Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/c95ff1025a99d8c5566565e4056becf82ec31b35.roa
File:                     c95ff1025a99d8c5566565e4056becf82ec31b35.roa (raw, json)
Hash identifier:          BdL6w/94b9BXedKnwrfiiuD6roc8N8ScEjpVDObg9Os=
Subject key identifier:   98:84:10:E0:5E:4F:60:9F:DE:E4:BE:BC:1A:09:B7:22:87:D4:7F:5E
Certificate issuer:       /CN=7c0f314c1d3ae8c8fbd69f9c3163397243f8766e
Certificate serial:       2A666E
Authority key identifier: E7:0F:90:71:1A:2B:71:90:DF:5A:AD:73:41:16:3D:FA:E1:58:2C:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7c0f314c1d3ae8c8fbd69f9c3163397243f8766e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/c95ff1025a99d8c5566565e4056becf82ec31b35.roa
Signing time:             Thu 18 Jan 2024 14:39:49 +0000
ROA not before:           Thu 18 Jan 2024 14:39:31 +0000
ROA not after:            Thu 18 Jan 2029 14:39:31 +0000
asID:                     28002
IP address blocks:        190.112.52.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2778734 (0x2a666e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c0f314c1d3ae8c8fbd69f9c3163397243f8766e
        Validity
            Not Before: Jan 18 14:39:31 2024 GMT
            Not After : Jan 18 14:39:31 2029 GMT
        Subject: CN=c95ff1025a99d8c5566565e4056becf82ec31b35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4f:e0:02:e3:af:57:47:b9:10:bd:a9:d6:ae:
                    87:af:9d:59:39:db:14:39:e5:a8:70:2c:07:b9:21:
                    cb:25:ff:58:6e:f1:e1:19:58:96:3c:d9:e2:b6:ff:
                    d0:99:fd:e0:df:41:a8:44:69:98:36:7f:ce:73:91:
                    c9:91:81:1d:33:f6:12:d6:e0:e8:d1:b1:01:6f:7b:
                    39:5f:fd:c9:a9:d3:4b:ac:ec:ed:14:f8:e2:4e:1a:
                    74:5d:65:47:6a:5e:2b:41:fb:27:03:51:86:66:f1:
                    ae:16:9b:24:d2:02:16:bb:9e:d1:95:d4:e1:e1:62:
                    09:62:31:0d:13:17:80:12:8c:98:f1:a5:3c:6e:a3:
                    45:a6:00:8a:ab:92:c5:a6:5d:27:4b:a1:00:6f:d5:
                    29:95:52:1f:a5:e2:48:04:0e:19:a6:3f:d0:47:fc:
                    e5:8f:43:c0:55:de:eb:43:1e:7e:41:c4:56:6a:5b:
                    7c:bc:93:8f:8b:47:66:d2:c4:c5:54:58:ec:5a:fc:
                    6b:5c:5e:4a:ec:dd:4c:b4:ec:75:d0:01:57:dc:97:
                    50:05:e7:e1:4e:46:ba:50:c0:42:cd:70:1d:4c:72:
                    a6:11:c2:30:cf:6b:52:b1:6c:dd:ae:0d:3b:e7:95:
                    84:ef:4f:df:7a:67:92:74:59:72:0a:32:b2:13:80:
                    17:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:84:10:E0:5E:4F:60:9F:DE:E4:BE:BC:1A:09:B7:22:87:D4:7F:5E
            X509v3 Authority Key Identifier:
                keyid:E7:0F:90:71:1A:2B:71:90:DF:5A:AD:73:41:16:3D:FA:E1:58:2C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7c0f314c1d3ae8c8fbd69f9c3163397243f8766e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/c95ff1025a99d8c5566565e4056becf82ec31b35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/7c0f314c1d3ae8c8fbd69f9c3163397243f8766e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:d0:6c:6c:b6:64:42:c9:a1:22:57:2f:86:53:31:cc:bd:0a:
         85:2a:98:d3:42:c5:92:2e:61:f5:e2:69:87:7e:d7:18:84:2b:
         93:fd:7a:4c:45:52:21:d1:a5:c5:30:76:99:94:65:c6:d3:3f:
         eb:35:d9:b5:c2:02:f9:d9:e6:ab:98:79:2d:af:31:c7:d2:a8:
         90:59:67:90:e4:14:1f:70:20:2c:e5:7f:71:e8:df:04:e2:d6:
         84:2a:88:49:9a:2b:59:c2:64:9d:f2:12:8d:9d:c6:cc:da:3c:
         06:e0:e3:ac:42:f9:f8:c6:e7:bd:ce:d8:ea:ea:24:4c:78:67:
         89:6f:fa:99:8d:dd:d7:8f:f4:5e:74:43:0b:bd:95:f8:90:a7:
         f5:db:2c:d6:7e:59:a0:a5:2f:00:ec:a6:ca:ff:19:f2:f4:9b:
         a3:6b:f1:70:d6:63:41:e3:b7:ad:a6:8f:15:fe:dd:97:11:23:
         81:b8:0e:3a:1e:11:5c:89:e7:7e:b6:42:bc:1d:d2:12:ac:67:
         a9:95:a8:a3:15:98:97:ee:78:24:cf:78:29:02:ec:7e:48:f3:
         c6:b6:66:36:46:28:df:7b:85:f9:2e:db:8f:14:00:f8:80:2d:
         ee:b8:e1:7a:b5:41:70:16:36:40:a5:f6:c1:08:5d:62:49:01:
         ef:16:c2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 16 02:55:53 2024 by rpki-client on console-fra.rpki-client.org