Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/e33617fbdd31420697787e8d9c1c0912f406c0db.roa
File:                     e33617fbdd31420697787e8d9c1c0912f406c0db.roa (raw, json)
Hash identifier:          hSvXgUHxy1+H3tVM+QK00fbYr8rdhsBrwf5JrcMEI1g=
Subject key identifier:   EF:72:AC:F8:9E:20:7A:AB:3E:D2:9D:04:5F:BD:8E:1F:CF:C9:C8:93
Certificate issuer:       /CN=62384768198ac7dad2dedae543aedd0494c8f41c
Certificate serial:       0F1B3A
Authority key identifier: A1:4E:B0:DE:AF:9B:2C:FD:DB:07:DB:C8:15:ED:88:6B:F6:8C:50:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62384768198ac7dad2dedae543aedd0494c8f41c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/e33617fbdd31420697787e8d9c1c0912f406c0db.roa
Signing time:             Tue 27 Feb 2024 12:59:36 +0000
ROA not before:           Tue 27 Feb 2024 12:59:34 +0000
ROA not after:            Tue 27 Feb 2029 12:59:34 +0000
asID:                     270149
IP address blocks:        148.208.161.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 990010 (0xf1b3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62384768198ac7dad2dedae543aedd0494c8f41c
        Validity
            Not Before: Feb 27 12:59:34 2024 GMT
            Not After : Feb 27 12:59:34 2029 GMT
        Subject: CN=e33617fbdd31420697787e8d9c1c0912f406c0db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:93:8d:c4:8a:ae:83:26:a4:3c:82:f6:c7:ee:
                    00:97:61:00:e9:54:9c:48:77:de:1b:f2:2e:b2:6a:
                    9f:aa:3a:51:57:9e:76:96:65:15:05:fc:10:ba:54:
                    ef:b0:9c:f4:8a:a6:5f:75:7f:da:3b:ca:73:0d:e2:
                    c8:1d:aa:84:d7:78:e3:94:e7:9a:fd:d2:1e:b4:0a:
                    ea:76:61:24:cb:a8:c9:c5:08:ad:fd:7d:f2:29:1e:
                    f4:ce:13:92:17:0d:17:14:f8:5f:c0:ac:4f:18:ad:
                    b7:f4:aa:61:6b:49:42:20:23:bd:05:3e:e7:e5:c4:
                    51:84:03:fb:17:03:6a:fe:25:8e:3a:2c:fd:49:b0:
                    fd:2c:bd:2a:42:3e:95:18:c1:eb:a2:84:a6:1e:41:
                    cf:e6:f0:04:22:3f:18:93:9e:a1:92:df:dc:51:79:
                    85:32:a7:74:22:b7:79:8c:15:a7:ff:1c:79:3a:49:
                    a8:f7:9b:41:60:e4:8c:44:e7:20:c6:3b:61:ab:42:
                    cd:76:5e:db:85:bf:23:45:b8:e6:ff:89:c3:a0:ed:
                    1a:c7:12:00:42:bb:ad:e5:ae:39:3b:51:60:5a:41:
                    be:66:19:02:8b:48:67:1a:6e:61:50:ed:5c:0f:4a:
                    a3:d8:9c:80:5b:14:75:a3:81:9b:7f:db:b4:1f:f3:
                    53:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:72:AC:F8:9E:20:7A:AB:3E:D2:9D:04:5F:BD:8E:1F:CF:C9:C8:93
            X509v3 Authority Key Identifier:
                keyid:A1:4E:B0:DE:AF:9B:2C:FD:DB:07:DB:C8:15:ED:88:6B:F6:8C:50:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62384768198ac7dad2dedae543aedd0494c8f41c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/e33617fbdd31420697787e8d9c1c0912f406c0db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/62384768198ac7dad2dedae543aedd0494c8f41c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.208.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:44:0a:c1:4d:52:df:64:97:6d:53:57:fc:95:ac:dd:5c:d0:
         db:f8:83:4a:cf:90:20:51:fb:f5:f6:c5:09:66:f0:d7:d9:86:
         13:5a:05:43:5a:bb:7d:b0:59:ff:08:cb:66:78:07:ec:45:07:
         95:dc:15:61:5f:b4:9e:66:b3:89:f9:9c:83:21:a8:da:20:30:
         8f:93:d6:b9:e1:38:b9:b8:d0:b9:af:40:d7:a5:ee:8c:1c:8e:
         f4:1d:22:03:3d:33:99:f5:bd:60:a0:ec:a2:9e:01:65:d0:d4:
         16:d6:47:36:8d:8e:1d:16:62:36:e4:60:05:5d:98:db:20:ed:
         90:49:cf:32:2d:16:ec:4c:84:fe:60:7d:bf:7a:97:46:5e:f8:
         54:65:02:a2:0c:5c:89:7c:3a:8d:e2:2d:a9:a5:e9:40:e2:05:
         ed:86:51:eb:07:f1:6b:73:2f:b8:17:33:3e:7c:fb:74:c9:7c:
         31:4b:73:29:8b:ff:5d:7a:ba:87:dd:d9:47:1d:58:65:5c:c1:
         7c:61:55:48:8e:3f:cb:51:5d:7c:13:80:5f:20:09:95:fa:29:
         29:6f:47:de:67:a5:1e:29:32:c0:b4:ba:5d:26:fc:ea:9a:ab:
         11:21:aa:a9:99:61:17:03:e7:be:55:cc:48:cc:32:0f:bd:b4:
         ff:92:0e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:22 2024 by rpki-client on console-fra.rpki-client.org