Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/c8ebea6fdf134010c152c47c45856036e5f260a5.roa
File:                     c8ebea6fdf134010c152c47c45856036e5f260a5.roa (raw, json)
Hash identifier:          93JXupzgzCw18NWzTLmkWG/t9/IhITYak2sWgUlswow=
Subject key identifier:   9E:98:19:5A:EC:1E:14:A2:97:1A:16:0F:5F:EE:EA:B6:0E:75:9D:AF
Certificate issuer:       /CN=4165db8f57caba312629e89d611ea1f393351415
Certificate serial:       0B226F
Authority key identifier: 56:A0:E4:4C:F3:DE:53:57:C3:36:E4:3B:31:6D:75:17:E5:B0:B3:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4165db8f57caba312629e89d611ea1f393351415.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/c8ebea6fdf134010c152c47c45856036e5f260a5.roa
Signing time:             Mon 05 Feb 2024 21:55:30 +0000
ROA not before:           Mon 05 Feb 2024 21:55:30 +0000
ROA not after:            Thu 05 Feb 2026 21:55:30 +0000
asID:                     262191
IP address blocks:        190.109.4.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 729711 (0xb226f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4165db8f57caba312629e89d611ea1f393351415
        Validity
            Not Before: Feb  5 21:55:30 2024 GMT
            Not After : Feb  5 21:55:30 2026 GMT
        Subject: CN=c8ebea6fdf134010c152c47c45856036e5f260a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:9a:6f:85:9d:62:0d:82:25:78:20:56:9c:ec:
                    e9:b8:dc:1a:5c:e3:82:3a:10:96:19:22:70:1d:fe:
                    36:63:ad:22:0d:ce:b4:52:c9:bc:27:eb:0a:ef:ee:
                    a0:32:c8:8e:ff:71:cc:0e:60:6c:6e:8d:6b:1c:5d:
                    9a:1b:8b:b9:75:e4:d1:ca:11:52:bc:a0:63:3c:14:
                    6f:f7:58:cb:7b:d6:b4:59:9a:3b:98:f9:04:6e:05:
                    28:1f:9a:b4:3b:55:93:03:1e:b5:6b:42:23:be:71:
                    9e:78:4f:a2:c8:c6:5f:50:44:0e:3c:7b:32:e4:c5:
                    56:bb:ca:70:d5:a8:ed:a0:2a:a5:71:96:bf:8e:c9:
                    7c:f2:33:38:57:d8:1f:43:9c:3e:a5:ce:11:4f:87:
                    9b:24:95:f3:82:52:bd:68:4c:4e:58:7e:53:a9:5e:
                    83:ee:97:ac:61:74:b8:6b:8d:ff:54:d6:c0:d5:e0:
                    9a:9e:94:3c:3d:df:0d:45:be:7b:36:d6:73:e1:10:
                    dc:ab:8c:80:a5:fc:ec:5b:59:af:64:c9:88:8c:1e:
                    52:0d:8e:cc:e1:0b:38:49:08:68:4b:e0:ef:29:cb:
                    81:b4:28:1e:fb:d4:74:43:db:cd:73:ee:a4:ab:ce:
                    40:47:f5:6d:67:a1:e0:56:5c:d4:9c:af:95:6c:b4:
                    05:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:98:19:5A:EC:1E:14:A2:97:1A:16:0F:5F:EE:EA:B6:0E:75:9D:AF
            X509v3 Authority Key Identifier:
                keyid:56:A0:E4:4C:F3:DE:53:57:C3:36:E4:3B:31:6D:75:17:E5:B0:B3:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4165db8f57caba312629e89d611ea1f393351415.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/c8ebea6fdf134010c152c47c45856036e5f260a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/4165db8f57caba312629e89d611ea1f393351415.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:bc:bf:99:f1:54:47:19:c0:15:e2:70:26:5b:ec:9d:9c:46:
         b5:a4:7a:80:ab:44:a2:3e:95:0c:49:34:3d:75:6d:9f:ac:96:
         d9:45:90:a8:b7:24:9a:6c:6b:74:7c:dd:6d:77:c6:1b:92:15:
         25:d9:fe:90:02:c3:82:9a:e5:47:dd:b1:07:06:fc:ea:6a:96:
         aa:7b:d9:ea:17:24:9b:77:0f:68:05:30:c4:dc:eb:5e:e6:c9:
         97:5e:50:f3:79:c1:23:72:61:41:ec:ff:3b:3f:32:ff:80:3b:
         5f:ca:4c:82:1d:26:61:a8:5b:93:b9:0d:48:7c:4a:d5:3c:cd:
         70:41:a2:27:67:e6:c5:c1:5e:00:a2:25:9c:ba:84:00:51:f3:
         4d:6a:73:bd:39:56:0e:bd:41:58:6e:32:f1:13:eb:21:de:c4:
         65:eb:23:f2:ac:56:14:ca:7c:10:de:3a:9d:32:93:1a:87:99:
         5a:12:da:37:2c:1a:8c:7a:83:6e:03:2c:ac:51:04:46:b7:fb:
         37:7e:ba:cd:7f:bb:0e:e1:bb:9b:d3:e0:0b:34:89:e1:36:76:
         3e:1a:16:7f:34:a8:be:25:75:d6:0c:61:50:e1:24:05:96:b9:
         2d:42:82:5b:be:00:0c:06:26:6e:5f:14:d5:40:c5:16:3f:76:
         3d:2c:c9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:38 2024 by rpki-client on console-ams.rpki-client.org