Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/099da1ab98739dc01b54558280a9fb08ded3f543.roa
File:                     099da1ab98739dc01b54558280a9fb08ded3f543.roa (raw, json)
Hash identifier:          msy9EgcUIXbDdhTJP1UWxhKsbAVnWum7krYRcSzOnsw=
Subject key identifier:   1C:01:E4:54:DC:6A:8A:8B:63:3F:99:2A:08:20:13:75:C9:D5:59:21
Certificate issuer:       /CN=4165db8f57caba312629e89d611ea1f393351415
Certificate serial:       0B1C2C
Authority key identifier: 56:A0:E4:4C:F3:DE:53:57:C3:36:E4:3B:31:6D:75:17:E5:B0:B3:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4165db8f57caba312629e89d611ea1f393351415.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/099da1ab98739dc01b54558280a9fb08ded3f543.roa
Signing time:             Mon 05 Feb 2024 21:54:56 +0000
ROA not before:           Mon 05 Feb 2024 21:54:56 +0000
ROA not after:            Thu 05 Feb 2026 21:54:56 +0000
asID:                     262191
IP address blocks:        190.109.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 728108 (0xb1c2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4165db8f57caba312629e89d611ea1f393351415
        Validity
            Not Before: Feb  5 21:54:56 2024 GMT
            Not After : Feb  5 21:54:56 2026 GMT
        Subject: CN=099da1ab98739dc01b54558280a9fb08ded3f543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bd:aa:e6:50:7e:2f:59:1a:fc:16:f1:9e:7f:
                    ab:e6:92:f1:18:38:9f:77:9d:35:d1:fc:68:2d:06:
                    c4:ca:56:91:f8:fb:0b:8d:3e:e8:07:ca:63:12:fc:
                    6b:c1:9a:97:6c:d9:50:08:14:34:17:ba:2f:5f:7c:
                    9f:b5:72:0b:ee:6d:10:cb:67:4a:aa:ff:5a:06:ab:
                    ff:19:42:92:2a:88:bc:55:5f:51:dd:f5:0e:13:f5:
                    33:f8:da:ad:d9:53:67:d2:ce:cf:f2:b6:f9:6d:81:
                    26:d5:b2:b9:62:ba:9a:10:e7:fe:9f:cb:40:89:67:
                    5f:c9:42:f9:45:1c:1c:65:b8:ec:ba:53:dd:03:db:
                    ec:b6:f1:eb:e9:33:cc:3b:d5:12:6d:fd:f4:e1:09:
                    37:73:c9:ee:32:1d:91:33:5a:4c:4e:a8:1c:92:49:
                    91:68:c5:f4:96:50:4c:b6:51:77:ac:81:62:d8:0e:
                    9f:27:16:f3:3a:fa:5b:66:52:0f:b5:fe:28:5a:66:
                    56:b9:52:04:00:f3:a0:fe:97:6d:ea:d5:47:4a:70:
                    e4:a8:ab:71:f9:f0:49:f3:67:3e:2f:67:61:51:4c:
                    36:cc:58:03:f1:e1:34:7a:8e:80:a1:07:c6:4d:d7:
                    b9:d7:0c:aa:9a:e6:09:d9:68:1c:19:f0:3a:26:85:
                    8e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:01:E4:54:DC:6A:8A:8B:63:3F:99:2A:08:20:13:75:C9:D5:59:21
            X509v3 Authority Key Identifier:
                keyid:56:A0:E4:4C:F3:DE:53:57:C3:36:E4:3B:31:6D:75:17:E5:B0:B3:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4165db8f57caba312629e89d611ea1f393351415.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/099da1ab98739dc01b54558280a9fb08ded3f543.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/4165db8f57caba312629e89d611ea1f393351415.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:1d:8b:7a:c6:c9:63:da:ce:90:10:5c:7d:44:a5:01:c0:a8:
         1f:c8:36:a1:2f:7f:4a:51:ec:ad:b8:b8:34:d2:6e:fc:53:14:
         b4:44:34:d8:e4:7b:c6:ef:10:11:ae:c1:80:1d:2d:0f:80:c3:
         63:3a:4e:84:a0:13:3c:07:f1:2c:34:95:54:2f:63:1b:e8:69:
         b6:d8:de:87:97:b9:b9:6f:c1:2d:35:77:da:ab:c3:bb:25:1a:
         bf:db:7d:5d:ce:ed:5a:ca:9e:5f:1c:96:e8:11:ff:18:07:38:
         fc:42:74:13:87:a1:f0:a7:2f:d9:05:66:e0:3e:86:3b:1b:6e:
         25:50:44:78:69:6f:19:3c:8e:92:9c:d5:26:72:a5:80:7b:75:
         2c:c0:55:82:09:92:11:7f:50:63:5e:a5:d4:93:45:5c:eb:48:
         ff:3e:5a:fc:f3:c1:5a:70:38:03:9e:a9:ee:03:0b:51:e0:cb:
         09:6e:26:11:11:e6:31:26:f5:39:a1:97:64:23:12:6a:eb:f4:
         5e:3f:b3:7c:de:97:e0:2c:54:b2:cc:ef:66:fc:b9:2b:3f:54:
         b0:d4:b6:bf:ef:53:0b:08:fe:20:23:28:6e:50:14:12:40:c1:
         41:c4:f8:bf:33:6d:0d:5f:0d:e4:43:8c:0b:2c:14:bf:d1:8a:
         01:b8:f1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:22 2024 by rpki-client on console-fra.rpki-client.org