Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/ac8e8e7fefbb9fbf4615d9b9c5f80a637512519d.roa
File:                     ac8e8e7fefbb9fbf4615d9b9c5f80a637512519d.roa (raw, json)
Hash identifier:          RvkGylmlRh1Hh129VLqL5OOw2OvSiQuI1eu+AmZpXfo=
Subject key identifier:   8C:84:B3:7D:8D:10:A9:C0:8E:3F:71:E9:13:26:2E:63:F6:5B:96:F3
Certificate issuer:       /CN=4165db8f57caba312629e89d611ea1f393351415
Certificate serial:       0B6F8D
Authority key identifier: 56:A0:E4:4C:F3:DE:53:57:C3:36:E4:3B:31:6D:75:17:E5:B0:B3:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4165db8f57caba312629e89d611ea1f393351415.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/ac8e8e7fefbb9fbf4615d9b9c5f80a637512519d.roa
Signing time:             Wed 07 Feb 2024 18:01:37 +0000
ROA not before:           Wed 07 Feb 2024 18:01:37 +0000
ROA not after:            Sat 07 Feb 2026 18:01:37 +0000
asID:                     262191
IP address blocks:        190.109.22.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 749453 (0xb6f8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4165db8f57caba312629e89d611ea1f393351415
        Validity
            Not Before: Feb  7 18:01:37 2024 GMT
            Not After : Feb  7 18:01:37 2026 GMT
        Subject: CN=ac8e8e7fefbb9fbf4615d9b9c5f80a637512519d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a0:98:ff:ef:e6:8f:8d:34:82:60:ad:5b:ae:
                    c6:63:f1:33:96:0d:b9:de:4f:b3:6b:4b:35:1d:b6:
                    ad:80:3e:24:3b:7c:49:f1:13:31:9a:b2:28:24:9a:
                    4c:94:c3:c3:4d:ba:4b:c4:8f:57:34:7a:ab:3a:20:
                    33:c8:a5:7b:c2:44:2f:ff:6a:52:e6:01:1e:18:e8:
                    41:fa:28:e9:d7:f4:92:92:88:b9:9b:e2:78:df:d1:
                    f3:33:77:0d:b4:95:3b:e5:00:36:93:80:7d:6b:d6:
                    16:94:a2:32:22:7b:0d:e7:61:16:a6:a1:13:ab:9e:
                    44:85:18:e9:2a:6e:81:e0:23:85:3a:2b:ad:18:6e:
                    61:57:bd:c8:45:bb:9f:ba:b4:d2:01:0b:6b:d0:69:
                    b5:fa:2f:0c:fc:b6:fb:20:00:a6:16:59:38:10:87:
                    85:35:5a:60:f7:2e:c2:d6:4a:43:ee:d1:69:31:60:
                    ae:89:06:54:3a:c5:ba:41:a4:65:dd:32:92:96:7a:
                    50:65:6e:32:97:05:17:9c:e8:fd:24:57:f7:19:f1:
                    2f:18:1c:63:c2:20:8f:5d:01:0e:b3:c2:eb:c5:24:
                    08:b3:a3:47:4b:5e:96:d9:3d:55:59:5e:64:41:91:
                    c7:84:9b:b8:5c:97:f4:a5:5a:a9:d9:e6:60:9b:c5:
                    1b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:84:B3:7D:8D:10:A9:C0:8E:3F:71:E9:13:26:2E:63:F6:5B:96:F3
            X509v3 Authority Key Identifier:
                keyid:56:A0:E4:4C:F3:DE:53:57:C3:36:E4:3B:31:6D:75:17:E5:B0:B3:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4165db8f57caba312629e89d611ea1f393351415.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/ac8e8e7fefbb9fbf4615d9b9c5f80a637512519d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/4165db8f57caba312629e89d611ea1f393351415.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:10:af:ac:b6:73:01:a7:8d:5c:e4:6f:36:f0:d9:e2:3e:4b:
         c1:a3:f7:51:24:f8:11:f0:69:36:0a:12:bd:fb:4b:eb:a1:2e:
         c4:27:08:ef:ef:be:73:13:e5:9e:97:49:a6:11:57:0f:ea:54:
         e5:4d:02:fc:41:f8:d0:b9:01:49:21:9c:ff:1b:33:1d:56:0f:
         a7:c0:d6:2a:1c:d6:ab:b0:ce:93:7b:1e:54:34:24:78:00:f4:
         5a:06:41:9e:c6:ed:65:4b:5f:91:f0:ac:f4:20:d5:dc:fd:eb:
         20:8a:cf:75:ea:a5:f2:c8:14:48:45:22:62:17:06:42:b8:0e:
         02:ac:78:f6:fa:47:75:15:78:31:fc:6d:15:2e:9f:bd:2d:c8:
         5e:9b:ad:12:53:c3:ed:2d:e7:18:19:4d:e2:a4:ff:28:91:5b:
         34:3d:85:31:e9:62:3b:8e:02:b5:94:ac:50:c4:f4:72:90:18:
         58:ba:74:03:33:aa:de:ec:06:03:d6:09:c4:a3:9e:ee:59:8c:
         a6:f0:ca:cc:09:a9:c2:42:cd:32:c7:95:0a:3f:64:53:0f:b6:
         5a:d8:47:68:85:3c:2a:99:52:a1:7e:1c:1b:9a:3b:70:c7:62:
         45:2c:8e:65:0e:50:94:80:27:5f:b5:11:a7:b9:f5:91:72:31:
         b9:2b:f5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:38 2024 by rpki-client on console-ams.rpki-client.org