Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/93b4260f3f75e271255827e5a18b2bc0836c926e.roa
File:                     93b4260f3f75e271255827e5a18b2bc0836c926e.roa (raw, json)
Hash identifier:          +8xTbQh/1wGxGJ9GNG9nYJ/EE6DXJbCgMRtArNgwvEs=
Subject key identifier:   6E:E0:64:B0:58:80:87:28:86:9E:8D:C6:57:DE:98:11:C4:96:31:B3
Certificate issuer:       /CN=62384768198ac7dad2dedae543aedd0494c8f41c
Certificate serial:       0F27FB
Authority key identifier: A1:4E:B0:DE:AF:9B:2C:FD:DB:07:DB:C8:15:ED:88:6B:F6:8C:50:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62384768198ac7dad2dedae543aedd0494c8f41c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/93b4260f3f75e271255827e5a18b2bc0836c926e.roa
Signing time:             Tue 27 Feb 2024 12:59:40 +0000
ROA not before:           Tue 27 Feb 2024 12:59:34 +0000
ROA not after:            Tue 27 Feb 2029 12:59:34 +0000
asID:                     270149
IP address blocks:        148.208.112.0/24 maxlen: 24
                          148.208.136.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 993275 (0xf27fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62384768198ac7dad2dedae543aedd0494c8f41c
        Validity
            Not Before: Feb 27 12:59:34 2024 GMT
            Not After : Feb 27 12:59:34 2029 GMT
        Subject: CN=93b4260f3f75e271255827e5a18b2bc0836c926e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ba:b1:15:4d:96:b1:bd:62:26:4c:70:5a:f4:
                    92:27:dd:fc:de:53:f8:9e:25:c7:e6:11:d4:7b:0a:
                    47:6d:b9:3e:b5:92:1c:e4:35:78:d0:e9:d0:06:da:
                    a1:08:a7:4a:a0:cf:6e:d8:e5:0b:97:fe:28:25:89:
                    a6:b5:4c:2d:83:cb:e3:d0:7a:fa:91:78:a1:51:31:
                    11:53:d5:e2:50:05:d0:ce:67:b5:80:02:66:83:9b:
                    11:da:a1:d1:b8:47:39:a3:f1:89:bf:a4:12:72:74:
                    4b:74:f6:c8:d8:46:71:1e:c0:50:1c:32:d9:61:27:
                    11:08:aa:fe:c8:47:6a:22:f4:c4:e8:6c:4d:8f:31:
                    ff:e3:c6:6a:c8:f7:d1:ea:5e:27:5d:81:b5:62:8d:
                    2d:b2:aa:fb:d5:bb:51:8a:7e:0c:62:d5:ec:c9:86:
                    b8:25:08:eb:b6:e1:d3:bf:7e:ce:df:f5:d8:2b:f0:
                    69:91:21:d5:37:e0:3a:da:e8:55:25:4c:d4:07:db:
                    4b:96:46:92:4a:90:b5:fa:4d:15:e2:07:fe:09:ca:
                    b6:28:d8:9e:0b:4f:a2:40:e6:55:83:c4:e1:66:27:
                    f3:82:8f:56:c7:31:ad:b3:80:1d:8e:e6:02:b1:6c:
                    37:f0:17:84:0c:6c:bc:4a:e9:7c:99:1d:51:4d:50:
                    57:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E0:64:B0:58:80:87:28:86:9E:8D:C6:57:DE:98:11:C4:96:31:B3
            X509v3 Authority Key Identifier:
                keyid:A1:4E:B0:DE:AF:9B:2C:FD:DB:07:DB:C8:15:ED:88:6B:F6:8C:50:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62384768198ac7dad2dedae543aedd0494c8f41c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/93b4260f3f75e271255827e5a18b2bc0836c926e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/62384768198ac7dad2dedae543aedd0494c8f41c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.208.112.0/24
                  148.208.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:62:4e:49:49:fa:d6:8a:62:07:3e:22:00:2e:00:a8:1a:ad:
         72:47:b6:6f:ac:27:32:ac:91:d7:25:ff:f5:3c:e8:aa:29:86:
         26:6d:1e:0c:ea:14:19:54:10:1c:c9:aa:37:4e:b9:85:40:cd:
         0c:aa:3e:f3:f9:c2:da:00:83:8e:69:f3:93:1a:68:9e:31:91:
         ac:e7:fe:36:a8:07:74:89:9b:24:8b:61:fd:11:3e:01:68:fd:
         54:ef:b6:bb:45:e7:09:fc:4b:38:04:84:44:3f:68:78:07:df:
         0e:ae:02:7a:cf:28:46:09:0d:e7:48:df:aa:1a:00:27:30:3b:
         0b:67:8a:3f:8c:3e:80:50:b3:fe:4d:ad:c3:6d:aa:32:81:f9:
         5f:d0:c7:ad:e3:5e:77:f7:3e:40:59:e3:07:89:46:8f:38:9e:
         cc:d9:2d:1f:c0:31:ee:c9:43:db:c6:5d:d8:d1:ec:1d:19:05:
         3a:8b:d3:51:c3:e2:59:32:8a:9f:75:82:8d:90:8c:0e:5e:96:
         e0:81:6d:51:97:84:cc:b4:a8:83:80:8b:48:2f:2d:63:4f:ec:
         58:ad:d0:33:e3:ba:9e:fa:9a:d8:72:27:92:b7:57:b5:a9:4c:
         dc:56:cc:11:7d:52:8c:0d:1e:0d:8a:f6:43:48:f4:46:df:7e:
         8d:41:71:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:02 2024 by rpki-client on console-ams.rpki-client.org