Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/1e28761fb291f0a30587d1b9d29674e2e8a90ec2.roa
File:                     1e28761fb291f0a30587d1b9d29674e2e8a90ec2.roa (raw, json)
Hash identifier:          wiFOe2IIkitk6U4w7MtaisiH/GglaTVJfjAi7NL38IM=
Subject key identifier:   0A:F9:60:1F:23:9E:47:1B:28:31:0C:CF:78:23:35:65:EA:48:A3:07
Certificate issuer:       /CN=4165db8f57caba312629e89d611ea1f393351415
Certificate serial:       0B6B97
Authority key identifier: 56:A0:E4:4C:F3:DE:53:57:C3:36:E4:3B:31:6D:75:17:E5:B0:B3:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4165db8f57caba312629e89d611ea1f393351415.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/1e28761fb291f0a30587d1b9d29674e2e8a90ec2.roa
Signing time:             Wed 07 Feb 2024 18:00:56 +0000
ROA not before:           Wed 07 Feb 2024 18:00:56 +0000
ROA not after:            Sat 07 Feb 2026 18:00:56 +0000
asID:                     262191
IP address blocks:        190.109.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 748439 (0xb6b97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4165db8f57caba312629e89d611ea1f393351415
        Validity
            Not Before: Feb  7 18:00:56 2024 GMT
            Not After : Feb  7 18:00:56 2026 GMT
        Subject: CN=1e28761fb291f0a30587d1b9d29674e2e8a90ec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e9:a9:9c:9f:68:16:af:26:97:ae:ed:9f:4c:
                    c7:e0:74:72:a6:7e:c2:1e:ad:d5:81:0f:c6:52:64:
                    b3:64:02:13:8f:c2:00:57:02:db:40:bf:47:f3:83:
                    0d:d7:be:82:7d:f6:74:85:56:2c:0d:00:f3:15:0e:
                    5d:c4:cd:8b:3b:10:40:17:18:d2:3e:71:76:b3:c3:
                    78:49:fe:bf:2e:55:26:e0:be:37:9a:fc:3e:1e:f4:
                    70:98:9f:82:1f:5d:d6:95:23:6f:5a:e4:87:ba:67:
                    8d:63:fb:b7:16:f8:2a:5d:ff:f1:ce:5f:e2:d6:5b:
                    be:de:58:fe:d4:9c:db:02:90:4c:4b:23:14:a9:cc:
                    b0:50:2a:65:59:5b:4e:4b:fd:35:a3:9d:21:fe:20:
                    63:6c:58:4d:46:f3:07:72:22:a2:5a:16:93:be:e8:
                    80:a4:b3:5b:1c:cc:0f:fb:fe:b1:29:fd:6a:8c:59:
                    1b:bb:84:26:b5:0c:78:4c:3b:6b:a9:57:3b:ca:ff:
                    16:ce:56:ac:89:6b:d6:95:6e:f0:3b:06:b5:a7:2f:
                    a4:52:d2:a2:5d:1c:cb:27:3b:eb:7d:59:b2:e8:af:
                    01:65:c9:66:a2:8e:6b:a5:5f:3d:ca:0d:e9:a2:1d:
                    69:63:2e:a5:bf:3b:8b:84:0c:e4:28:25:1e:13:88:
                    45:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F9:60:1F:23:9E:47:1B:28:31:0C:CF:78:23:35:65:EA:48:A3:07
            X509v3 Authority Key Identifier:
                keyid:56:A0:E4:4C:F3:DE:53:57:C3:36:E4:3B:31:6D:75:17:E5:B0:B3:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4165db8f57caba312629e89d611ea1f393351415.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/1e28761fb291f0a30587d1b9d29674e2e8a90ec2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/4165db8f57caba312629e89d611ea1f393351415.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:1a:76:c0:e0:be:f8:5c:ff:58:ba:07:fc:f0:af:98:c9:1b:
         7a:24:fb:9a:05:1f:50:4b:16:e8:10:2e:82:aa:a3:11:5f:6d:
         a0:81:2f:7e:7b:c5:61:a1:52:9c:8b:18:93:f0:d1:e7:54:e4:
         78:d0:33:76:3e:26:6b:3d:d7:a9:ff:17:35:09:1f:d9:da:52:
         59:fb:6d:9f:9e:b2:fd:9d:77:e1:5b:05:bd:11:ae:2f:ce:3c:
         09:69:81:68:f7:9f:e8:62:fa:a4:dc:68:36:c8:2e:bd:b1:a9:
         02:59:3e:2d:b0:82:53:c8:0c:9e:c4:9a:3f:8c:16:7e:d3:24:
         0e:60:23:19:d1:f8:76:4e:dd:7f:24:6d:8c:6f:75:04:ce:60:
         ed:04:a7:92:58:19:d8:b1:f7:2b:a2:cf:64:b8:dc:c6:67:58:
         9d:29:e9:51:b4:e8:c1:05:e0:da:73:86:e6:ee:07:91:1f:3d:
         df:32:ca:99:5d:bd:95:84:15:32:43:8e:e5:25:10:c4:cc:36:
         4d:b2:58:e3:05:2f:5b:3a:61:a1:95:a5:f8:84:d1:33:aa:e7:
         27:33:65:cd:63:71:62:13:13:b5:de:1b:90:4d:1c:77:82:a1:
         c1:e5:7e:a9:36:ae:1a:67:9b:43:c5:19:31:7c:5f:a4:a8:da:
         db:7b:f8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:22 2024 by rpki-client on console-fra.rpki-client.org