Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/ff274b5537e9cb29035a43f0c29b6fb832d0ba13.roa
File:                     ff274b5537e9cb29035a43f0c29b6fb832d0ba13.roa (raw, json)
Hash identifier:          I6oI6p5TIXVwl5hWDlShWaWstoqicKr9Gbj/dOA87Wk=
Subject key identifier:   88:25:08:CC:2E:EA:54:0C:52:C8:25:55:5C:30:80:F8:99:A5:72:B7
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       122328
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/ff274b5537e9cb29035a43f0c29b6fb832d0ba13.roa
Signing time:             Fri 16 Apr 2021 02:10:09 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     64099
IP address blocks:        190.228.169.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1188648 (0x122328)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=ff274b5537e9cb29035a43f0c29b6fb832d0ba13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:43:6f:a3:8a:21:1c:7f:d1:69:db:2a:5e:77:
                    02:05:6a:43:6f:b9:98:06:46:f7:28:88:ce:06:20:
                    29:66:cf:d0:91:1e:b8:96:44:f3:2a:75:d5:f1:81:
                    80:4a:37:5a:28:3d:86:4c:09:69:46:ad:99:f6:d6:
                    6e:8a:d9:ae:07:40:e5:83:ae:b7:51:b3:a5:14:2c:
                    4a:15:3b:eb:00:c5:2f:fc:36:87:7e:9b:ad:0f:61:
                    1c:2d:9c:2e:21:52:c1:ca:33:9b:8e:20:03:8c:1d:
                    17:76:2e:b9:bc:3f:6d:dd:b2:05:62:ff:d6:28:43:
                    70:20:82:2d:31:d2:fe:c6:d3:9f:2d:b8:c9:d3:7b:
                    b5:fe:22:eb:b1:82:fa:06:2b:bc:da:15:9b:7e:47:
                    20:78:44:3c:b6:a9:f1:6c:91:3b:b8:87:c0:7e:f5:
                    8d:b1:e2:83:5a:32:a3:25:6a:64:52:51:00:84:ee:
                    6f:58:37:ba:b7:5a:27:98:c6:c6:95:44:87:d7:61:
                    4d:52:8c:ce:1d:20:bf:28:aa:c3:ca:ea:9f:81:fd:
                    05:45:bf:b9:83:d2:fb:c8:07:77:55:67:df:46:6a:
                    59:62:60:67:51:05:0f:68:d0:cc:0a:eb:15:33:fe:
                    09:37:91:da:a2:af:e5:2d:eb:5e:71:3e:d7:f2:be:
                    65:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:25:08:CC:2E:EA:54:0C:52:C8:25:55:5C:30:80:F8:99:A5:72:B7
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/ff274b5537e9cb29035a43f0c29b6fb832d0ba13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.228.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:4c:61:e4:71:9f:31:a8:f3:88:37:0e:33:f0:e6:bf:7c:40:
         69:e5:7d:2c:2a:5f:cb:44:f5:78:61:44:1e:6e:42:4f:d2:54:
         16:cb:d3:e8:90:a0:77:15:30:e3:4c:47:e0:8f:99:b2:ce:63:
         47:b1:6b:b8:18:4a:f0:15:6f:91:87:fe:89:07:c2:35:28:69:
         fa:1a:60:36:3b:11:33:91:fb:90:6d:2d:48:e8:98:da:27:e2:
         7d:8c:2f:f3:32:e5:3a:df:b3:c1:b4:2e:f1:b3:73:b7:f6:36:
         12:8f:e1:f5:c8:8b:e5:ef:a0:27:0b:45:50:76:2c:f9:6a:21:
         c3:5c:d8:81:9f:b6:c6:2f:1b:8c:00:21:03:74:5d:02:6c:c9:
         bb:f8:13:02:c4:a7:34:f6:1c:24:aa:67:a4:45:ae:f7:48:4e:
         ce:77:dc:1b:e2:9a:b3:1b:25:83:5e:a4:96:a6:11:db:9d:ef:
         a8:f9:6a:53:e1:84:b1:56:4e:3d:14:cb:2f:12:3a:29:db:dc:
         ae:1f:c7:b2:0f:f0:d5:13:b1:53:07:a3:5a:6d:1a:4d:22:60:
         01:59:5f:8c:bb:84:53:b9:c3:51:14:87:f0:71:5c:80:96:6a:
         ab:c2:e8:ee:7a:bb:ef:d3:b9:70:c1:82:63:31:b2:2b:41:1d:
         75:ab:36:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:43 2024 by rpki-client on console-fra.rpki-client.org