Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/8e6a4731c02dd9e0573510c7e03f54bcee039f54.roa
File:                     8e6a4731c02dd9e0573510c7e03f54bcee039f54.roa (raw, json)
Hash identifier:          xAeYiKCEoIn3FMNG3zgJ7K3sY47fBYk0DveVjM8ncKk=
Subject key identifier:   F1:4A:61:04:C0:EA:1C:B1:A6:7E:54:75:24:6D:F6:46:CF:E6:04:96
Certificate issuer:       /CN=4165db8f57caba312629e89d611ea1f393351415
Certificate serial:       0B869D
Authority key identifier: 56:A0:E4:4C:F3:DE:53:57:C3:36:E4:3B:31:6D:75:17:E5:B0:B3:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4165db8f57caba312629e89d611ea1f393351415.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/8e6a4731c02dd9e0573510c7e03f54bcee039f54.roa
Signing time:             Wed 07 Feb 2024 18:08:45 +0000
ROA not before:           Wed 07 Feb 2024 18:08:45 +0000
ROA not after:            Sat 07 Feb 2026 18:08:45 +0000
asID:                     262191
IP address blocks:        190.109.29.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 755357 (0xb869d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4165db8f57caba312629e89d611ea1f393351415
        Validity
            Not Before: Feb  7 18:08:45 2024 GMT
            Not After : Feb  7 18:08:45 2026 GMT
        Subject: CN=8e6a4731c02dd9e0573510c7e03f54bcee039f54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ff:bc:99:71:e2:5e:8a:82:30:39:0a:62:5c:
                    3a:77:e6:bf:e4:42:3d:13:0d:1b:04:13:ec:3e:f7:
                    71:21:e2:cd:1d:8d:5a:ab:ac:b2:69:32:80:ec:7f:
                    77:54:c3:ec:e3:10:13:db:fd:a3:f6:7e:5a:07:8d:
                    45:de:41:78:90:52:f2:0b:ad:be:cb:04:75:01:3f:
                    ef:1b:a4:1b:f5:85:70:da:a5:77:34:d0:06:8f:f8:
                    4b:24:ec:6d:5f:6a:f4:08:6b:b8:06:08:72:57:bc:
                    b0:ce:48:3b:32:fe:95:5c:72:52:0e:de:c9:26:cd:
                    a7:56:04:1c:2d:e2:55:18:22:2e:2d:40:de:af:24:
                    ee:ab:55:83:a5:d6:e9:0e:6b:79:e0:0c:ab:94:de:
                    52:3e:f3:ef:f2:9a:b8:29:02:8c:51:d3:0c:c1:1e:
                    f6:f0:24:89:ef:cd:bf:43:e9:da:c3:25:e7:27:21:
                    d2:4e:03:da:35:f1:df:3a:c6:79:70:f0:22:7b:b3:
                    66:b2:e2:b8:50:62:c6:f0:31:e8:c0:00:57:2a:ab:
                    d9:01:71:6f:18:3e:52:6f:f5:88:26:6e:a0:9f:db:
                    ce:f9:41:5e:5f:86:11:b9:1b:59:4f:19:ec:d7:57:
                    d1:3c:0b:d5:f7:1f:a6:f4:64:d6:dc:4f:6b:1b:6d:
                    ca:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:4A:61:04:C0:EA:1C:B1:A6:7E:54:75:24:6D:F6:46:CF:E6:04:96
            X509v3 Authority Key Identifier:
                keyid:56:A0:E4:4C:F3:DE:53:57:C3:36:E4:3B:31:6D:75:17:E5:B0:B3:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4165db8f57caba312629e89d611ea1f393351415.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/8e6a4731c02dd9e0573510c7e03f54bcee039f54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/4165db8f57caba312629e89d611ea1f393351415.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:ed:f0:4b:62:9b:1c:bc:b6:49:73:db:dd:4b:ae:3b:90:ec:
         9c:99:0c:dd:8f:19:0a:b5:2e:aa:1f:af:23:b9:b8:b6:78:3d:
         47:17:fc:d2:73:2a:2a:ee:60:68:9c:8c:e1:f5:0c:63:c4:63:
         41:e8:84:bd:8e:81:0b:ee:37:1b:fe:53:f7:87:7f:cb:38:dc:
         0b:91:5b:49:37:b8:5a:ef:34:29:9c:81:7a:ab:1f:d9:14:41:
         7f:cc:7b:46:a0:c9:6a:f6:4f:3b:60:d7:ff:be:fb:c8:cc:b7:
         e2:dc:09:d5:00:de:f5:da:f3:21:39:fb:bf:0b:dd:18:67:52:
         fc:52:a4:c0:16:09:87:00:50:ba:1c:c3:07:28:1a:49:66:85:
         cc:97:5d:64:7d:2e:c4:38:51:50:24:99:b3:7c:1c:66:ba:13:
         50:72:24:ce:a9:9d:c0:4f:8e:89:33:bc:41:c3:eb:ce:9c:42:
         da:a5:c4:7c:bf:2e:f1:99:db:92:9f:7b:ba:6a:99:00:c3:d2:
         77:d7:75:4c:64:8f:80:c0:08:ee:01:44:b4:92:54:d1:3b:21:
         db:8e:03:d4:a5:30:00:c4:70:60:0c:f6:fd:80:9f:93:3e:b0:
         ab:6c:ac:ea:41:03:2e:c2:99:60:ae:3c:e0:fa:26:86:cf:c8:
         e4:92:15:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:38 2024 by rpki-client on console-ams.rpki-client.org