Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/0a286f7f6f9d8559328e864a893efc45709fddfb.roa
File:                     0a286f7f6f9d8559328e864a893efc45709fddfb.roa (raw, json)
Hash identifier:          2gPrdgGHClJd+Nd5+K/7IzPWt4sOceFpnsld+Uf5YvQ=
Subject key identifier:   AF:B1:9E:1D:6F:8C:00:4F:D6:D0:5C:6E:8D:A0:C7:01:A2:10:22:DC
Certificate issuer:       /CN=4165db8f57caba312629e89d611ea1f393351415
Certificate serial:       0B59EF
Authority key identifier: 56:A0:E4:4C:F3:DE:53:57:C3:36:E4:3B:31:6D:75:17:E5:B0:B3:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4165db8f57caba312629e89d611ea1f393351415.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/0a286f7f6f9d8559328e864a893efc45709fddfb.roa
Signing time:             Tue 06 Feb 2024 19:13:00 +0000
ROA not before:           Tue 06 Feb 2024 19:13:00 +0000
ROA not after:            Fri 06 Feb 2026 19:13:00 +0000
asID:                     262191
IP address blocks:        190.109.16.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 743919 (0xb59ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4165db8f57caba312629e89d611ea1f393351415
        Validity
            Not Before: Feb  6 19:13:00 2024 GMT
            Not After : Feb  6 19:13:00 2026 GMT
        Subject: CN=0a286f7f6f9d8559328e864a893efc45709fddfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e0:53:e2:b7:fa:51:f5:93:6e:3c:38:f1:61:
                    21:5d:d7:2c:43:44:10:78:38:f3:ae:ef:66:17:5f:
                    0d:29:da:d3:94:e8:8a:f3:2c:3d:fc:07:9e:0b:5a:
                    ee:71:3d:f0:4e:01:f3:15:1a:1d:fd:96:ec:08:9b:
                    45:02:ee:da:f2:3b:e8:c4:d2:f2:68:7d:07:9b:c9:
                    76:39:ae:78:99:9b:1b:39:c8:b3:37:92:95:85:d6:
                    0f:c2:78:4e:49:9b:8b:3f:04:ba:b1:bf:5b:92:d9:
                    ba:23:99:db:33:b5:2a:5f:22:3b:79:77:47:b1:70:
                    22:60:e7:6a:b5:a2:53:2a:8b:0a:22:72:c6:d9:79:
                    d1:e9:69:f5:c0:d5:02:b4:d5:27:c2:45:40:3e:50:
                    98:1a:e3:a6:7d:4f:44:37:a0:8e:86:13:9d:e1:39:
                    9a:66:9b:24:2d:85:e7:62:db:36:9a:e2:96:16:ca:
                    6b:39:68:85:a6:16:69:d8:47:19:87:45:45:a6:b7:
                    6f:ef:96:b6:eb:87:94:f5:4b:0b:a2:35:f0:81:10:
                    4c:93:f2:88:b3:d0:ea:4c:1d:af:f2:fd:b8:63:62:
                    d3:91:45:26:57:4a:e8:8b:d5:be:52:5f:dc:96:4c:
                    f9:af:b5:c8:a1:48:8c:2c:36:07:9c:79:a2:49:3f:
                    be:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B1:9E:1D:6F:8C:00:4F:D6:D0:5C:6E:8D:A0:C7:01:A2:10:22:DC
            X509v3 Authority Key Identifier:
                keyid:56:A0:E4:4C:F3:DE:53:57:C3:36:E4:3B:31:6D:75:17:E5:B0:B3:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4165db8f57caba312629e89d611ea1f393351415.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/0a286f7f6f9d8559328e864a893efc45709fddfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/4165db8f57caba312629e89d611ea1f393351415.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:f1:c9:df:dc:2d:ca:2d:cf:d7:ae:a3:ce:8c:53:f0:4b:cf:
         1f:4e:07:22:f9:f4:99:95:08:5e:cf:7f:29:29:d3:68:64:f4:
         9c:7a:ca:91:3a:66:3e:72:93:19:cb:10:a2:79:72:32:30:a5:
         ff:55:4c:83:4b:f6:67:89:f0:fb:29:ea:e2:6a:8c:69:d7:7d:
         ed:a6:5b:bc:da:34:3a:97:c6:82:d0:9c:5a:7d:e4:fb:4c:ed:
         2f:d6:ed:e6:81:db:96:83:6f:f0:fb:4c:99:65:2c:3d:11:69:
         17:a2:ab:af:41:38:f6:7b:7f:09:6d:3a:a1:d5:bd:2c:2d:46:
         bf:37:d2:e3:ce:47:c7:8f:aa:e9:b0:3b:97:55:a4:80:cd:dc:
         2c:00:ae:df:31:de:e3:f2:32:79:7a:4d:80:0e:05:f8:81:b2:
         f4:35:56:50:d3:d5:33:66:15:32:58:83:2c:d9:9f:f5:2e:06:
         bb:28:62:b9:e1:a2:9d:aa:08:38:09:9b:d4:a6:6d:5e:3f:24:
         97:70:50:45:be:30:38:42:fc:87:65:c4:e1:e7:94:89:6c:56:
         a3:53:47:92:f9:2a:54:cc:04:cc:3e:27:f8:48:c8:cc:45:e4:
         52:ea:dd:c8:13:90:61:d8:30:69:9c:38:90:e4:8d:7e:1e:91:
         00:8a:31:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:22 2024 by rpki-client on console-fra.rpki-client.org