Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/ec96fb098cc7a7d151a791d6241edb51672f9615.roa
File:                     ec96fb098cc7a7d151a791d6241edb51672f9615.roa (raw, json)
Hash identifier:          KJ+JGm2mQlzgKE1he7t7WYGuwjVHUVo92kRIioXetAM=
Subject key identifier:   2E:C1:35:BD:F0:68:B8:94:22:A6:2B:FE:46:37:51:0C:E3:3A:90:AC
Certificate issuer:       /CN=4165db8f57caba312629e89d611ea1f393351415
Certificate serial:       0B8B8B
Authority key identifier: 56:A0:E4:4C:F3:DE:53:57:C3:36:E4:3B:31:6D:75:17:E5:B0:B3:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4165db8f57caba312629e89d611ea1f393351415.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/ec96fb098cc7a7d151a791d6241edb51672f9615.roa
Signing time:             Wed 07 Feb 2024 18:11:52 +0000
ROA not before:           Wed 07 Feb 2024 18:11:52 +0000
ROA not after:            Sat 07 Feb 2026 18:11:52 +0000
asID:                     262191
IP address blocks:        190.109.31.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 756619 (0xb8b8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4165db8f57caba312629e89d611ea1f393351415
        Validity
            Not Before: Feb  7 18:11:52 2024 GMT
            Not After : Feb  7 18:11:52 2026 GMT
        Subject: CN=ec96fb098cc7a7d151a791d6241edb51672f9615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f6:30:27:53:10:72:f2:d1:81:55:71:eb:19:
                    85:da:b0:11:aa:07:2c:b0:90:9d:f1:cb:c4:78:a0:
                    3d:c3:3e:7c:73:3b:ea:f5:d3:77:a4:7d:7f:ff:8a:
                    c7:58:b9:c3:b1:6b:a8:ea:dc:3a:1b:f5:7c:09:ea:
                    c2:f3:09:be:cb:31:56:24:65:0e:56:f6:90:e8:73:
                    de:6f:84:fd:04:eb:d1:da:31:b7:8d:c3:18:2b:65:
                    d4:ee:8d:2f:d0:bb:19:05:71:ca:5f:dd:3f:79:0b:
                    f4:a9:3a:44:f8:59:ad:3b:e3:ef:8a:d5:fb:78:1a:
                    db:59:e2:fd:f6:fd:5b:94:63:84:4a:4b:da:0d:aa:
                    cf:37:b9:32:c1:22:82:02:ad:e4:41:5c:fd:66:d4:
                    73:45:87:3f:e6:ad:a5:65:c3:4f:70:ad:9e:f1:89:
                    65:9f:4d:a7:51:44:1d:2e:2a:41:a2:37:23:f1:8c:
                    0e:2e:07:b9:c0:cf:4d:8f:5d:3d:0c:f6:f4:cd:08:
                    03:53:5b:3e:56:fc:fd:2c:7f:8e:2e:16:12:1e:7a:
                    15:b7:6c:30:87:53:1d:31:2f:80:45:ef:22:fc:1a:
                    e0:4c:30:23:9a:2e:f9:a8:95:be:49:5d:f8:ba:5b:
                    2d:c6:1e:7a:9e:d5:2d:7e:ed:6c:00:7a:fc:34:44:
                    32:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C1:35:BD:F0:68:B8:94:22:A6:2B:FE:46:37:51:0C:E3:3A:90:AC
            X509v3 Authority Key Identifier:
                keyid:56:A0:E4:4C:F3:DE:53:57:C3:36:E4:3B:31:6D:75:17:E5:B0:B3:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4165db8f57caba312629e89d611ea1f393351415.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/ec96fb098cc7a7d151a791d6241edb51672f9615.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/4165db8f57caba312629e89d611ea1f393351415.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:03:59:f1:37:9e:66:81:26:ca:4a:d2:70:c6:e6:46:b9:13:
         98:ad:f4:d5:d7:81:b0:a1:1f:fa:44:3e:e6:76:69:a8:44:6e:
         39:de:d1:ce:86:ea:51:e4:ae:cf:81:22:92:42:30:4a:c3:c4:
         6a:09:fa:b6:73:ef:eb:42:86:0a:71:9e:61:e1:49:88:b7:83:
         a6:87:74:bd:8e:23:a4:10:f5:6b:65:48:63:78:65:a0:dd:d6:
         3d:51:39:58:28:c9:96:2f:22:d0:db:bc:b1:c3:65:2e:9c:8a:
         9f:fd:07:f1:6d:b2:b0:e4:1d:de:3b:27:29:8d:5e:40:47:96:
         3f:1f:49:7e:73:0f:9a:02:45:5a:38:fd:49:cf:48:6a:e5:db:
         a9:00:78:23:d6:fa:6e:36:9c:e1:ae:da:9c:dd:df:ca:f6:cb:
         ee:8d:50:08:c7:67:d3:0f:6d:5a:2a:61:9d:7a:d0:41:f7:97:
         ab:00:bc:f3:f0:14:40:bd:9f:1a:3d:d3:a7:53:64:56:c7:24:
         49:7d:c7:52:4b:5d:db:9e:ff:da:4a:bf:59:97:3d:2e:dc:72:
         e8:cd:70:c9:f8:7a:1f:4a:bf:f1:bd:4d:a2:21:d0:6b:5d:62:
         f0:80:b7:6c:e4:c2:e2:00:ac:53:a8:fd:ad:96:43:7e:35:85:
         7d:c1:e3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:22 2024 by rpki-client on console-fra.rpki-client.org