Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/0e44ddd421e586f81a6e45df96889b4bd38559bb.roa
File:                     0e44ddd421e586f81a6e45df96889b4bd38559bb.roa (raw, json)
Hash identifier:          HjvGCFk0FO5sS05ncLPpH/ylg1WczrYD3jPJNjr4LuA=
Subject key identifier:   A6:CF:E7:5D:8B:62:21:52:5D:33:12:04:8E:F1:A1:A2:0B:8B:5B:EF
Certificate issuer:       /CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
Certificate serial:       27B10C
Authority key identifier: CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/0e44ddd421e586f81a6e45df96889b4bd38559bb.roa
Signing time:             Fri 09 Feb 2024 17:48:20 +0000
ROA not before:           Fri 09 Feb 2024 17:48:20 +0000
ROA not after:            Mon 09 Feb 2026 17:48:20 +0000
asID:                     27910
IP address blocks:        190.242.184.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2601228 (0x27b10c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
        Validity
            Not Before: Feb  9 17:48:20 2024 GMT
            Not After : Feb  9 17:48:20 2026 GMT
        Subject: CN=0e44ddd421e586f81a6e45df96889b4bd38559bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:07:7e:1d:85:ad:fa:0a:6e:77:23:42:f1:f4:
                    66:07:84:bd:00:f3:d2:7a:41:96:98:b5:e7:05:93:
                    f3:72:6f:6c:32:92:d6:16:cd:08:af:05:d1:e7:38:
                    b0:af:81:c2:69:56:e3:12:45:df:d4:f3:1f:fb:25:
                    30:ca:ed:33:ec:a5:a0:14:6d:ec:8f:07:c8:d7:f1:
                    53:7e:d8:11:4b:49:3f:e0:51:f2:cd:b9:62:74:d5:
                    e4:c3:d6:b7:49:9d:2a:51:da:52:87:7f:6e:12:83:
                    7e:be:29:9b:9e:48:df:f1:75:1c:12:24:63:0f:f7:
                    99:02:15:f9:9a:30:4a:ad:1a:38:e8:bf:c9:ce:fe:
                    99:88:e6:08:fa:fa:8a:4f:25:08:e1:12:a5:8d:bc:
                    ad:48:dc:7a:70:80:74:6e:f6:0f:45:44:af:bb:e6:
                    9c:5f:94:7d:72:ca:43:34:0d:9d:41:b6:fc:f2:4f:
                    38:c7:9a:61:4e:60:12:45:cd:91:31:17:73:7d:b0:
                    64:de:ee:7f:dc:b6:11:fe:e0:17:8e:55:f9:8d:e0:
                    06:58:c3:50:0b:ef:5a:1e:ee:5a:51:4f:0e:1f:e7:
                    1c:36:59:8b:fa:b8:11:83:b2:aa:6a:e1:b2:c1:09:
                    ce:61:c6:99:bf:a2:57:a1:bd:e3:44:53:45:c6:06:
                    33:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:CF:E7:5D:8B:62:21:52:5D:33:12:04:8E:F1:A1:A2:0B:8B:5B:EF
            X509v3 Authority Key Identifier:
                keyid:CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/0e44ddd421e586f81a6e45df96889b4bd38559bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/61dee5b94933b1c10377fd86ec970d3b4117ae3d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:ca:32:bf:a6:ca:40:68:63:04:d9:a1:9e:b4:cf:9e:07:4b:
         c6:8d:2b:d8:af:db:4e:51:48:d6:b9:40:d9:b1:8d:fa:f5:b0:
         af:3e:75:ed:b9:7d:14:ec:f8:60:7d:61:94:db:f7:1e:cb:c3:
         be:26:a8:bc:45:77:0c:1a:74:f6:1b:91:70:13:34:54:77:1d:
         8d:13:74:7d:58:55:dc:47:89:65:c7:9c:40:e2:11:e1:6d:53:
         39:0e:c4:e0:2d:16:ff:c7:a9:8c:c3:a0:6d:29:59:9c:23:ba:
         c7:07:92:4a:3f:af:f0:c4:cf:38:4b:51:19:79:26:43:44:0b:
         40:6b:f7:e6:56:10:98:33:0b:ed:c7:18:54:12:94:0b:ef:ec:
         97:c4:44:71:c8:eb:a1:02:1f:0e:88:db:f9:98:7f:d2:1e:e0:
         c8:0c:55:74:ad:e5:b1:e0:c8:01:46:52:7b:fa:15:41:da:67:
         eb:9d:55:58:ac:5f:0a:84:67:9f:18:da:d8:e6:d9:be:bb:62:
         21:5d:93:89:56:5b:f4:c8:c9:85:3d:74:13:42:81:a7:0e:42:
         54:17:e3:c5:ae:a7:ec:47:5f:e3:76:34:4f:ea:45:a6:bf:d8:
         a1:e1:c0:c9:5d:f0:1f:3f:3d:45:93:13:f7:06:ed:06:f2:ff:
         14:8c:7f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 12 18:07:04 2024 by rpki-client on console-fra.rpki-client.org