Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5edc2a21-ac93-4fa2-8f10-c930ff12dd48/e2c59688a8013fcec6515650405fa818776aa1a9.roa
File:                     e2c59688a8013fcec6515650405fa818776aa1a9.roa (raw, json)
Hash identifier:          pJZzuKkjdi815HS2ptN9unglZ3YdSumecxMn0iw7bGs=
Subject key identifier:   18:00:A0:09:C8:B0:0F:C2:F6:F6:03:55:B7:94:5B:7C:88:EE:85:13
Certificate issuer:       /CN=2a042d0a363b4c3bccd74c55cfacb5bd6667039c
Certificate serial:       1A32DF
Authority key identifier: 52:F7:96:D9:2D:94:EF:1A:55:6A:B9:98:6F:F8:0D:50:98:69:D8:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a042d0a363b4c3bccd74c55cfacb5bd6667039c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5edc2a21-ac93-4fa2-8f10-c930ff12dd48/e2c59688a8013fcec6515650405fa818776aa1a9.roa
Signing time:             Thu 28 Sep 2023 03:22:36 +0000
ROA not before:           Wed 27 Sep 2023 03:22:36 +0000
ROA not after:            Sun 28 Sep 2025 03:22:36 +0000
asID:                     262589
IP address blocks:        152.231.26.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1716959 (0x1a32df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a042d0a363b4c3bccd74c55cfacb5bd6667039c
        Validity
            Not Before: Sep 27 03:22:36 2023 GMT
            Not After : Sep 28 03:22:36 2025 GMT
        Subject: CN=e2c59688a8013fcec6515650405fa818776aa1a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7f:c4:42:5f:2b:27:43:ed:ce:d7:88:fd:4f:
                    b9:20:5f:20:c3:b0:ac:0a:e5:8d:20:2e:96:0a:d2:
                    7b:d0:76:69:83:4d:01:2b:5a:98:34:25:e6:4a:d1:
                    15:95:a3:87:e9:e7:81:ba:e7:91:27:a9:3c:bf:0e:
                    20:66:6d:86:d6:26:f4:54:1b:64:86:98:b3:42:7c:
                    0a:23:d1:c3:08:41:2c:98:6f:28:55:95:ad:c4:c1:
                    57:18:d2:13:89:a6:de:99:68:c8:66:76:1b:ac:72:
                    f3:8c:f0:15:cf:97:60:0b:5e:42:87:1b:2d:56:76:
                    21:be:f5:d5:3a:cd:fb:7f:b6:1f:17:dc:09:d8:fe:
                    b2:6c:71:d7:f5:8d:fa:2b:da:00:2f:29:1b:c0:23:
                    55:37:9c:05:04:ee:45:b1:32:4c:79:3f:09:8f:dd:
                    3d:71:b9:a4:39:be:50:20:36:8c:a2:b1:10:7e:d9:
                    38:45:0e:cf:38:fe:71:0f:29:be:44:2e:1d:c5:c4:
                    2c:91:31:7f:82:dc:38:90:6a:99:3f:22:ce:5f:8a:
                    da:51:d5:27:35:09:e0:f0:58:88:2a:eb:a2:65:f3:
                    be:4e:ce:17:1c:32:7c:b4:d7:79:eb:3c:c8:d9:0d:
                    e8:53:e6:cf:5a:78:d4:3f:19:5c:f0:6d:31:08:bb:
                    4c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:00:A0:09:C8:B0:0F:C2:F6:F6:03:55:B7:94:5B:7C:88:EE:85:13
            X509v3 Authority Key Identifier:
                keyid:52:F7:96:D9:2D:94:EF:1A:55:6A:B9:98:6F:F8:0D:50:98:69:D8:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a042d0a363b4c3bccd74c55cfacb5bd6667039c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5edc2a21-ac93-4fa2-8f10-c930ff12dd48/e2c59688a8013fcec6515650405fa818776aa1a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5edc2a21-ac93-4fa2-8f10-c930ff12dd48/2a042d0a363b4c3bccd74c55cfacb5bd6667039c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.231.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:bd:93:69:ab:f0:d4:d9:b2:76:53:8d:71:b9:5f:47:53:1a:
         b8:af:81:85:41:f6:69:a0:e7:15:cc:6a:bb:b3:fc:f6:d5:53:
         76:7c:9d:9e:e5:05:bf:c1:74:4f:67:96:c0:d0:7e:db:91:71:
         eb:c5:dd:f3:f9:b8:72:75:f0:87:e0:4c:ac:39:96:b1:9b:fd:
         d6:4b:c6:cb:0f:94:5e:90:cc:c8:50:45:30:e4:31:27:70:57:
         45:37:27:7b:10:ff:05:be:b0:2d:de:c2:f1:d4:df:5a:b7:63:
         6e:dd:d8:6c:10:1a:83:41:da:71:bd:46:2a:6b:8b:fb:5c:5f:
         f2:70:00:c0:de:69:6b:ae:4a:64:3f:c4:f6:31:cc:34:69:fc:
         44:6d:3b:2a:e0:38:87:42:f3:82:e6:f6:63:a3:4f:37:35:43:
         67:0f:7b:c2:e9:d0:71:dc:87:6d:e0:f5:7c:2e:2d:d2:1a:3c:
         16:b4:87:cd:48:22:10:34:af:b0:55:de:9b:44:b9:4b:cc:0f:
         c3:98:a7:d7:c8:d0:ef:3e:ac:ea:71:fe:41:90:cd:c9:7a:5a:
         9f:29:49:d7:94:1b:bb:0c:ab:ed:5c:23:7f:e9:55:b2:9e:57:
         7f:85:cb:11:f2:ee:b3:47:d4:7d:d0:68:ee:26:01:36:58:5b:
         bd:7e:7e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org