Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/a7fa207cf2d56f3698ed2af5920e3a642906e747.roa
File:                     a7fa207cf2d56f3698ed2af5920e3a642906e747.roa (raw, json)
Hash identifier:          YcmL9MkK2nzudqsPl0yqZC53QkqOL+7NEIPZlJaHxsQ=
Subject key identifier:   53:5F:5B:53:26:E5:AB:35:D2:8F:B9:C1:94:4B:7D:5F:60:C6:09:29
Certificate issuer:       /CN=62384768198ac7dad2dedae543aedd0494c8f41c
Certificate serial:       0F1120
Authority key identifier: A1:4E:B0:DE:AF:9B:2C:FD:DB:07:DB:C8:15:ED:88:6B:F6:8C:50:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62384768198ac7dad2dedae543aedd0494c8f41c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/a7fa207cf2d56f3698ed2af5920e3a642906e747.roa
Signing time:             Tue 27 Feb 2024 12:59:34 +0000
ROA not before:           Tue 27 Feb 2024 12:59:34 +0000
ROA not after:            Tue 27 Feb 2029 12:59:34 +0000
asID:                     270149
IP address blocks:        148.208.162.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 987424 (0xf1120)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62384768198ac7dad2dedae543aedd0494c8f41c
        Validity
            Not Before: Feb 27 12:59:34 2024 GMT
            Not After : Feb 27 12:59:34 2029 GMT
        Subject: CN=a7fa207cf2d56f3698ed2af5920e3a642906e747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:19:03:09:31:bf:b1:10:e9:12:13:0a:25:a3:
                    10:19:d6:9d:b2:b3:42:34:05:e9:c5:76:19:5a:1a:
                    e9:01:0f:02:a2:1c:c7:3e:00:e5:d6:33:16:3c:13:
                    23:b1:fb:fe:34:2f:d7:5a:72:13:99:a0:5b:1b:50:
                    09:f9:7e:61:04:84:a8:a2:27:eb:7f:9b:c8:42:cb:
                    93:99:78:b6:02:f4:75:0d:dc:09:77:cb:03:b3:87:
                    ce:c6:1c:1d:4d:dd:04:f6:b1:fb:e2:f7:55:7f:bf:
                    1d:50:54:6a:e4:1c:d1:89:0c:19:42:75:ab:6a:a2:
                    28:58:bf:97:09:34:49:8d:05:ea:3c:8f:df:d4:d4:
                    50:7a:2f:09:78:27:d1:f1:13:0e:45:78:63:e8:90:
                    21:1d:f1:77:b1:7e:39:af:29:b3:0b:fd:37:8e:31:
                    bb:fe:f2:5b:74:70:42:38:25:69:3b:5f:26:87:aa:
                    da:35:0f:d4:45:05:b7:7d:ee:53:ad:55:d1:15:48:
                    0d:6c:a0:fa:26:52:bb:80:51:56:46:04:39:e9:f2:
                    78:ce:d7:9b:9d:a3:96:34:ad:97:ef:a7:3a:61:05:
                    a3:ac:47:58:c4:d9:ea:5c:2a:26:85:34:2e:e5:4d:
                    4b:eb:d6:84:97:f8:c2:3f:3d:fb:38:98:41:ad:78:
                    cb:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:5F:5B:53:26:E5:AB:35:D2:8F:B9:C1:94:4B:7D:5F:60:C6:09:29
            X509v3 Authority Key Identifier:
                keyid:A1:4E:B0:DE:AF:9B:2C:FD:DB:07:DB:C8:15:ED:88:6B:F6:8C:50:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62384768198ac7dad2dedae543aedd0494c8f41c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/a7fa207cf2d56f3698ed2af5920e3a642906e747.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/62384768198ac7dad2dedae543aedd0494c8f41c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.208.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:f7:52:c9:cd:e4:d8:f8:6a:5e:5c:5d:ad:28:68:02:d7:8f:
         c7:67:fb:9f:87:89:bc:50:d2:1f:e5:76:80:da:62:14:10:df:
         8f:c2:70:93:62:1f:58:c7:31:c4:74:46:54:34:6a:90:5d:64:
         a0:ac:80:ce:c1:3e:31:60:a6:da:9a:6e:56:17:41:e5:0e:b8:
         38:eb:fc:24:16:0a:0b:c7:f9:48:46:c1:e5:d1:7b:6c:2f:23:
         fd:fb:8f:e5:ce:ee:81:48:d7:f7:f3:9a:34:24:20:f8:58:81:
         8d:21:ab:af:2a:5b:85:62:b4:22:a0:66:33:7d:36:38:f9:fb:
         b5:f2:e0:8f:bb:a2:5f:fa:df:fa:bf:b0:45:44:d7:90:9a:55:
         39:2e:0c:a6:bd:50:c0:5e:6c:9d:c7:04:eb:12:a7:c3:1a:93:
         3d:d2:3f:8c:3d:f8:2a:27:eb:c8:92:66:93:6a:89:42:66:64:
         3a:71:6a:20:12:42:cb:d4:87:a2:e7:a1:fd:31:9d:9d:5b:5e:
         a6:00:8c:c7:29:d1:b0:89:1c:8e:6e:e8:48:57:9f:8e:69:4a:
         ac:f1:2f:36:65:da:05:5e:01:07:76:33:2d:e3:2b:c0:a7:42:
         c0:a8:92:ef:64:57:2c:14:11:f1:78:f4:60:c4:89:6e:3a:70:
         83:54:39:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:38 2024 by rpki-client on console-ams.rpki-client.org