Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/ad34b2ac2133d1e536da0ca4d7446d0e2f1fe25b.roa
File:                     ad34b2ac2133d1e536da0ca4d7446d0e2f1fe25b.roa (raw, json)
Hash identifier:          t+jxBmIQSNFBlz7h3nFwM1Lw7szhHf0Sifse4qb3ZxA=
Subject key identifier:   B1:1D:89:B1:A5:D0:4F:CE:83:AA:F1:44:B6:19:A0:A5:D0:CE:48:15
Certificate issuer:       /CN=a7237d32fd35bbf0fdba7734a8368fd9626eca5a
Certificate serial:       298A37
Authority key identifier: BE:02:D2:36:F8:B0:06:BA:87:81:2A:20:2E:F5:B7:66:DC:8E:30:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/ad34b2ac2133d1e536da0ca4d7446d0e2f1fe25b.roa
Signing time:             Wed 03 Apr 2024 16:13:22 +0000
ROA not before:           Wed 03 Apr 2024 16:13:22 +0000
ROA not after:            Fri 03 Apr 2026 16:13:22 +0000
asID:                     23520
IP address blocks:        190.242.183.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2722359 (0x298a37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7237d32fd35bbf0fdba7734a8368fd9626eca5a
        Validity
            Not Before: Apr  3 16:13:22 2024 GMT
            Not After : Apr  3 16:13:22 2026 GMT
        Subject: CN=ad34b2ac2133d1e536da0ca4d7446d0e2f1fe25b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5c:4f:58:07:31:d8:00:a4:ae:30:86:5f:f6:
                    e9:da:f4:91:31:a3:17:0d:1a:fa:06:86:af:2c:3f:
                    e2:3c:aa:88:aa:f6:68:2d:c6:16:95:27:b1:41:d3:
                    85:ac:60:f6:79:df:8b:d5:26:6f:a5:c3:33:58:35:
                    0d:64:40:69:56:72:0d:ba:55:8a:07:05:66:a9:9e:
                    80:99:17:4c:35:ad:53:a6:aa:37:76:32:b7:5c:9d:
                    54:6b:2a:2e:ff:dd:22:83:27:75:41:e5:b6:22:c6:
                    6c:82:25:60:ae:bc:3b:b7:b6:57:35:6c:92:a2:18:
                    ec:5a:f8:3b:82:19:3e:f1:ac:1a:0a:ab:03:9e:85:
                    18:21:4b:73:bc:c8:33:de:3e:a4:32:0d:c4:cf:d3:
                    45:51:99:75:26:03:ed:88:19:c9:b9:8b:77:39:3d:
                    7d:a8:f2:03:7f:7c:b3:6c:c1:c1:63:d8:b4:72:b5:
                    bf:a7:fd:8d:c5:1f:7f:0e:a1:c4:08:1d:9b:61:71:
                    f8:3d:ed:52:99:24:83:6f:01:f9:ce:59:be:4c:e2:
                    c5:c8:30:c8:15:32:4e:b2:0b:c6:ef:38:cf:2a:c4:
                    81:b5:0b:0e:1f:7a:9a:7c:a4:c5:2c:93:c5:a5:bb:
                    73:8e:52:08:34:b2:d4:d9:65:91:0e:ee:e1:cd:de:
                    8e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:1D:89:B1:A5:D0:4F:CE:83:AA:F1:44:B6:19:A0:A5:D0:CE:48:15
            X509v3 Authority Key Identifier:
                keyid:BE:02:D2:36:F8:B0:06:BA:87:81:2A:20:2E:F5:B7:66:DC:8E:30:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/ad34b2ac2133d1e536da0ca4d7446d0e2f1fe25b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:dd:99:7a:f0:36:ac:9b:65:69:b3:9e:ca:f3:08:53:02:f0:
         48:ac:3b:f0:0e:5a:92:6d:85:67:8c:87:65:6f:7e:77:8c:8e:
         1d:af:f5:3c:fb:d1:f8:14:73:ac:a9:91:d9:3f:37:f9:aa:fe:
         9e:fa:a2:ab:f4:92:1b:d5:6a:47:90:d5:10:f6:c5:57:5b:03:
         34:5b:2e:4d:c8:c0:7c:15:fa:f4:1f:1c:d5:5d:2c:f9:17:3d:
         a9:fa:0f:7a:19:b8:33:cd:10:93:ca:74:32:52:7a:8a:34:b6:
         4f:77:48:3f:15:8e:db:2b:b8:84:ee:c7:3f:f2:9d:8f:b0:0f:
         af:bf:d9:6c:c3:78:25:ab:09:ad:6c:5b:1b:6f:e1:3c:0b:86:
         09:42:db:c8:ff:fc:ae:f3:fe:c6:7b:bc:92:6d:a4:3f:02:5d:
         46:1e:b3:d8:60:9f:98:96:5a:3d:fb:d0:33:4f:32:f6:a9:72:
         e2:60:ad:bc:0e:63:01:a7:38:a3:85:9e:78:c2:5e:b1:bf:04:
         60:e0:2b:ae:51:0a:99:fe:b4:8e:4c:d8:89:ac:a8:e0:78:33:
         35:3a:77:c4:14:51:9a:14:47:a3:03:ca:1e:ad:2c:84:91:6c:
         62:10:a2:1f:0d:66:c7:96:bd:17:8d:41:f7:b1:bf:a6:05:dd:
         17:05:92:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:59 2024 by rpki-client on console-ams.rpki-client.org