Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/a8582ce50beb7805f306ed7f0247604ead3e7a4e.roa
File:                     a8582ce50beb7805f306ed7f0247604ead3e7a4e.roa (raw, json)
Hash identifier:          WpvFU5MbsJkaSG26JQUGMfcPSPPCfuH9+6SSsM/NbUA=
Subject key identifier:   46:26:13:7C:3C:F8:E9:FB:8B:39:FD:FA:75:82:63:BC:B8:24:49:CC
Certificate issuer:       /CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
Certificate serial:       2624FF
Authority key identifier: CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/a8582ce50beb7805f306ed7f0247604ead3e7a4e.roa
Signing time:             Thu 07 Dec 2023 21:57:21 +0000
ROA not before:           Thu 07 Dec 2023 21:57:21 +0000
ROA not after:            Sun 07 Dec 2025 21:57:21 +0000
asID:                     262255
IP address blocks:        190.242.187.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2499839 (0x2624ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
        Validity
            Not Before: Dec  7 21:57:21 2023 GMT
            Not After : Dec  7 21:57:21 2025 GMT
        Subject: CN=a8582ce50beb7805f306ed7f0247604ead3e7a4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c7:2b:b1:88:33:31:cc:e3:62:9f:9c:ef:2b:
                    a6:3c:b3:82:30:12:be:76:39:6b:7a:04:8b:25:8b:
                    3d:16:d2:90:91:8a:6e:66:10:c6:cb:3c:be:b3:6d:
                    89:a7:a2:7f:fb:9f:e7:02:6b:7e:28:04:32:4a:4c:
                    f6:1d:50:5a:56:21:95:29:e3:24:9e:d3:13:f7:ac:
                    3d:61:ef:fc:17:98:61:8b:f3:c1:47:79:9c:3a:23:
                    11:d1:0b:33:03:68:44:9c:1b:83:86:a8:7c:b7:35:
                    19:39:76:25:30:26:77:0d:70:f5:c7:89:4a:34:bf:
                    37:52:2c:14:22:bd:da:a0:2d:62:17:8e:e9:61:fd:
                    13:c1:2d:0b:a8:48:68:75:18:e3:f9:b8:98:06:36:
                    17:db:d5:13:db:d1:dc:cb:a1:d8:fc:ce:cd:8b:4b:
                    06:b5:50:f2:e3:7c:40:fa:78:47:90:bc:11:e9:47:
                    9f:cd:7a:5a:e5:28:21:e0:f4:93:91:40:77:1e:62:
                    72:bf:23:ff:a8:32:bb:98:d2:e6:ac:f0:a9:47:6e:
                    e7:0b:9d:96:93:9f:ca:9b:e9:07:7e:d5:26:ae:e5:
                    58:ec:8e:87:f6:ce:ba:f9:01:be:c8:4c:77:4c:6c:
                    1e:d2:e6:ab:fb:0b:38:1c:43:2a:c1:6d:54:5d:98:
                    60:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:26:13:7C:3C:F8:E9:FB:8B:39:FD:FA:75:82:63:BC:B8:24:49:CC
            X509v3 Authority Key Identifier:
                keyid:CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/a8582ce50beb7805f306ed7f0247604ead3e7a4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/61dee5b94933b1c10377fd86ec970d3b4117ae3d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:15:a6:42:29:00:b3:b8:b9:e3:26:d9:93:98:8e:b3:29:bf:
         0d:7a:db:65:b3:5f:99:74:2a:b7:70:65:94:46:0c:4a:00:72:
         a5:13:f2:0a:3f:e6:ce:7a:4a:5d:20:31:fa:d7:41:30:35:07:
         3f:0e:f7:f1:2e:ed:f2:51:21:2a:9c:d5:da:20:a1:d9:10:23:
         57:28:9e:b5:48:8e:14:b8:e6:2f:8a:cc:3c:bf:29:c3:2e:e3:
         99:d0:69:24:f6:49:24:a2:d9:0c:13:7c:5b:0a:fd:99:a5:51:
         82:d4:77:eb:20:1d:a5:d2:63:cf:7b:ba:8b:96:43:d2:6d:fe:
         85:7e:fc:58:8c:a5:3b:e7:90:a5:2f:9e:26:22:86:b5:f7:bc:
         ca:4b:34:44:58:b2:c7:a1:db:bb:85:3c:95:10:18:be:67:9a:
         94:90:fe:96:7c:e8:0c:ce:10:2d:36:e6:53:7c:ac:8b:ab:93:
         54:6d:0b:cd:d0:15:58:3f:7d:91:97:6c:db:25:f6:41:b1:38:
         1b:75:32:42:53:2d:66:ef:49:4a:a2:ca:6e:eb:0d:04:9d:67:
         ad:8d:fc:10:60:43:f2:48:e6:b1:ff:a3:43:06:fa:15:9e:05:
         03:5d:bd:10:f5:b7:28:6a:38:c6:15:7e:c4:ec:84:65:75:58:
         1c:30:58:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 12 18:07:04 2024 by rpki-client on console-fra.rpki-client.org