Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/bf943ac3ce8559ff7ce9c0689cbb02c54d21f115.roa
File:                     bf943ac3ce8559ff7ce9c0689cbb02c54d21f115.roa (raw, json)
Hash identifier:          z0LnATfvXoqN4oYVzusYPmv4Hn3dvn/w14jtQpnFH2A=
Subject key identifier:   1E:34:5C:DD:41:22:44:83:DB:D9:5F:16:B9:88:9A:32:4F:CE:E8:FD
Certificate issuer:       /CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Certificate serial:       2DFC2E
Authority key identifier: C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/bf943ac3ce8559ff7ce9c0689cbb02c54d21f115.roa
Signing time:             Thu 07 Dec 2023 12:43:13 +0000
ROA not before:           Thu 07 Dec 2023 12:41:57 +0000
ROA not after:            Thu 07 Dec 2028 12:41:57 +0000
asID:                     52271
IP address blocks:        190.137.142.0/24 maxlen: 24
                          190.136.15.0/24 maxlen: 24
                          190.136.16.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3013678 (0x2dfc2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8263f0ea1b563289205ad0264530f8e6c30e569
        Validity
            Not Before: Dec  7 12:41:57 2023 GMT
            Not After : Dec  7 12:41:57 2028 GMT
        Subject: CN=bf943ac3ce8559ff7ce9c0689cbb02c54d21f115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d5:9c:19:12:f0:fc:03:16:1d:13:f6:05:35:
                    e3:f2:aa:4a:2e:ee:b5:d9:eb:84:58:da:b4:aa:49:
                    86:57:74:7c:54:22:b8:d6:18:ed:36:56:b6:85:23:
                    e1:90:86:b4:f2:ff:01:77:ff:8f:cf:e0:97:2b:01:
                    68:78:87:e9:ab:ef:40:18:5f:d6:46:00:70:aa:31:
                    00:c3:0a:96:6e:cc:e2:97:4c:6b:e4:06:a8:f9:33:
                    b7:0d:d6:7f:b2:db:ed:9c:0b:2d:d5:64:55:2e:d6:
                    d0:16:6a:87:60:23:72:87:26:a5:6c:38:a2:ce:04:
                    44:2a:d6:76:a3:9f:ac:47:37:b0:30:a4:9f:e9:1f:
                    c2:5e:d4:4e:5a:7a:35:fb:8e:c6:0a:c3:7f:92:f8:
                    bc:e1:00:da:5e:fa:c6:1b:79:99:e2:d9:a7:d3:93:
                    c9:55:c7:2b:5e:22:3d:5c:d5:64:1d:5c:07:de:b7:
                    f6:ec:85:2b:1f:61:2c:0e:2c:b7:36:d6:76:ae:ba:
                    43:b9:66:51:25:a6:7b:66:9d:3c:e2:7c:fd:1a:7d:
                    f1:e9:a5:34:48:1b:b2:27:90:57:c5:af:ec:11:87:
                    54:dc:e9:26:7c:b9:a3:1c:c2:6d:c7:04:18:c6:c5:
                    8f:8a:cc:a7:eb:d1:a9:b9:38:ac:e1:33:73:8d:98:
                    a5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:34:5C:DD:41:22:44:83:DB:D9:5F:16:B9:88:9A:32:4F:CE:E8:FD
            X509v3 Authority Key Identifier:
                keyid:C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/bf943ac3ce8559ff7ce9c0689cbb02c54d21f115.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f8263f0ea1b563289205ad0264530f8e6c30e569.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.136.15.0-190.136.16.255
                  190.137.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:2d:3c:58:a5:a4:f1:ec:c0:ea:f5:20:60:5e:1b:e1:64:2e:
         1b:20:4f:c5:37:1c:0f:b8:af:c4:f5:dc:f5:9f:17:9a:20:38:
         f8:34:58:a7:f4:d7:0d:a5:15:13:d8:2e:4d:6a:ce:1b:a6:61:
         cb:46:6f:88:59:1e:e0:77:04:b5:f1:b7:2f:0a:c7:79:25:b8:
         1b:d7:de:06:80:8b:18:95:e3:23:fb:d1:4a:44:e9:a6:9d:c6:
         98:70:c1:fb:26:43:e5:5e:5b:ba:67:51:b8:00:97:c6:a5:fb:
         79:51:9d:d7:0d:2f:e6:50:56:04:9e:21:0f:cd:6d:ce:b5:0e:
         f3:5c:0a:88:38:fd:f2:73:53:57:25:65:e2:57:ea:66:e6:54:
         9b:a0:43:7e:3b:78:00:fa:57:97:68:d0:b3:26:1e:c3:61:0f:
         3e:c8:6e:40:58:c1:b7:d2:2f:0a:a2:71:d1:81:83:4a:52:f4:
         9e:6e:7f:16:19:18:ce:51:2f:60:17:3f:3f:00:11:fc:38:82:
         93:48:8f:ae:19:cb:24:4d:26:56:9c:3d:78:55:8f:05:0a:86:
         5a:54:9e:a5:4a:8d:80:2c:18:8b:d5:fa:63:8d:6a:8b:8b:4a:
         da:e7:8c:64:9a:46:9d:7e:2e:37:71:d9:fa:2c:90:03:e0:f5:
         82:04:6b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:43 2024 by rpki-client on console-fra.rpki-client.org