Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/e04c662468bf45475dce1ca3d841db3db2127c6c.roa
File:                     e04c662468bf45475dce1ca3d841db3db2127c6c.roa (raw, json)
Hash identifier:          gZcZ1z3w/aqHvIkjsb7Nm0mirkmDVTvNu4aha9cYDo4=
Subject key identifier:   10:B3:98:06:80:9F:9F:04:23:6A:29:EA:18:1B:D8:B7:22:77:44:3D
Certificate issuer:       /CN=4165db8f57caba312629e89d611ea1f393351415
Certificate serial:       0B3E1D
Authority key identifier: 56:A0:E4:4C:F3:DE:53:57:C3:36:E4:3B:31:6D:75:17:E5:B0:B3:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4165db8f57caba312629e89d611ea1f393351415.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/e04c662468bf45475dce1ca3d841db3db2127c6c.roa
Signing time:             Tue 06 Feb 2024 19:10:39 +0000
ROA not before:           Tue 06 Feb 2024 19:10:39 +0000
ROA not after:            Fri 06 Feb 2026 19:10:39 +0000
asID:                     262191
IP address blocks:        190.109.10.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 736797 (0xb3e1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4165db8f57caba312629e89d611ea1f393351415
        Validity
            Not Before: Feb  6 19:10:39 2024 GMT
            Not After : Feb  6 19:10:39 2026 GMT
        Subject: CN=e04c662468bf45475dce1ca3d841db3db2127c6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4f:0f:d4:2f:dd:fb:51:bc:67:ba:02:1b:b7:
                    73:1c:6e:0d:85:b5:40:b1:12:d1:1f:6b:00:3a:13:
                    4e:6a:20:e4:5a:57:b5:cc:2f:50:ad:5f:2c:b8:91:
                    48:81:3b:52:50:7a:f7:73:1c:6d:c1:e8:d4:60:b9:
                    e7:37:c9:8f:d9:0e:30:f6:1a:1e:ca:44:d1:9b:66:
                    07:ca:b3:ce:19:52:8f:9c:1f:e9:2d:ea:b1:5a:38:
                    1f:58:a1:01:d8:6c:bd:5d:8e:4e:b3:c5:9e:be:a0:
                    ac:d7:06:ff:f2:44:4c:7a:90:40:17:c1:14:57:17:
                    6f:90:af:74:dd:02:3e:5c:72:9e:8d:47:32:c9:64:
                    20:fb:55:49:ea:8f:f7:b6:32:9d:8a:15:97:12:45:
                    eb:41:6b:cc:66:ac:51:58:b5:9d:ff:91:29:8c:d5:
                    81:11:5c:b9:95:3c:82:bb:20:83:2f:b0:c4:0f:5a:
                    fb:24:35:48:cb:1c:c6:7c:9a:03:5d:68:17:7d:3e:
                    67:1c:f4:a6:e5:31:a1:49:bf:4e:a8:dc:61:ee:dc:
                    d1:cd:db:7f:2f:1e:4c:bd:37:f9:24:e4:1b:39:35:
                    ef:b7:1f:c3:1b:27:55:8b:7b:e3:f5:42:cb:1c:31:
                    53:e2:42:1e:15:b7:da:ae:a1:5b:09:e8:a1:db:c8:
                    3c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B3:98:06:80:9F:9F:04:23:6A:29:EA:18:1B:D8:B7:22:77:44:3D
            X509v3 Authority Key Identifier:
                keyid:56:A0:E4:4C:F3:DE:53:57:C3:36:E4:3B:31:6D:75:17:E5:B0:B3:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4165db8f57caba312629e89d611ea1f393351415.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/e04c662468bf45475dce1ca3d841db3db2127c6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/4165db8f57caba312629e89d611ea1f393351415.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:94:0c:b3:96:91:a4:6a:f2:cc:70:64:ba:c4:06:69:41:d0:
         37:c6:92:64:e6:08:9e:8f:25:af:21:18:f8:c1:87:ed:15:b3:
         51:2d:a4:9f:ea:2f:88:79:67:21:8d:42:81:28:23:3d:f1:ea:
         97:a4:2b:00:f4:5c:8b:08:94:3e:79:ea:22:41:4e:9a:a1:d5:
         b4:9e:a3:8c:e9:83:3e:41:83:43:b8:ab:f7:69:40:bf:49:10:
         b3:d0:1c:0a:67:72:7d:8a:4b:de:49:76:da:f4:dd:a2:7f:1d:
         d0:6d:f6:d7:e3:48:be:01:c4:cf:82:f4:a9:e7:77:25:50:b8:
         3a:2d:05:83:b3:3e:65:aa:c9:46:f4:6c:d1:15:70:19:c3:dc:
         fd:a8:8a:0b:86:e8:74:c0:e7:8a:4a:02:a8:1e:14:d7:30:18:
         84:f5:43:ea:00:0e:c1:d1:9d:86:ce:d3:c0:ad:b2:5b:45:c2:
         fd:02:0d:3c:dd:54:e4:b4:b4:59:63:02:6d:16:cd:f4:2a:78:
         3b:c2:fe:87:19:8c:97:50:62:84:bd:06:85:6e:ff:b6:85:b3:
         40:23:ef:29:c9:c2:10:36:47:85:97:e6:38:c3:81:2f:91:07:
         c0:b1:6a:22:ef:91:a4:33:cd:b4:7a:2e:03:86:66:72:fc:d0:
         07:77:fb:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:22 2024 by rpki-client on console-fra.rpki-client.org