18
            X509v3 Authority Key Identifier:
                keyid:C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/afdc5edd7004e28848a81db4c190eb4ab09b4258.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f8263f0ea1b563289205ad0264530f8e6c30e569.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.225.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:26:72:8e:e2:21:11:8c:38:f6:57:1a:fc:1f:42:41:d7:8b:
         4f:86:85:cb:fc:8b:54:00:fa:29:4b:bd:24:a0:59:65:aa:25:
         ef:9b:f7:8c:d0:85:88:26:19:8b:db:c8:52:c1:6e:2b:21:85:
         27:53:9c:3c:cf:a8:87:bb:e2:11:0c:68:10:24:8b:d9:91:64:
         65:26:af:30:30:c0:e0:19:91:69:45:ef:f8:4e:f2:d2:e6:e8:
         6d:cc:05:b7:00:8d:a1:ea:56:7b:ab:4a:93:32:d1:4f:8e:43:
         da:35:61:6b:6d:1c:e8:0b:21:5d:fd:6e:82:71:48:0c:78:ed:
         dc:ac:d7:f2:88:bb:58:16:64:d1:73:3a:83:30:2a:9c:fa:aa:
         12:f1:c6:23:cf:78:fb:15:5f:1f:4c:ce:06:c9:0a:9c:53:f8:
         3b:17:5e:6c:41:cc:d0:5d:b2:74:20:d0:a2:d1:b0:d0:c3:4e:
         92:84:0f:db:56:98:4b:82:fe:61:f7:a8:d9:49:eb:cc:e3:7d:
         23:91:a0:ad:55:9d:eb:ad:79:37:9d:d3:b4:84:6a:4a:0a:00:
         32:a1:b3:d1:e7:30:aa:eb:60:c2:ae:83:1b:06:77:61:a3:21:
         a5:b3:c1:ba:1b:86:fd:a0:ad:96:ba:47:49:78:6e:ea:68:0d:
         26:1b:91:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:43 2024 by rpki-client on console-fra.rpki-client.org