Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7007363a-0f36-4e30-af88-33daedc235a1/3275f998dbb5b92d9dfbe424ca9555d9c5e38739.roa
File:                     3275f998dbb5b92d9dfbe424ca9555d9c5e38739.roa (raw, json)
Hash identifier:          2jheuy59sqPzhvNCKyutvjX2LWKq4MWLgbJhH2xxe38=
Subject key identifier:   80:26:C1:9E:18:F9:EC:8B:03:41:6D:3D:39:B9:7D:F5:EB:E0:7B:81
Certificate issuer:       /CN=e0570a0eb0a8dba45212b35153e2892214274417
Certificate serial:       25CA78
Authority key identifier: C3:12:E4:39:E2:A3:64:74:97:AF:33:7C:A7:F7:D9:54:6B:12:3B:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e0570a0eb0a8dba45212b35153e2892214274417.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7007363a-0f36-4e30-af88-33daedc235a1/3275f998dbb5b92d9dfbe424ca9555d9c5e38739.roa
Signing time:             Fri 05 Jan 2024 19:34:23 +0000
ROA not before:           Fri 05 Jan 2024 19:34:23 +0000
ROA not after:            Mon 05 Jan 2026 19:34:23 +0000
asID:                     27947
IP address blocks:        192.188.196.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2476664 (0x25ca78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0570a0eb0a8dba45212b35153e2892214274417
        Validity
            Not Before: Jan  5 19:34:23 2024 GMT
            Not After : Jan  5 19:34:23 2026 GMT
        Subject: CN=3275f998dbb5b92d9dfbe424ca9555d9c5e38739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:43:cb:7c:7a:b5:ab:f8:c3:79:3d:aa:7c:e1:
                    3a:c3:9c:4d:87:d2:a0:7d:26:da:06:6b:2a:b0:6c:
                    69:3c:49:ac:3b:cf:82:3c:37:8c:95:8c:2e:bd:2e:
                    a0:4f:05:a6:5d:18:4c:12:b5:88:d2:52:b5:1f:16:
                    b7:aa:30:12:17:62:d5:56:35:a4:6f:37:1b:c2:13:
                    63:a0:c4:86:59:f6:60:8b:26:19:b5:c7:37:12:e1:
                    59:55:ff:59:a1:dd:35:90:20:ab:4b:b6:3a:6f:90:
                    94:d1:26:0c:65:86:69:db:fa:1b:84:d0:03:0d:ae:
                    76:ac:9c:60:c1:09:40:60:80:1a:a4:1c:1a:47:c9:
                    79:5e:d6:b9:cf:1e:1c:a0:23:5f:6a:6b:8b:b9:b6:
                    00:de:08:b6:6b:ae:b8:e3:bb:11:06:76:42:69:da:
                    06:ef:2c:69:19:45:b0:d5:7d:eb:e0:ce:79:3d:97:
                    ae:16:e5:94:e9:6c:24:99:a6:42:68:02:cf:70:95:
                    35:66:9f:63:60:9a:27:1f:1c:d1:36:25:78:97:63:
                    14:87:fe:21:7f:3e:52:63:30:3d:e1:2c:73:0a:c3:
                    bb:38:f7:4c:ba:d2:26:bc:df:2d:52:52:31:c2:c0:
                    4e:5e:94:68:f4:a5:51:70:09:3b:27:f6:bd:8d:35:
                    47:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:26:C1:9E:18:F9:EC:8B:03:41:6D:3D:39:B9:7D:F5:EB:E0:7B:81
            X509v3 Authority Key Identifier:
                keyid:C3:12:E4:39:E2:A3:64:74:97:AF:33:7C:A7:F7:D9:54:6B:12:3B:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e0570a0eb0a8dba45212b35153e2892214274417.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7007363a-0f36-4e30-af88-33daedc235a1/3275f998dbb5b92d9dfbe424ca9555d9c5e38739.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7007363a-0f36-4e30-af88-33daedc235a1/e0570a0eb0a8dba45212b35153e2892214274417.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:59:41:99:65:38:56:57:5e:96:2f:68:da:8e:b7:33:fd:a7:
         bb:20:37:b0:0a:78:9b:96:a9:b0:17:f0:12:83:86:89:bc:2d:
         9c:95:e2:f8:ed:3b:0c:cb:27:38:af:01:6a:37:b4:90:ed:8b:
         80:62:73:27:e4:05:b4:27:a7:a3:07:e3:48:e6:84:2b:4a:af:
         65:1e:73:0f:df:54:57:ae:6d:f6:7b:24:8e:31:4a:37:94:5b:
         56:a2:ae:a5:fe:ef:0d:27:ed:63:d6:a1:dc:51:e5:be:3a:26:
         b5:38:bf:17:e4:b6:75:71:be:fc:9a:34:47:f2:98:94:05:97:
         23:28:1c:0b:68:7b:3b:72:cb:80:ef:d9:52:ec:95:bd:d6:0d:
         3e:09:00:30:08:85:b8:16:da:50:3d:78:b3:29:37:c2:bc:f6:
         da:6d:d1:f5:df:11:66:80:a3:4c:30:37:02:75:36:4e:9f:86:
         ed:d2:68:38:57:3a:5a:97:5f:1f:71:8a:37:34:e4:fd:73:78:
         ab:30:9d:2b:9b:fe:ae:e3:e3:34:04:b9:66:e9:fb:44:ce:48:
         3a:5d:61:82:cf:49:55:da:ed:1f:f1:7d:a4:35:ef:8e:eb:67:
         33:fa:12:6c:65:c9:e3:27:9f:e8:7e:81:63:c4:fc:d7:b7:d8:
         ae:a7:4a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:22 2024 by rpki-client on console-fra.rpki-client.org