Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/015a9f90788efbbd90e0d427d4ce4fdceb741a85.roa
File:                     015a9f90788efbbd90e0d427d4ce4fdceb741a85.roa (raw, json)
Hash identifier:          QLSHpqJrbsLCkNbJHyoRR3ZSeFyHRzhBfB04ynfp/Y0=
Subject key identifier:   A8:BF:F3:2E:7A:7C:D6:82:9F:5C:35:4A:FB:11:66:4F:80:A2:80:9E
Certificate issuer:       /CN=4165db8f57caba312629e89d611ea1f393351415
Certificate serial:       0B7500
Authority key identifier: 56:A0:E4:4C:F3:DE:53:57:C3:36:E4:3B:31:6D:75:17:E5:B0:B3:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4165db8f57caba312629e89d611ea1f393351415.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/015a9f90788efbbd90e0d427d4ce4fdceb741a85.roa
Signing time:             Wed 07 Feb 2024 18:02:27 +0000
ROA not before:           Wed 07 Feb 2024 18:02:27 +0000
ROA not after:            Sat 07 Feb 2026 18:02:27 +0000
asID:                     262191
IP address blocks:        190.109.23.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 750848 (0xb7500)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4165db8f57caba312629e89d611ea1f393351415
        Validity
            Not Before: Feb  7 18:02:27 2024 GMT
            Not After : Feb  7 18:02:27 2026 GMT
        Subject: CN=015a9f90788efbbd90e0d427d4ce4fdceb741a85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:18:c7:8f:28:ae:e0:3f:1f:0f:06:7b:24:96:
                    de:7c:4f:47:44:6d:3a:7e:67:b6:61:a0:c4:69:4d:
                    32:ba:74:ee:50:45:88:92:fe:f3:db:c2:46:16:95:
                    77:f8:60:17:8a:f9:7d:c0:12:f7:29:82:db:5b:91:
                    0d:56:57:a0:0d:a9:1f:8e:90:cc:0d:0d:e6:f4:0a:
                    06:b2:0d:76:8b:78:be:81:40:95:5e:0e:20:3e:a6:
                    31:30:dc:ed:fa:e2:01:1d:9a:ab:48:e3:03:6a:c3:
                    b6:ac:e3:2a:79:ce:a6:72:49:2d:89:3b:41:eb:e4:
                    b0:0a:5a:92:71:a7:68:dd:45:2b:79:cf:8a:a2:5f:
                    1e:92:9d:ad:c1:20:df:08:44:cd:5c:43:af:72:e1:
                    41:2b:7d:db:19:88:ba:63:1b:0c:df:5b:f0:99:8d:
                    43:bb:f0:d1:7d:c6:a3:fe:96:6c:01:8e:35:19:b5:
                    70:54:cb:aa:5c:d9:44:8b:bf:7d:31:05:38:ce:a7:
                    0f:be:30:b9:16:e6:a4:89:11:6d:1c:c4:53:bf:e3:
                    6f:5b:1a:c6:64:f6:f4:64:c4:c2:39:85:90:e3:df:
                    fa:3d:20:0d:95:6e:6b:e8:f6:d3:1f:87:b6:7e:c7:
                    6c:d8:ee:a1:59:ae:12:c7:16:42:1d:ca:bb:59:5a:
                    a4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:BF:F3:2E:7A:7C:D6:82:9F:5C:35:4A:FB:11:66:4F:80:A2:80:9E
            X509v3 Authority Key Identifier:
                keyid:56:A0:E4:4C:F3:DE:53:57:C3:36:E4:3B:31:6D:75:17:E5:B0:B3:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4165db8f57caba312629e89d611ea1f393351415.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/015a9f90788efbbd90e0d427d4ce4fdceb741a85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/4165db8f57caba312629e89d611ea1f393351415.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:a6:ea:4c:b9:e4:c7:b1:b0:56:5a:05:92:61:cd:29:fb:45:
         0e:a2:83:c7:b1:f9:37:dc:2b:af:7a:1a:50:3b:fa:09:15:14:
         8c:ee:b1:ba:41:19:e4:22:c7:01:76:7e:c3:08:d9:ea:98:3b:
         c9:6e:6d:8c:34:08:05:45:1e:72:aa:38:5e:f4:5a:9a:5d:f2:
         ed:af:e2:87:5e:0b:a1:ef:f3:44:b7:35:03:2e:7e:1d:bc:77:
         53:b4:0d:f7:3e:47:f2:2b:fb:8e:ce:34:4d:c7:3f:7a:39:a2:
         3c:d7:01:3a:0f:4b:0e:4d:a2:ca:33:0c:df:42:9d:89:45:46:
         44:18:41:f1:11:35:c0:32:8a:ad:50:e6:60:c5:24:81:15:53:
         7b:c5:33:e1:ec:26:be:f1:89:f8:ec:ef:a1:96:ad:cc:07:13:
         2c:8a:78:b1:76:ae:6f:e8:69:5d:2e:9a:94:9e:43:cf:16:de:
         d9:38:07:b0:91:7f:8f:50:3d:84:a6:c6:02:38:9f:1a:88:d5:
         ae:62:d1:50:2e:8b:fa:ad:e4:7e:bb:3e:78:38:af:50:ec:cd:
         0f:a3:7b:84:40:ae:e1:6f:29:23:dc:87:b6:bf:51:fa:ce:82:
         70:e4:26:fa:f3:4b:41:94:26:19:b8:62:1f:c4:ee:04:77:34:
         4a:80:19:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:38 2024 by rpki-client on console-ams.rpki-client.org