Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f683d826b1b1aac572aa15809fce702d68d8d145.roa
File:                     f683d826b1b1aac572aa15809fce702d68d8d145.roa (raw, json)
Hash identifier:          E0jLpTcffUC39nlUWjQIGf5EZ98MIBbnlb7C7IulCtk=
Subject key identifier:   71:3F:39:57:3D:DF:AD:66:BD:16:C7:81:CD:A5:DC:43:7C:FA:30:21
Certificate issuer:       /CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Certificate serial:       2DEFE1
Authority key identifier: C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f683d826b1b1aac572aa15809fce702d68d8d145.roa
Signing time:             Thu 07 Dec 2023 12:43:00 +0000
ROA not before:           Thu 07 Dec 2023 12:41:57 +0000
ROA not after:            Thu 07 Dec 2028 12:41:57 +0000
asID:                     52323
IP address blocks:        190.225.164.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3010529 (0x2defe1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8263f0ea1b563289205ad0264530f8e6c30e569
        Validity
            Not Before: Dec  7 12:41:57 2023 GMT
            Not After : Dec  7 12:41:57 2028 GMT
        Subject: CN=f683d826b1b1aac572aa15809fce702d68d8d145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:76:34:c2:97:8f:63:39:dd:d2:41:8d:d0:4a:
                    11:1e:04:c4:e6:e6:92:4a:f7:15:90:4a:13:71:47:
                    e7:78:77:bf:c2:a9:0c:03:ad:06:33:18:71:2e:25:
                    e3:25:91:9c:d2:b1:41:82:52:eb:e2:01:d1:77:40:
                    1b:74:1d:88:59:f2:e6:4d:26:45:d7:08:4b:8d:31:
                    f2:12:3f:22:f6:87:57:65:91:08:7f:2a:ad:16:6e:
                    f8:df:4b:41:a6:80:51:de:b9:60:91:4e:a4:c3:19:
                    ee:b8:75:be:4e:d8:47:7a:c7:e6:84:46:f7:d0:41:
                    5c:2e:c5:8e:ab:fa:69:df:86:83:97:fd:ee:e5:7e:
                    44:53:b5:cc:4b:f2:e0:24:47:54:c9:d5:ad:47:af:
                    8d:fe:5f:ac:95:3e:63:ca:70:ef:9f:68:d8:24:fa:
                    8d:58:32:1c:40:b9:43:bb:0b:fb:ac:c7:0f:09:d5:
                    cc:1d:56:70:10:01:ff:54:41:ef:bf:11:2c:b4:a1:
                    fb:01:6e:29:ad:1e:91:42:0c:3e:24:e6:79:12:ae:
                    74:72:db:1e:09:b4:0c:56:90:2f:26:4c:73:6d:c9:
                    75:2e:ee:7d:cf:02:30:47:47:1b:7c:f9:7c:0c:a7:
                    a9:ad:fe:7a:7e:2c:c5:b9:58:b5:1e:b2:5d:24:38:
                    89:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:3F:39:57:3D:DF:AD:66:BD:16:C7:81:CD:A5:DC:43:7C:FA:30:21
            X509v3 Authority Key Identifier:
                keyid:C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f683d826b1b1aac572aa15809fce702d68d8d145.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f8263f0ea1b563289205ad0264530f8e6c30e569.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.225.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:e9:05:77:18:31:e1:60:22:f1:6c:ee:e1:a1:b9:67:61:9f:
         c3:7e:2e:f7:1c:80:79:38:03:a8:7d:d5:fa:a0:0c:a4:7e:54:
         0f:b5:a6:09:ff:3c:c0:4a:09:34:39:40:51:d2:0e:d3:0a:2d:
         cc:02:e9:8e:ca:ce:59:c1:dd:b3:bd:14:cf:ac:6a:8d:6a:c9:
         86:a7:b7:62:a9:58:77:4e:e5:67:9b:d5:76:2c:dc:2e:5e:9c:
         48:29:6b:f3:5a:43:24:74:23:5f:3c:da:88:aa:03:a2:b7:8d:
         4a:ba:fa:6e:9e:3b:c1:be:bf:9d:2c:dd:42:1e:60:bc:0d:12:
         8a:06:6c:36:cc:53:a7:2e:49:3e:42:a7:e3:3d:7b:8a:85:72:
         f6:9d:61:9e:bb:5e:21:0e:04:1b:57:6b:41:fd:71:c5:d4:8f:
         ee:40:49:ef:d1:a7:bf:90:7b:fd:4d:e9:e7:d5:99:be:8b:25:
         56:e6:86:8a:bd:3d:49:dd:75:7a:d5:3e:ef:b1:d9:d2:7b:f3:
         6c:eb:bb:71:bb:aa:0c:f7:20:5a:9f:b1:ba:99:e2:e7:c1:4f:
         dd:6f:47:10:30:de:8b:c7:f3:17:98:0f:64:40:d4:78:0c:5a:
         74:e5:bc:d5:86:91:d5:de:d2:9a:8f:24:5b:33:0a:e5:c3:28:
         53:17:fc:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:43 2024 by rpki-client on console-fra.rpki-client.org