Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/851f3860-cec2-4096-988f-00e0156570ac/6e2571709ee5e3de388f76fa8e8a7b8a13af03fa.roa
File:                     6e2571709ee5e3de388f76fa8e8a7b8a13af03fa.roa (raw, json)
Hash identifier:          /tQ76+fZQ05mip4Sa3UtPQKr5ut5EN09hGSBu5WlmLM=
Subject key identifier:   75:93:52:55:8E:F5:1D:82:04:77:10:7F:71:02:DB:FA:3D:69:0A:31
Certificate issuer:       /CN=f04c66e47b3a8a66f313f04f07882f394b836678
Certificate serial:       14255A
Authority key identifier: F0:04:EF:80:58:90:50:4B:5F:78:F3:09:6F:2A:3B:28:C5:7C:F5:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f04c66e47b3a8a66f313f04f07882f394b836678.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/851f3860-cec2-4096-988f-00e0156570ac/6e2571709ee5e3de388f76fa8e8a7b8a13af03fa.roa
Signing time:             Fri 26 Jan 2024 15:26:11 +0000
ROA not before:           Fri 26 Jan 2024 15:26:11 +0000
ROA not after:            Mon 26 Jan 2026 15:26:11 +0000
asID:                     52235
IP address blocks:        190.99.71.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1320282 (0x14255a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04c66e47b3a8a66f313f04f07882f394b836678
        Validity
            Not Before: Jan 26 15:26:11 2024 GMT
            Not After : Jan 26 15:26:11 2026 GMT
        Subject: CN=6e2571709ee5e3de388f76fa8e8a7b8a13af03fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e8:22:bb:aa:08:fa:0d:a1:00:8e:f6:52:e3:
                    66:f4:bd:c3:0e:d1:cd:35:87:d2:a8:76:66:e0:91:
                    93:ab:a5:9f:e0:42:7e:db:f9:54:94:16:8b:e0:56:
                    6f:d2:06:18:20:18:64:b3:aa:dd:9a:ad:79:0f:d9:
                    02:64:3a:86:5d:e6:db:6d:97:0e:48:db:59:26:c4:
                    a6:7d:b4:2f:2f:4e:69:7e:7b:ac:63:c1:ca:9f:7b:
                    f8:7a:ff:a7:54:8e:2c:46:e2:81:b4:75:c2:2d:83:
                    81:bd:9a:19:79:3d:e7:36:d1:72:31:c1:9b:8f:9f:
                    50:10:fd:09:cf:0c:0a:d8:b2:7a:2d:b0:32:05:9d:
                    37:9b:aa:09:78:7c:d3:11:11:f5:e4:8e:a2:a9:d1:
                    0e:dc:9c:e1:38:dd:7d:45:12:9d:49:31:fb:b6:65:
                    5a:fd:d2:46:11:03:99:59:60:bc:25:92:0d:0a:bb:
                    31:fb:50:b2:2d:93:c0:48:ba:26:a3:2f:dd:ed:60:
                    c4:82:17:b8:35:04:a9:95:7e:db:51:35:38:45:85:
                    0f:1f:28:2a:37:b5:43:71:4a:4e:74:57:00:71:2f:
                    c1:40:07:e3:a0:cd:56:bd:90:2c:45:a8:82:ba:19:
                    d9:47:ec:72:12:98:bd:65:6a:08:71:07:a3:e5:72:
                    37:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:93:52:55:8E:F5:1D:82:04:77:10:7F:71:02:DB:FA:3D:69:0A:31
            X509v3 Authority Key Identifier:
                keyid:F0:04:EF:80:58:90:50:4B:5F:78:F3:09:6F:2A:3B:28:C5:7C:F5:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f04c66e47b3a8a66f313f04f07882f394b836678.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/851f3860-cec2-4096-988f-00e0156570ac/6e2571709ee5e3de388f76fa8e8a7b8a13af03fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/851f3860-cec2-4096-988f-00e0156570ac/f04c66e47b3a8a66f313f04f07882f394b836678.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:9f:eb:3a:60:b8:a5:83:43:f1:ae:e0:95:0a:a0:50:77:eb:
         bf:37:fb:ed:fe:e0:34:cc:35:7a:d5:b3:7d:bc:3b:ac:1c:e4:
         ea:4b:03:7e:2a:0a:bc:e0:a3:2a:9b:ba:56:f2:90:e2:1b:84:
         36:db:f8:55:a4:bd:05:49:83:e9:90:21:80:57:d9:07:b1:d4:
         27:cc:cb:fe:0f:aa:48:8a:a9:61:e9:69:c2:d7:42:66:01:fd:
         3f:67:7e:12:2a:d7:3a:92:92:d7:14:b3:09:2f:fb:f8:bf:8c:
         36:3c:e1:5c:67:2b:c6:e3:9e:84:4c:10:4d:a1:cb:b3:36:96:
         ba:47:56:8d:ac:c2:01:11:d7:8a:65:4b:26:63:be:f1:06:f1:
         a2:97:7f:82:34:4d:18:2c:f9:74:cb:66:c6:ee:73:0b:16:0a:
         98:d6:91:bb:9c:44:f5:8d:90:71:e0:fe:d1:06:6a:f8:af:9e:
         58:e6:72:cb:74:29:c7:8e:08:54:64:35:30:27:c9:b9:36:3b:
         da:20:71:0b:5b:3d:24:9e:dc:ac:2d:dc:cf:03:17:94:4d:25:
         59:fb:4b:69:e5:7a:2e:e7:90:7b:fd:5a:32:03:09:22:13:f5:
         88:2f:75:06:7e:8d:9d:cc:f6:0f:e7:e5:43:f2:30:3e:aa:36:
         48:99:1d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:23 2024 by rpki-client on console-fra.rpki-client.org