Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7dd2c100-dc30-40ac-85d2-5182570ac2be/091df9a89d545929f7c971e81fecc8304ee85892.roa
File:                     091df9a89d545929f7c971e81fecc8304ee85892.roa (raw, json)
Hash identifier:          ws4cTdosC81iLjuTVga2NtkzCzwGdyTsF5ocj+5gNBs=
Subject key identifier:   19:D9:55:96:39:AA:D7:BC:4D:B7:E6:50:26:26:B6:E1:D5:5F:9B:08
Certificate issuer:       /CN=89b05c9212d6b33b390c81f3fc8958af7050b896
Certificate serial:       17C157
Authority key identifier: C5:61:39:2E:B1:6D:D9:6D:FB:14:BF:C3:26:82:38:A8:E9:81:83:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89b05c9212d6b33b390c81f3fc8958af7050b896.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7dd2c100-dc30-40ac-85d2-5182570ac2be/091df9a89d545929f7c971e81fecc8304ee85892.roa
Signing time:             Thu 12 May 2022 17:15:11 +0000
ROA not before:           Thu 12 May 2022 03:00:00 +0000
ROA not after:            Sun 12 May 2024 03:00:00 +0000
asID:                     52423
IP address blocks:        199.60.215.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1556823 (0x17c157)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89b05c9212d6b33b390c81f3fc8958af7050b896
        Validity
            Not Before: May 12 03:00:00 2022 GMT
            Not After : May 12 03:00:00 2024 GMT
        Subject: CN=091df9a89d545929f7c971e81fecc8304ee85892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9e:69:bd:aa:a9:ab:19:e2:70:e0:b7:bc:2a:
                    6c:18:1d:84:45:cd:dd:ef:95:8b:23:e0:90:a2:71:
                    52:82:b1:5f:39:39:03:b0:a0:6d:b7:9c:62:d7:61:
                    53:e8:ce:12:7b:46:5b:b6:0c:8a:80:97:19:46:be:
                    8a:46:f3:00:9a:9d:61:a3:f5:a0:e0:8e:ed:2b:69:
                    fe:55:24:fa:6c:e7:62:37:26:d8:49:c8:bc:17:8e:
                    44:83:d8:88:ae:f4:ef:a3:d1:46:e8:12:cf:f4:f1:
                    4e:8e:5b:8c:03:ff:80:9c:b6:52:eb:9d:6b:3a:5d:
                    60:d2:ca:68:c2:9c:ec:b3:3e:0a:14:06:de:f2:a0:
                    34:ee:d5:90:d7:2f:72:bb:d9:42:78:c1:20:50:46:
                    ee:68:f6:43:dd:68:8b:23:9a:4a:65:fd:29:9d:2a:
                    ec:d2:ce:11:35:fd:83:c6:d3:fd:66:0b:52:80:e7:
                    c6:04:d3:94:76:e4:da:e6:db:5c:6c:13:78:fd:5f:
                    14:35:ff:cd:a0:90:b7:23:5a:de:32:64:d1:b5:fb:
                    4d:e2:68:fd:61:f0:a4:50:8b:28:57:38:d9:a1:88:
                    b4:8c:1c:58:1d:74:7e:a4:b3:6d:6f:c4:51:0c:89:
                    da:c9:6b:cc:33:99:30:9b:4e:80:f5:12:40:71:b1:
                    7a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:D9:55:96:39:AA:D7:BC:4D:B7:E6:50:26:26:B6:E1:D5:5F:9B:08
            X509v3 Authority Key Identifier:
                keyid:C5:61:39:2E:B1:6D:D9:6D:FB:14:BF:C3:26:82:38:A8:E9:81:83:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89b05c9212d6b33b390c81f3fc8958af7050b896.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7dd2c100-dc30-40ac-85d2-5182570ac2be/091df9a89d545929f7c971e81fecc8304ee85892.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7dd2c100-dc30-40ac-85d2-5182570ac2be/89b05c9212d6b33b390c81f3fc8958af7050b896.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.60.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:90:74:fc:8a:b3:a0:4f:78:76:84:e0:42:78:8d:c3:75:67:
         65:a1:19:39:c0:90:22:17:5f:d7:cd:54:2d:25:05:36:7a:1d:
         6c:78:d3:9f:d6:65:a8:7f:a8:3f:dd:50:38:e8:e1:5a:7f:e8:
         46:67:27:ea:4c:90:18:bb:18:96:15:a0:7f:10:83:1e:46:ce:
         d5:c4:50:f5:97:79:a8:32:9c:a8:e5:5e:14:d5:44:cb:5c:d2:
         fb:42:6f:65:b5:8d:8f:eb:2e:cf:dc:67:cc:61:20:95:fc:7e:
         23:3f:1e:9c:70:9c:d2:e0:15:4f:af:8a:46:9c:b9:14:dd:cb:
         49:e9:dc:cf:b9:d3:0d:e3:83:42:d7:1b:08:81:15:3a:15:56:
         d9:be:53:fd:18:5f:0a:07:ce:4b:66:ac:bd:1c:a7:f4:3b:87:
         1a:be:98:c2:78:6c:00:f6:5e:c1:e5:ac:c1:6d:67:46:1c:1f:
         29:64:4f:6d:cc:13:be:02:43:13:bc:8b:f8:2c:b5:d2:e1:71:
         7a:15:1b:3a:cf:28:88:c4:b0:a1:63:53:40:d7:d4:4e:0f:a9:
         83:ac:ea:3a:c3:e0:16:f4:76:a5:90:92:84:0e:40:7a:a6:bf:
         8f:b2:4f:1c:ad:da:5a:1b:ed:64:91:be:ed:46:87:e8:9d:06:
         07:09:89:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:51 2024 by rpki-client on console-fra.rpki-client.org