Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/a36d8b52e9e07e1413dc295fa57a216bf8c3ae22.roa
File:                     a36d8b52e9e07e1413dc295fa57a216bf8c3ae22.roa (raw, json)
Hash identifier:          3qmNPqkOZcfp8wK2JXcDAj6x3D6iUla6KeEgsuGWEtA=
Subject key identifier:   1E:CC:ED:A0:4B:EB:6C:DD:82:ED:4C:A5:53:8B:68:1B:C9:03:22:C0
Certificate issuer:       /CN=a7237d32fd35bbf0fdba7734a8368fd9626eca5a
Certificate serial:       282513
Authority key identifier: BE:02:D2:36:F8:B0:06:BA:87:81:2A:20:2E:F5:B7:66:DC:8E:30:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/a36d8b52e9e07e1413dc295fa57a216bf8c3ae22.roa
Signing time:             Mon 12 Feb 2024 15:10:31 +0000
ROA not before:           Mon 12 Feb 2024 15:09:57 +0000
ROA not after:            Mon 12 Feb 2029 15:09:57 +0000
asID:                     262191
IP address blocks:        190.242.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2630931 (0x282513)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7237d32fd35bbf0fdba7734a8368fd9626eca5a
        Validity
            Not Before: Feb 12 15:09:57 2024 GMT
            Not After : Feb 12 15:09:57 2029 GMT
        Subject: CN=a36d8b52e9e07e1413dc295fa57a216bf8c3ae22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4b:35:9a:d7:ab:b1:8b:4e:b0:b0:73:fd:2a:
                    6e:0b:74:07:83:da:b3:ae:32:0a:d8:a2:95:a3:c4:
                    15:3d:55:02:41:fc:3f:f2:7f:80:a1:5f:24:ac:80:
                    5c:b7:b0:fc:07:d9:31:ea:d0:76:ee:1a:7c:7d:fe:
                    5a:4d:6e:27:70:70:df:48:b4:e3:1b:53:28:d5:30:
                    9d:9c:94:09:e8:58:7a:4a:ba:29:8f:69:52:50:3f:
                    0f:70:f7:4b:43:ca:32:6b:4d:9e:f4:d2:ac:92:ba:
                    39:e0:d9:f2:e3:06:9d:21:87:c4:65:01:ab:74:2f:
                    75:47:33:7c:1c:34:0c:0a:19:8b:80:75:38:34:62:
                    09:96:3a:68:fb:8f:69:19:96:e0:04:15:48:b8:4b:
                    6c:77:77:e4:31:8a:39:65:25:3a:22:4e:76:8d:08:
                    0e:b4:e7:7a:7e:ce:bd:be:b5:cb:0a:3d:91:28:7f:
                    48:7a:e0:e9:7e:43:9b:21:4b:2b:d2:5c:7d:3a:49:
                    2e:50:26:af:ba:92:ec:cd:03:60:f3:cb:5e:76:d1:
                    9b:da:8d:6d:e7:6b:71:40:c0:f7:a8:e5:7f:40:e9:
                    c1:40:25:ff:37:62:23:df:09:94:0a:28:10:e1:b6:
                    1a:af:13:11:22:6f:b2:8a:1f:35:f6:25:ae:d1:02:
                    e7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:CC:ED:A0:4B:EB:6C:DD:82:ED:4C:A5:53:8B:68:1B:C9:03:22:C0
            X509v3 Authority Key Identifier:
                keyid:BE:02:D2:36:F8:B0:06:BA:87:81:2A:20:2E:F5:B7:66:DC:8E:30:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/a36d8b52e9e07e1413dc295fa57a216bf8c3ae22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:c2:c5:72:2d:98:03:76:16:51:c0:6a:b6:a6:b2:5d:f0:c4:
         47:3f:55:01:9c:2e:97:3a:3b:40:54:7c:fe:6f:4d:10:1c:b5:
         e3:a1:59:a4:7e:60:53:20:0b:5c:91:b3:f2:63:0a:dd:08:a9:
         5a:26:b0:a8:b4:cc:c0:b8:77:53:dc:a5:b8:d4:ab:70:80:ca:
         13:9b:9b:56:76:f1:15:cc:24:ab:1d:ff:d9:2e:6f:79:fe:92:
         2d:61:c3:fa:1e:48:6f:ec:89:6a:9e:c1:28:dd:31:07:ef:90:
         31:42:74:14:67:7e:f5:94:91:30:ad:86:48:3a:29:ea:8d:24:
         3a:ff:c4:aa:24:84:d0:db:cf:72:5f:0e:4d:65:70:8d:8d:79:
         10:99:1d:ea:89:3f:41:b4:e2:ed:0a:6b:3d:02:5f:56:00:7c:
         f1:31:98:db:30:92:60:06:05:a8:aa:4d:63:9b:08:ed:01:db:
         76:f2:19:7c:1b:5d:87:30:a3:bf:64:96:d5:1f:e1:9b:7c:9d:
         3a:63:63:07:4b:29:98:33:fc:79:d3:c6:3c:a0:d1:a1:39:09:
         5a:29:74:13:7d:fa:4f:c1:a0:db:9d:41:78:4f:f1:46:97:e1:
         89:bc:6f:25:5e:68:49:9e:32:09:c3:f4:dc:40:da:90:16:be:
         d9:81:ab:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org