Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/441d5e8fd8f3acbcdecd79e49eb02a9d2ec83aa6.roa
File:                     441d5e8fd8f3acbcdecd79e49eb02a9d2ec83aa6.roa (raw, json)
Hash identifier:          3DMrHvNDiNPupGNWj6IiUN6k0UdVNYbqfPjP4GBO4k0=
Subject key identifier:   87:75:97:3C:E4:33:C7:89:C2:E7:B3:4E:81:61:9D:C3:1D:A5:53:77
Certificate issuer:       /CN=a7237d32fd35bbf0fdba7734a8368fd9626eca5a
Certificate serial:       27DA5E
Authority key identifier: BE:02:D2:36:F8:B0:06:BA:87:81:2A:20:2E:F5:B7:66:DC:8E:30:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/441d5e8fd8f3acbcdecd79e49eb02a9d2ec83aa6.roa
Signing time:             Mon 12 Feb 2024 15:10:01 +0000
ROA not before:           Mon 12 Feb 2024 15:09:57 +0000
ROA not after:            Mon 12 Feb 2029 15:09:57 +0000
asID:                     263238
IP address blocks:        190.242.106.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2611806 (0x27da5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7237d32fd35bbf0fdba7734a8368fd9626eca5a
        Validity
            Not Before: Feb 12 15:09:57 2024 GMT
            Not After : Feb 12 15:09:57 2029 GMT
        Subject: CN=441d5e8fd8f3acbcdecd79e49eb02a9d2ec83aa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:70:b0:a2:0b:1b:5d:d7:c4:33:67:74:d4:2e:
                    aa:13:c3:ae:08:71:6d:3d:ca:85:d1:dc:2e:8c:30:
                    6d:4d:d3:c3:7a:58:41:a3:60:8d:17:85:a8:0b:a2:
                    e5:5e:6d:b2:07:a4:fe:56:b8:8d:ac:a9:0f:b2:c5:
                    04:e1:a6:da:e0:44:ee:50:f2:b2:a8:8a:1d:61:36:
                    f0:29:06:fe:d2:98:e3:3a:74:3b:55:cd:11:f3:5e:
                    5c:70:aa:22:8f:fb:72:14:9b:1c:b1:98:e6:b0:ed:
                    02:22:81:ab:44:6f:79:1d:d1:20:3f:98:ed:07:33:
                    a2:d3:a6:6f:90:44:08:5a:69:85:b0:30:89:19:29:
                    98:3b:19:42:8b:a4:dc:bc:68:5b:a4:02:54:98:5b:
                    7f:36:0c:79:47:09:d8:b7:c0:c3:3a:ba:c9:dc:01:
                    82:7f:9b:ef:60:74:4b:f3:d3:03:e1:58:07:85:e5:
                    03:6a:c4:26:8d:72:d5:f4:26:a5:83:d2:45:77:b9:
                    e8:93:c5:98:7d:65:19:74:d7:9a:00:19:96:9e:95:
                    3a:2c:a3:38:44:0f:c0:90:d3:73:dd:c3:ae:60:f8:
                    fa:a5:81:fd:77:e5:3f:44:93:56:e3:e3:98:4c:6f:
                    ed:15:05:61:ed:41:85:f6:46:80:9d:87:34:bd:cc:
                    7f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:75:97:3C:E4:33:C7:89:C2:E7:B3:4E:81:61:9D:C3:1D:A5:53:77
            X509v3 Authority Key Identifier:
                keyid:BE:02:D2:36:F8:B0:06:BA:87:81:2A:20:2E:F5:B7:66:DC:8E:30:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/441d5e8fd8f3acbcdecd79e49eb02a9d2ec83aa6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:a0:39:e0:1b:78:bb:a3:e3:9d:b5:8d:7b:bd:d7:9f:e9:ab:
         8a:4c:80:5a:a0:24:71:72:dd:fe:10:f8:c2:2a:3e:0a:4b:6a:
         66:97:eb:8f:c6:dd:b1:8a:bc:c7:0b:24:9f:87:b2:d5:0d:b0:
         51:76:97:1a:41:5d:dd:31:e3:df:2e:e2:b1:20:b3:53:29:bc:
         22:00:24:e7:ac:c6:14:09:1f:e6:17:27:5e:fa:36:6d:a1:0b:
         1e:f6:45:80:5b:62:dd:4f:1a:69:15:1d:fb:b7:62:3e:ad:97:
         ca:ce:d1:61:40:ba:f0:94:38:31:53:f3:1a:43:dc:78:5b:a9:
         61:38:1f:23:b4:0f:54:c1:6b:47:b0:e7:38:7e:6f:2c:58:38:
         03:1e:7f:5d:ac:e9:16:2c:a7:05:b3:76:c0:82:a0:85:06:db:
         e4:9f:13:a6:bc:04:35:d4:34:5c:ca:53:b1:c1:5e:80:ce:5b:
         88:bf:61:0f:d1:50:aa:2c:52:98:4f:d8:ad:0e:73:ed:e6:22:
         fd:5c:6b:c0:38:21:10:53:03:f4:0a:f8:af:ef:08:ca:0a:30:
         27:63:2f:01:2b:e6:2e:c9:36:bc:55:87:d3:1c:c4:bd:fc:ef:
         e9:e4:62:96:dd:76:3b:29:32:0a:ff:46:26:8d:1a:2d:f4:97:
         df:49:7e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org