Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/7dac9c28452c1bf704bf90a334fc3e849334099b.roa
File:                     7dac9c28452c1bf704bf90a334fc3e849334099b.roa (raw, json)
Hash identifier:          QXzL/pIb+N0AyRYUYCw5n3MhFXGnx8y4t/tfuA0ksMQ=
Subject key identifier:   B6:A7:9D:1B:41:59:77:69:C9:B8:CA:8C:11:89:E2:E5:41:70:33:55
Certificate issuer:       /CN=4165db8f57caba312629e89d611ea1f393351415
Certificate serial:       0B52EA
Authority key identifier: 56:A0:E4:4C:F3:DE:53:57:C3:36:E4:3B:31:6D:75:17:E5:B0:B3:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4165db8f57caba312629e89d611ea1f393351415.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/7dac9c28452c1bf704bf90a334fc3e849334099b.roa
Signing time:             Tue 06 Feb 2024 19:12:42 +0000
ROA not before:           Tue 06 Feb 2024 19:12:42 +0000
ROA not after:            Fri 06 Feb 2026 19:12:42 +0000
asID:                     262191
IP address blocks:        190.109.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 742122 (0xb52ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4165db8f57caba312629e89d611ea1f393351415
        Validity
            Not Before: Feb  6 19:12:42 2024 GMT
            Not After : Feb  6 19:12:42 2026 GMT
        Subject: CN=7dac9c28452c1bf704bf90a334fc3e849334099b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:88:d5:85:c7:b4:99:29:e5:3d:5d:de:90:c7:
                    0e:8a:81:07:ef:a6:0e:c5:3a:06:dc:f8:bf:a1:cb:
                    ac:85:73:23:cb:51:58:27:29:86:b3:31:f5:6a:17:
                    0b:e1:74:63:2f:8d:39:b2:b0:14:83:02:ef:9a:f8:
                    06:ea:9b:3e:17:25:f2:39:31:8c:a8:b0:2a:01:16:
                    c1:43:42:bf:8c:fd:7b:92:45:13:b1:74:c2:41:b9:
                    18:b7:12:17:83:39:a0:14:0b:1c:b1:08:da:a8:eb:
                    52:27:78:78:7d:7b:2d:90:e9:c9:26:69:a0:a6:74:
                    cc:da:c9:b0:9a:e2:d1:9b:0b:30:da:b2:f9:fe:52:
                    17:fb:8f:57:f0:88:4a:f2:bc:bd:ce:47:b7:c9:13:
                    a4:2e:82:0a:31:58:3f:f6:52:bb:f6:3b:f9:ce:16:
                    21:8e:f0:97:7e:09:95:20:c0:37:7c:65:78:47:0c:
                    01:7a:a9:59:c3:b5:5c:fe:de:33:70:51:f8:b9:88:
                    c3:5c:46:b8:87:ca:a3:1c:94:cd:f0:a0:78:eb:95:
                    37:c5:d6:5d:7d:05:c9:d9:30:b3:5d:4e:32:c9:a4:
                    50:06:5e:82:91:73:e6:cd:af:de:04:94:77:47:84:
                    1f:5f:cc:b4:75:a4:39:bf:7e:fa:9c:23:e4:45:b4:
                    71:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A7:9D:1B:41:59:77:69:C9:B8:CA:8C:11:89:E2:E5:41:70:33:55
            X509v3 Authority Key Identifier:
                keyid:56:A0:E4:4C:F3:DE:53:57:C3:36:E4:3B:31:6D:75:17:E5:B0:B3:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4165db8f57caba312629e89d611ea1f393351415.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/7dac9c28452c1bf704bf90a334fc3e849334099b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/4165db8f57caba312629e89d611ea1f393351415.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:27:e4:6c:bf:1f:77:0f:05:5a:de:15:e5:03:bf:0f:db:e8:
         93:8c:ed:95:31:d3:e2:16:ba:14:da:f9:c5:cd:d5:52:7b:05:
         0f:7d:a6:64:e6:bb:30:df:42:3e:9a:fb:b5:f6:b1:64:58:9a:
         56:25:66:96:ae:31:03:ca:ab:24:bf:43:0e:fa:94:30:76:70:
         3e:51:24:86:99:20:9e:33:7b:b7:b7:f5:28:cf:39:62:6f:3d:
         84:5c:cb:1c:1d:4c:06:61:b5:1a:01:f5:c2:f0:14:4d:dd:de:
         22:71:62:65:17:e3:35:d2:39:50:5c:ad:a1:23:eb:8d:da:13:
         93:9b:20:59:ee:9d:b1:07:d4:59:d9:eb:8b:64:0b:5e:cb:e6:
         85:96:f7:f6:5a:e6:eb:1b:64:a7:ac:a2:0e:57:ad:24:6f:67:
         69:0f:37:55:74:bf:b3:e1:4e:22:6b:fc:36:be:15:02:64:d0:
         5d:11:73:75:68:bb:27:08:67:9d:5e:98:74:41:c6:7e:cd:2b:
         9a:12:77:c4:55:e9:a9:e1:f5:c7:9d:bd:84:2b:c4:25:ce:ea:
         36:69:6f:d6:84:42:df:5f:e8:ff:3f:5a:8e:d8:e3:7e:f7:d2:
         18:fb:f3:e0:53:2d:be:14:36:60:dc:d2:5a:b6:2d:93:a2:bd:
         87:e7:a8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:22 2024 by rpki-client on console-fra.rpki-client.org