Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/0abd741187299f5366f589052125742624031fe6.roa
File:                     0abd741187299f5366f589052125742624031fe6.roa (raw, json)
Hash identifier:          FrOlZJS6yf9rUiAyyVSeTF8GcpYVaIgiNl3bggefUP4=
Subject key identifier:   AF:05:A2:D0:26:29:5D:FC:E8:5A:EC:6F:CE:0F:43:2C:9F:21:CF:DF
Certificate issuer:       /CN=24b9a83a84ed651b0b613359fbb1a875e436316a
Certificate serial:       0BE071
Authority key identifier: 9D:1F:1D:B8:DF:8B:E2:EE:E7:E2:DE:4D:77:E5:8B:F3:8D:2C:CC:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/24b9a83a84ed651b0b613359fbb1a875e436316a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/0abd741187299f5366f589052125742624031fe6.roa
Signing time:             Wed 18 Oct 2023 22:51:01 +0000
ROA not before:           Tue 17 Oct 2023 22:51:01 +0000
ROA not after:            Sat 18 Oct 2025 22:51:01 +0000
asID:                     270149
IP address blocks:        148.208.128.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 778353 (0xbe071)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24b9a83a84ed651b0b613359fbb1a875e436316a
        Validity
            Not Before: Oct 17 22:51:01 2023 GMT
            Not After : Oct 18 22:51:01 2025 GMT
        Subject: CN=0abd741187299f5366f589052125742624031fe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a6:0b:63:67:be:a5:13:bd:20:75:9f:74:1d:
                    ca:0f:36:0b:9b:2f:ba:c3:94:5b:16:70:a0:b5:0c:
                    07:1b:7c:91:2a:c7:6d:ab:66:a6:a5:02:9a:c3:c8:
                    3d:8c:a9:69:54:20:8e:35:2f:f3:f0:1d:e6:5d:70:
                    fa:d7:21:b0:a5:c6:ff:29:78:19:c0:e7:fb:28:32:
                    70:16:18:3a:31:0d:dd:78:5f:4d:80:ef:c0:e2:c3:
                    80:1f:a9:6b:9d:f1:02:7a:01:5b:3e:32:90:0b:a9:
                    13:0f:cb:e4:f3:26:40:6e:c3:9b:d0:90:c7:15:38:
                    b6:d7:8c:59:e4:3a:fa:41:e6:cd:ab:73:7b:ad:20:
                    c3:c5:89:cf:fa:f3:b5:41:3a:3d:0f:76:a3:45:41:
                    68:84:91:f5:3d:14:4f:97:e9:98:c2:39:6b:c7:16:
                    22:5d:86:21:dc:a6:10:3c:22:d2:da:4f:87:ac:d8:
                    3a:c9:32:e2:2b:c7:2b:44:8f:a4:90:d5:b5:c8:41:
                    4a:7f:6a:50:f7:8c:2e:64:7e:30:87:44:5a:8e:b6:
                    0e:5b:79:42:a8:fa:75:a4:15:fe:11:db:54:d8:d4:
                    6d:63:cf:1a:c8:c2:44:d1:3e:78:ca:a4:55:a0:eb:
                    9b:96:0b:6c:77:51:3c:07:76:8a:4f:b7:c9:5f:9d:
                    ea:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:05:A2:D0:26:29:5D:FC:E8:5A:EC:6F:CE:0F:43:2C:9F:21:CF:DF
            X509v3 Authority Key Identifier:
                keyid:9D:1F:1D:B8:DF:8B:E2:EE:E7:E2:DE:4D:77:E5:8B:F3:8D:2C:CC:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/24b9a83a84ed651b0b613359fbb1a875e436316a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/0abd741187299f5366f589052125742624031fe6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/24b9a83a84ed651b0b613359fbb1a875e436316a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.208.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:93:9a:52:3b:02:48:f5:e1:29:f8:1b:5b:e9:5c:99:8a:10:
         07:a9:62:9a:9b:94:da:d2:86:ee:fa:36:59:c8:19:4b:7a:1a:
         1b:20:d4:20:a9:fe:3c:3d:e9:9b:08:4a:93:bc:08:3e:7a:6c:
         86:96:db:02:2a:9e:ae:17:3c:7c:50:f2:6e:f2:fd:f8:e4:eb:
         c8:43:ca:fb:0c:a6:5f:e2:ca:0b:b4:ca:76:ed:89:d4:42:0f:
         26:99:f9:15:58:89:a1:ce:48:de:fd:23:b9:3d:7b:37:bf:9a:
         a2:a6:7f:79:c7:76:94:5b:39:81:af:bf:a1:dd:e0:be:a9:9c:
         42:a0:fb:d1:c3:b4:3e:53:d1:6d:8b:fd:a7:f5:a7:65:3e:65:
         1c:67:ab:de:55:91:21:ef:d9:55:36:6c:53:55:57:19:43:7d:
         1f:37:98:f1:06:4a:bd:03:a9:46:ee:45:4b:9f:5c:0e:1c:f6:
         2b:af:24:a1:ec:d6:36:62:6a:c4:f9:ad:8b:a8:04:a5:e6:c8:
         c0:30:d2:d5:9f:f6:db:1d:51:c4:31:2a:82:4f:af:00:97:e2:
         a0:67:82:c0:86:fc:bb:5b:ee:53:e6:3c:c4:1e:e0:77:8d:59:
         ed:53:f9:65:04:66:03:ae:b1:d3:82:7c:27:a2:78:6d:5f:91:
         13:91:fe:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 18:30:14 2024 by rpki-client on console-fra.rpki-client.org