Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5706d5e7-09bb-4248-be01-2d9eebe436b2/90eb580a2379a9a4b65c67a2acb8f2b52207b2a2.roa
File:                     90eb580a2379a9a4b65c67a2acb8f2b52207b2a2.roa (raw, json)
Hash identifier:          lvOCD724We/FcJ8TSB+WMGM4S9fHsL3E/4AyXlT3G1o=
Subject key identifier:   C2:C7:7B:A3:D1:6C:49:84:CA:84:1C:E4:A6:88:1A:26:23:2C:33:28
Certificate issuer:       /CN=788f9306f5a8edd8721d2c4a293e3450783cdd56
Certificate serial:       0207E7
Authority key identifier: 17:82:C4:0B:CF:33:4C:FD:C1:6A:57:C8:57:77:30:17:63:D0:1F:05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/788f9306f5a8edd8721d2c4a293e3450783cdd56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5706d5e7-09bb-4248-be01-2d9eebe436b2/90eb580a2379a9a4b65c67a2acb8f2b52207b2a2.roa
Signing time:             Mon 03 Jul 2023 22:58:40 +0000
ROA not before:           Sun 02 Jul 2023 22:58:40 +0000
ROA not after:            Thu 03 Jul 2025 22:58:40 +0000
asID:                     27773
IP address blocks:        168.243.115.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133095 (0x207e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788f9306f5a8edd8721d2c4a293e3450783cdd56
        Validity
            Not Before: Jul  2 22:58:40 2023 GMT
            Not After : Jul  3 22:58:40 2025 GMT
        Subject: CN=90eb580a2379a9a4b65c67a2acb8f2b52207b2a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f8:29:da:41:9b:30:42:cf:14:5c:a5:71:bb:
                    6d:7e:11:5d:3f:81:01:0a:47:d7:85:dd:09:71:4b:
                    41:f3:de:b5:69:b8:22:15:87:23:47:de:74:38:66:
                    bb:ac:bf:d3:86:0b:f9:a9:f7:6f:f7:da:eb:a9:4d:
                    cd:46:96:ab:a7:5d:e1:d3:f1:2a:63:93:18:49:30:
                    7b:eb:d0:18:5a:ad:70:9a:23:81:37:3a:eb:8a:d7:
                    b5:fe:09:ae:c2:ca:91:5b:fd:5a:57:f7:16:8e:8c:
                    c9:4a:72:af:82:78:e1:db:f8:76:48:46:8e:c0:0f:
                    40:fd:2d:19:c4:52:e6:44:5f:f5:65:77:ff:18:4a:
                    7f:eb:74:16:25:f3:6e:ce:1e:2b:9b:9b:10:ca:9c:
                    2d:a1:4b:c3:6e:b2:1b:a9:fa:10:41:61:fd:90:fa:
                    10:a1:76:06:a5:31:8d:0b:4b:9f:2a:4b:d7:56:0b:
                    55:f8:a7:c4:21:00:d0:c1:89:18:c5:1e:b9:30:35:
                    76:91:f1:0b:54:92:21:d7:29:00:1a:a2:fb:64:75:
                    52:46:04:bf:f3:06:92:cc:c8:a3:92:a9:f6:a2:5c:
                    88:c2:1e:93:5f:e7:a7:c1:9b:cb:ad:57:74:57:72:
                    28:8e:f3:50:2b:96:b3:92:1d:74:06:1a:c6:16:91:
                    24:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C7:7B:A3:D1:6C:49:84:CA:84:1C:E4:A6:88:1A:26:23:2C:33:28
            X509v3 Authority Key Identifier:
                keyid:17:82:C4:0B:CF:33:4C:FD:C1:6A:57:C8:57:77:30:17:63:D0:1F:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/788f9306f5a8edd8721d2c4a293e3450783cdd56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5706d5e7-09bb-4248-be01-2d9eebe436b2/90eb580a2379a9a4b65c67a2acb8f2b52207b2a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5706d5e7-09bb-4248-be01-2d9eebe436b2/788f9306f5a8edd8721d2c4a293e3450783cdd56.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.243.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:67:a8:b8:20:23:2d:b8:78:4e:06:26:0c:60:24:c2:14:7c:
         8c:33:eb:13:bd:05:1b:44:4e:72:fb:3c:5e:17:74:00:31:83:
         07:aa:de:d9:5b:63:d4:0b:40:5f:2e:c8:2c:c2:b1:8b:6e:31:
         70:16:95:2e:9f:4d:e5:a6:14:68:f6:63:81:39:5b:df:5c:49:
         a3:e8:3a:fd:67:1a:db:1b:7d:1d:ce:e5:3d:7f:43:00:88:0c:
         fa:d0:1f:c0:6b:b7:56:de:4f:48:50:16:eb:1c:fc:65:11:6a:
         d4:e0:f7:f8:62:fe:a4:d9:df:4f:ed:0d:a7:9d:42:70:d4:d8:
         d9:3c:58:bd:17:cc:3f:fe:05:2a:23:57:bc:0d:7a:ae:db:b6:
         6f:7e:df:41:1e:b9:43:99:95:9a:99:bc:67:a9:62:6d:02:55:
         c3:64:be:a7:c0:28:81:83:28:83:37:9c:0d:ce:2f:b1:e1:d3:
         78:40:26:cc:84:ab:f6:69:e1:4d:a0:0a:71:54:6c:d4:6f:14:
         1b:34:44:36:90:62:7d:e5:e9:d0:e5:22:6c:74:c9:a7:f3:d7:
         c9:29:78:ab:8d:43:a5:ad:28:c9:61:0e:22:f2:b0:77:c5:bb:
         40:29:12:75:86:a3:00:bf:58:ec:c6:6b:65:71:d9:21:cb:ab:
         c8:28:63:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:35 2024 by rpki-client on console-ams.rpki-client.org