Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/de35b8d798e682ce133df4f9470a932915b500c8.roa
File:                     de35b8d798e682ce133df4f9470a932915b500c8.roa (raw, json)
Hash identifier:          kSvu3Qle0vbxsACzas/8aq+PK0FdmSqvnonMVUGXcX0=
Subject key identifier:   87:E8:C4:FF:75:E9:3D:8C:AA:A2:D0:52:26:BB:40:F3:4C:F9:E1:F9
Certificate issuer:       /CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
Certificate serial:       2EB29F
Authority key identifier: FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/de35b8d798e682ce133df4f9470a932915b500c8.roa
Signing time:             Thu 07 Dec 2023 13:02:22 +0000
ROA not before:           Thu 07 Dec 2023 13:00:46 +0000
ROA not after:            Thu 07 Dec 2028 13:00:46 +0000
asID:                     263230
IP address blocks:        190.136.6.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3060383 (0x2eb29f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
        Validity
            Not Before: Dec  7 13:00:46 2023 GMT
            Not After : Dec  7 13:00:46 2028 GMT
        Subject: CN=de35b8d798e682ce133df4f9470a932915b500c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a9:29:13:61:a2:5f:56:96:6e:64:f9:0b:8f:
                    1b:22:9d:1a:05:8a:e2:b8:2c:f9:78:95:f3:41:70:
                    44:d6:71:b0:5b:07:e9:9a:6b:45:52:c6:cc:1e:e3:
                    4e:4b:2f:11:9c:4b:bc:48:50:02:23:ed:f2:59:f4:
                    f8:ff:3d:fa:96:d2:6a:59:a8:31:aa:b9:48:f7:e2:
                    f3:8a:fa:b1:9b:a5:46:26:74:7d:88:6c:5f:99:67:
                    b9:3e:1c:82:35:c7:51:26:6a:ba:3c:fd:fc:ba:58:
                    d0:a3:4c:fe:81:8c:85:62:57:21:29:b3:8b:2f:83:
                    f3:11:43:45:04:32:9c:34:8a:0e:ea:f7:09:b2:93:
                    2c:d1:b0:6e:1d:24:c3:0c:e1:13:ea:f7:1f:fb:23:
                    c9:9e:59:dd:0d:99:48:a3:67:57:9a:8d:e5:81:09:
                    0e:d5:4d:39:6a:cf:14:89:dd:ad:e5:3a:30:b6:00:
                    44:d4:7e:ab:7f:d6:34:5a:1a:9f:96:b6:5e:4f:4b:
                    37:dc:dd:14:3e:5e:38:5e:cd:f1:13:74:37:5e:31:
                    66:cb:48:74:c7:e7:88:e6:ab:d7:0c:18:01:c7:e2:
                    db:d7:83:8a:28:ab:98:41:cb:0a:2d:d9:fc:bd:57:
                    46:d2:dc:12:f5:64:40:90:f8:bf:c5:36:12:38:7a:
                    ab:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E8:C4:FF:75:E9:3D:8C:AA:A2:D0:52:26:BB:40:F3:4C:F9:E1:F9
            X509v3 Authority Key Identifier:
                keyid:FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/de35b8d798e682ce133df4f9470a932915b500c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c974409d0c2a70c921dd685e863e9f00cb1e262a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.136.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:43:45:de:95:60:0b:39:83:59:6f:f2:8a:c5:8a:23:02:bf:
         dc:97:ac:30:b2:45:aa:67:fd:e9:91:d4:da:0d:e5:2a:6a:dc:
         50:8e:f7:d1:bf:e9:e1:52:48:73:bb:8b:f6:be:4a:f4:c2:4a:
         e4:54:f4:fd:4f:20:ad:46:0d:a2:34:ee:6a:f0:21:00:09:33:
         eb:53:73:e5:f6:e6:54:e4:3e:81:d0:87:ad:84:3a:45:90:94:
         7d:e1:38:9b:02:cf:03:4c:1c:1a:bd:9f:54:61:7b:de:f8:e0:
         9a:bb:3d:37:40:d3:4d:eb:39:de:1c:21:66:51:bf:3d:b8:8a:
         c5:6c:95:37:6e:79:83:33:56:65:bf:00:21:e9:6d:16:5c:d4:
         dd:b2:c6:74:22:73:4f:f3:b8:c1:cc:ad:05:87:11:3a:d8:a4:
         4f:ce:31:b7:ca:53:89:48:75:08:e0:05:24:06:9a:ee:47:e9:
         81:54:cf:54:2a:6d:01:86:94:62:dd:99:ff:e6:51:28:39:5a:
         83:f7:60:5a:87:42:5d:c5:22:5e:ea:18:bd:c5:c4:89:96:7c:
         9f:71:e1:d0:ac:3d:67:fa:cc:14:20:8f:a3:fe:e2:54:88:59:
         40:e0:d8:fe:9e:84:0f:54:d4:5b:7c:fd:86:98:b3:c7:bd:ab:
         b2:bd:b1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org