Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5c76965e-10ba-488e-b1dc-33af9acf5af9/d44e948b4733caf3ef04a17226108b9e13625969.roa
File:                     d44e948b4733caf3ef04a17226108b9e13625969.roa (raw, json)
Hash identifier:          GvJUzvoasd8UbQqsQZCR0uOZkEZFw3OJgvcwfIoUoAk=
Subject key identifier:   F7:26:88:8C:B7:5C:71:22:87:55:59:39:AC:64:06:C4:88:E3:98:AC
Certificate issuer:       /CN=917ec8d4d5052be9ec6516ff2f860e64e1df30d4
Certificate serial:       2354B0
Authority key identifier: 9F:9D:A4:1D:AD:F7:91:8D:CE:7A:C9:A7:17:50:87:7F:C6:BD:43:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/917ec8d4d5052be9ec6516ff2f860e64e1df30d4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5c76965e-10ba-488e-b1dc-33af9acf5af9/d44e948b4733caf3ef04a17226108b9e13625969.roa
Signing time:             Thu 24 Aug 2023 15:08:30 +0000
ROA not before:           Wed 23 Aug 2023 15:08:30 +0000
ROA not after:            Sun 24 Aug 2025 15:08:30 +0000
asID:                     265792
IP address blocks:        192.141.180.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2315440 (0x2354b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=917ec8d4d5052be9ec6516ff2f860e64e1df30d4
        Validity
            Not Before: Aug 23 15:08:30 2023 GMT
            Not After : Aug 24 15:08:30 2025 GMT
        Subject: CN=d44e948b4733caf3ef04a17226108b9e13625969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d4:ee:d6:fa:4b:b6:1c:ef:62:50:ed:77:49:
                    38:c3:60:11:0d:01:40:40:cd:24:25:79:e9:02:ab:
                    fb:f9:e1:50:74:39:3f:16:dc:45:15:55:4f:a6:02:
                    12:fc:73:7e:8b:32:85:78:68:51:b3:33:fa:0f:4f:
                    e7:98:c6:fa:77:43:fd:b0:8d:56:de:4f:1b:b1:d1:
                    f3:22:9c:96:5f:54:e8:5b:c1:d5:fa:5d:54:55:ce:
                    9b:cd:f0:4d:b1:ae:e7:d1:61:ff:38:30:56:65:f6:
                    ea:ae:71:b1:0a:b3:c3:bc:c9:ba:4e:f8:f0:c3:4d:
                    d0:e5:ff:17:b0:79:cf:c9:3f:3c:ca:3e:20:43:81:
                    73:49:c2:ee:80:c4:90:75:ae:3b:98:9a:e0:e1:dd:
                    d8:0f:cc:b0:7d:fd:69:7d:9b:fa:d1:86:7d:11:ab:
                    e4:39:b8:2d:7c:27:d8:6e:4e:e8:06:28:23:a4:ab:
                    c1:9e:71:d2:10:15:4b:04:8a:64:6a:95:c2:e8:ef:
                    3b:2f:86:e1:b4:9c:f5:a3:2a:28:de:42:6e:7a:82:
                    d2:5e:0a:79:ce:15:c2:66:27:a7:b6:aa:84:1d:af:
                    c2:9d:2a:48:1e:e6:e7:6e:af:f6:16:aa:8f:79:eb:
                    7f:da:bd:bb:d1:33:da:6b:0f:d7:1b:09:d0:74:6e:
                    6f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:26:88:8C:B7:5C:71:22:87:55:59:39:AC:64:06:C4:88:E3:98:AC
            X509v3 Authority Key Identifier:
                keyid:9F:9D:A4:1D:AD:F7:91:8D:CE:7A:C9:A7:17:50:87:7F:C6:BD:43:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/917ec8d4d5052be9ec6516ff2f860e64e1df30d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5c76965e-10ba-488e-b1dc-33af9acf5af9/d44e948b4733caf3ef04a17226108b9e13625969.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5c76965e-10ba-488e-b1dc-33af9acf5af9/917ec8d4d5052be9ec6516ff2f860e64e1df30d4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:49:a7:b2:a6:10:a6:4e:0d:df:0f:e1:e3:55:85:eb:00:42:
         61:84:e5:80:34:56:4c:6d:42:69:12:59:3f:7f:de:d5:69:4f:
         bd:53:98:c6:3b:7d:8e:18:d7:03:a8:ef:37:f4:d4:ca:ff:c6:
         5c:cc:9a:84:29:82:1b:97:b8:0a:ee:c9:b2:47:c7:77:11:77:
         c2:29:a6:71:b0:8a:98:63:b3:f4:5f:f0:dc:98:01:98:5b:e0:
         16:00:fe:89:85:a5:f5:b1:d8:88:79:ae:3e:42:49:6c:15:c4:
         cf:5b:4c:e3:0b:2a:25:36:e1:11:8d:9c:ce:98:41:be:56:94:
         37:6f:08:ff:78:68:cf:9c:9c:b7:08:d1:d1:23:14:61:00:30:
         00:be:b8:2f:6e:39:86:c1:f5:4a:80:62:02:8a:dd:50:81:b1:
         d4:41:1b:7a:ea:c2:d0:e7:f7:fe:51:8f:f3:41:0f:90:7e:44:
         4f:22:f7:ce:fd:34:f9:f5:89:7b:69:61:d1:07:62:b6:0f:06:
         97:70:0f:2f:d4:08:4f:d1:2d:32:6b:e0:df:21:f6:db:bf:bb:
         f9:33:5e:15:c7:b9:38:59:9b:c5:fb:eb:e7:15:fa:d5:10:33:
         04:a1:f7:48:fc:00:7a:b9:11:45:31:1e:8a:12:0e:96:19:a9:
         f4:49:49:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:20 2024 by rpki-client on console-fra.rpki-client.org