Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/7ba0980f4c5d971418c55162ed140090f0387705.roa
File:                     7ba0980f4c5d971418c55162ed140090f0387705.roa (raw, json)
Hash identifier:          nx+jcicj8GFQaxzTdxKyM1W6eTWodTE63xYseWNbRSE=
Subject key identifier:   14:EF:A8:D9:EA:24:0F:31:59:79:B3:CD:BC:35:C1:EE:AE:51:49:77
Certificate issuer:       /CN=24b9a83a84ed651b0b613359fbb1a875e436316a
Certificate serial:       0EEC04
Authority key identifier: 9D:1F:1D:B8:DF:8B:E2:EE:E7:E2:DE:4D:77:E5:8B:F3:8D:2C:CC:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/24b9a83a84ed651b0b613359fbb1a875e436316a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/7ba0980f4c5d971418c55162ed140090f0387705.roa
Signing time:             Fri 23 Feb 2024 23:08:21 +0000
ROA not before:           Fri 23 Feb 2024 23:08:21 +0000
ROA not after:            Mon 23 Feb 2026 23:08:21 +0000
asID:                     270149
IP address blocks:        148.208.161.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 977924 (0xeec04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24b9a83a84ed651b0b613359fbb1a875e436316a
        Validity
            Not Before: Feb 23 23:08:21 2024 GMT
            Not After : Feb 23 23:08:21 2026 GMT
        Subject: CN=7ba0980f4c5d971418c55162ed140090f0387705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ba:00:65:bc:e9:d2:62:45:5b:5b:8a:46:e8:
                    7a:71:b2:26:40:5e:cc:a1:8a:a2:be:43:f8:58:28:
                    ff:23:95:30:08:7b:26:aa:d6:2c:e3:b0:29:07:00:
                    5b:e3:b5:7e:95:4d:77:e8:75:d9:48:c2:0d:b2:c0:
                    16:6d:86:fd:75:05:19:cf:3d:e3:16:80:e7:f6:71:
                    9a:e2:e9:7b:f3:e3:9a:41:e6:ee:19:48:fd:30:b3:
                    43:16:fd:24:4c:d8:31:24:dc:b4:09:44:b7:c6:c2:
                    f4:98:7d:42:6d:97:bd:69:db:0f:04:1d:f4:87:13:
                    b1:f6:8a:58:ad:90:81:45:70:e6:0a:b5:81:b3:cd:
                    20:c4:17:33:c8:d2:fe:b1:6f:67:50:03:62:46:e6:
                    29:bf:ac:f8:68:b3:93:d5:1c:0d:30:75:c0:e1:8d:
                    b8:0d:c8:9e:49:a0:de:2f:b9:6d:72:ef:c1:d1:de:
                    a8:2f:2b:0d:8a:e3:9e:3d:91:13:c0:ac:b8:26:f5:
                    57:6b:ea:eb:4f:09:9a:42:59:c8:17:15:db:fb:86:
                    c6:8e:bd:21:73:ea:d4:d7:d9:d5:13:9f:03:b8:2d:
                    eb:84:89:7a:47:55:88:35:b0:f4:c0:8e:e7:e9:36:
                    f5:69:3a:0f:aa:6a:f3:51:43:f4:3d:36:35:cc:6c:
                    0b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:EF:A8:D9:EA:24:0F:31:59:79:B3:CD:BC:35:C1:EE:AE:51:49:77
            X509v3 Authority Key Identifier:
                keyid:9D:1F:1D:B8:DF:8B:E2:EE:E7:E2:DE:4D:77:E5:8B:F3:8D:2C:CC:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/24b9a83a84ed651b0b613359fbb1a875e436316a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/7ba0980f4c5d971418c55162ed140090f0387705.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/24b9a83a84ed651b0b613359fbb1a875e436316a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.208.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:10:cd:bf:24:c7:94:6d:e7:5b:59:7b:ef:ea:82:92:13:ab:
         e2:df:e6:57:8a:95:43:11:46:ff:9f:20:d6:6f:f5:d2:68:4f:
         f5:c7:5c:06:66:10:06:b8:73:11:85:5d:d8:df:d4:57:6f:6c:
         bf:24:de:f7:65:54:ea:03:3c:f0:a4:03:96:61:9d:c3:1c:81:
         ef:95:ce:7e:37:5a:15:8b:02:8a:87:6a:95:83:3e:8d:f4:a6:
         e6:fe:73:f5:79:06:66:b9:1f:42:bb:40:44:f4:94:7e:2b:a6:
         87:ca:58:18:be:fd:8a:71:a4:73:f4:56:19:c3:e9:12:60:63:
         d2:5d:63:50:e0:33:07:87:d0:7d:71:eb:b9:ab:21:54:02:2c:
         b9:ed:47:57:06:17:c7:ca:5c:0c:7e:02:18:4e:25:73:f3:4a:
         78:46:23:9e:0f:27:0a:cd:0c:8d:c4:06:8f:b9:a9:7a:24:d6:
         2f:3f:9f:a0:a3:73:ec:fd:b1:80:f2:5c:be:7c:0d:32:92:b5:
         83:68:ad:72:27:64:81:bc:94:76:f7:39:53:98:a8:70:13:32:
         f3:fa:9f:7f:82:05:ce:7d:89:55:62:d9:85:34:9b:8b:48:6d:
         f4:09:40:5f:82:7b:6e:bd:70:a7:b1:1f:b1:bf:d1:19:4d:c6:
         0e:f4:dc:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 16:20:16 2024 by rpki-client on console-ams.rpki-client.org