Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/3aa86931966f4baee4cfdaf1308e97c8a3607ccc.roa
File:                     3aa86931966f4baee4cfdaf1308e97c8a3607ccc.roa (raw, json)
Hash identifier:          UOfzl2e+Psw8bjHEchlOKJHoj0amLPrEGKregikBXS0=
Subject key identifier:   78:02:CC:ED:C0:FF:DE:28:F4:14:2E:A4:AB:53:DE:66:56:7D:8E:66
Certificate issuer:       /CN=4165db8f57caba312629e89d611ea1f393351415
Certificate serial:       0B15C3
Authority key identifier: 56:A0:E4:4C:F3:DE:53:57:C3:36:E4:3B:31:6D:75:17:E5:B0:B3:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4165db8f57caba312629e89d611ea1f393351415.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/3aa86931966f4baee4cfdaf1308e97c8a3607ccc.roa
Signing time:             Mon 05 Feb 2024 21:52:14 +0000
ROA not before:           Mon 05 Feb 2024 21:52:13 +0000
ROA not after:            Thu 05 Feb 2026 21:52:13 +0000
asID:                     262191
IP address blocks:        190.109.2.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 726467 (0xb15c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4165db8f57caba312629e89d611ea1f393351415
        Validity
            Not Before: Feb  5 21:52:13 2024 GMT
            Not After : Feb  5 21:52:13 2026 GMT
        Subject: CN=3aa86931966f4baee4cfdaf1308e97c8a3607ccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:25:f8:61:50:ba:c2:33:51:d3:c8:f0:71:97:
                    18:b9:81:40:ce:5a:b7:8a:ad:45:49:d1:de:7d:10:
                    46:b8:f2:9e:51:08:74:ed:e9:79:d4:52:b7:be:86:
                    1e:43:b5:d6:9c:82:ec:ab:ea:9b:6a:48:54:b1:3d:
                    b7:1a:4e:05:52:17:38:16:46:9d:7f:9b:e1:ae:0f:
                    36:eb:4c:57:d9:1b:cd:9e:00:4d:e2:e9:4b:20:c8:
                    9e:0a:36:7c:27:aa:9f:83:17:e1:4b:94:79:32:9a:
                    3d:ee:a5:f1:50:66:ff:47:50:ab:e4:48:6d:38:29:
                    2a:50:24:89:6c:d2:1f:db:16:f3:c5:5a:95:07:18:
                    0f:05:59:9f:9b:0d:8d:ab:f8:c8:2d:19:86:cc:17:
                    fd:a7:88:66:2f:c5:39:bb:0b:87:81:c8:5c:5c:c3:
                    63:1f:ad:cc:4d:e8:e3:a6:a0:dc:af:c9:88:64:1c:
                    b9:81:ab:1f:5f:41:5d:01:2f:8d:7f:95:b1:2d:1e:
                    5c:6f:4c:cf:5e:f4:04:29:29:c7:4a:1c:db:2b:7a:
                    05:78:c2:dd:05:1b:55:9c:22:fc:c0:1f:4b:81:33:
                    77:02:d7:5c:77:2f:cc:89:b6:fb:0c:55:2c:1f:d6:
                    d9:e9:dd:bf:1b:cd:f3:66:f1:f9:89:c4:78:8b:b1:
                    26:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:02:CC:ED:C0:FF:DE:28:F4:14:2E:A4:AB:53:DE:66:56:7D:8E:66
            X509v3 Authority Key Identifier:
                keyid:56:A0:E4:4C:F3:DE:53:57:C3:36:E4:3B:31:6D:75:17:E5:B0:B3:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4165db8f57caba312629e89d611ea1f393351415.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/3aa86931966f4baee4cfdaf1308e97c8a3607ccc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/4165db8f57caba312629e89d611ea1f393351415.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:09:58:0a:61:60:50:5e:39:ad:68:c0:c0:9f:53:13:57:2b:
         55:39:a9:9f:72:b0:34:d6:dd:93:3e:74:75:c4:9d:28:d0:d4:
         8f:02:00:7c:c7:fc:ae:ed:5a:35:fd:69:f0:b2:c8:0e:87:66:
         6f:1a:96:a6:af:a9:c7:51:0c:f2:20:6a:67:d5:da:14:5a:92:
         06:31:34:66:94:dd:1f:f3:69:02:df:8b:5f:24:53:01:25:e4:
         74:99:51:74:84:54:98:44:37:e1:cb:69:8d:88:36:81:ab:61:
         e9:f0:41:e5:62:07:5b:9f:75:95:4d:a6:88:57:d1:e8:11:10:
         5b:a4:8f:00:6c:f8:a6:9f:42:ee:b2:12:89:8a:f8:a4:cc:09:
         21:e1:e3:51:d0:01:fa:69:2f:5a:f1:b9:fc:1d:2d:cc:eb:25:
         25:09:a2:9c:60:d6:6e:71:a4:94:18:9f:21:66:ee:18:a6:2a:
         ea:f7:de:6e:28:1e:78:0d:4c:aa:58:44:08:5b:c7:6f:be:ab:
         5b:98:06:65:69:d3:67:12:59:48:7b:0a:83:eb:f7:71:28:65:
         62:60:a2:9c:49:0d:17:01:1d:66:da:0a:6d:88:f2:cd:cd:8e:
         ae:5e:e7:da:02:1f:53:b4:79:e2:35:73:c9:e8:a8:1e:b2:35:
         bc:a8:03:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:22 2024 by rpki-client on console-fra.rpki-client.org