Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/876e99f3-1975-4edd-9d63-9cedccd26842/288c197c0e7c4c8326fa105755bbc92989cdfc2e.roa
File:                     288c197c0e7c4c8326fa105755bbc92989cdfc2e.roa (raw, json)
Hash identifier:          R/KqIGRpovpiiplQYcaDQd8sZ0NsBi9r2ITWV149PPI=
Subject key identifier:   AE:64:07:14:40:0D:6A:37:08:C0:F4:DD:8D:9A:E8:A3:3F:03:60:E8
Certificate issuer:       /CN=d09b29fafea894e6b788dbdd1de3f40383aa6226
Certificate serial:       03FA
Authority key identifier: 29:56:8F:C7:D8:6D:06:3D:95:71:B4:B2:6E:CD:B5:1C:AF:A5:8D:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d09b29fafea894e6b788dbdd1de3f40383aa6226.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/876e99f3-1975-4edd-9d63-9cedccd26842/288c197c0e7c4c8326fa105755bbc92989cdfc2e.roa
Signing time:             Wed 28 Sep 2022 22:05:37 +0000
ROA not before:           Wed 28 Sep 2022 22:01:09 +0000
ROA not after:            Sat 28 Sep 2024 22:01:09 +0000
asID:                     12684
IP address blocks:        170.78.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1018 (0x3fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d09b29fafea894e6b788dbdd1de3f40383aa6226
        Validity
            Not Before: Sep 28 22:01:09 2022 GMT
            Not After : Sep 28 22:01:09 2024 GMT
        Subject: CN=288c197c0e7c4c8326fa105755bbc92989cdfc2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b2:64:46:e6:c3:da:d6:4f:71:00:2b:73:d3:
                    95:9d:0d:17:6b:ca:2d:41:35:7c:bd:41:a3:da:60:
                    e1:88:08:51:bf:28:c1:32:92:f6:fe:83:59:51:4e:
                    5f:71:36:66:11:3d:de:85:b4:c3:a5:8d:11:66:de:
                    b7:8c:db:75:88:3b:58:71:b9:a2:c5:1a:91:73:8a:
                    24:a9:46:94:63:b0:f8:b1:27:15:89:31:41:ba:f4:
                    92:7e:f2:f6:1e:64:65:ce:d1:23:c0:86:f5:51:be:
                    1c:5e:03:20:d1:2a:a6:bc:63:32:7b:10:1d:d1:5e:
                    66:35:86:ce:ad:29:de:eb:5f:2d:db:dd:4c:bd:3e:
                    65:5c:af:6a:76:d0:25:b4:83:d3:de:3b:4d:4f:8f:
                    e4:2b:0e:c3:f9:7f:2b:f0:c7:22:71:ba:45:24:e0:
                    3d:61:5d:a2:fe:4b:04:48:0f:ab:8f:6f:b8:4a:6b:
                    34:68:93:ef:64:bc:b3:6a:ad:cb:11:13:68:2f:be:
                    12:71:85:66:74:64:58:fc:2f:fd:a8:97:ce:30:e4:
                    bd:87:3a:b3:67:0f:5c:36:87:b6:01:35:b5:8d:4a:
                    01:68:62:7d:1d:f0:bd:6e:03:73:bd:ae:2f:2f:5f:
                    16:29:68:60:06:f6:f3:d2:e3:95:70:9c:28:c1:46:
                    b4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:64:07:14:40:0D:6A:37:08:C0:F4:DD:8D:9A:E8:A3:3F:03:60:E8
            X509v3 Authority Key Identifier:
                keyid:29:56:8F:C7:D8:6D:06:3D:95:71:B4:B2:6E:CD:B5:1C:AF:A5:8D:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d09b29fafea894e6b788dbdd1de3f40383aa6226.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/876e99f3-1975-4edd-9d63-9cedccd26842/288c197c0e7c4c8326fa105755bbc92989cdfc2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/876e99f3-1975-4edd-9d63-9cedccd26842/d09b29fafea894e6b788dbdd1de3f40383aa6226.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:ac:ba:c1:32:0f:12:db:9d:f7:ee:d8:bc:5f:8c:de:49:b9:
         5f:a0:66:c2:fc:64:47:aa:f9:01:6a:ad:9e:ab:40:b8:63:63:
         4f:44:9e:cf:cf:0e:aa:79:5c:e2:9a:f3:62:fd:5f:1c:25:25:
         2a:b4:e1:1b:30:0f:fd:3f:86:60:a6:4f:a7:46:fa:54:4c:2f:
         0d:e0:50:f3:f1:03:1e:bc:66:9b:c4:08:6b:db:a6:f5:8c:32:
         8c:a8:15:a6:13:ec:21:a3:0d:8f:b4:b9:b3:10:47:48:ec:ba:
         f9:60:2e:da:f8:e3:d1:13:4d:7f:70:6b:c0:6a:68:f7:06:e1:
         43:60:e4:69:cb:5c:22:c4:82:f6:53:51:e8:26:03:b8:7b:52:
         8d:db:7f:db:a1:ad:61:57:1c:8f:8c:38:7d:a2:b7:28:68:0e:
         c2:f3:77:ce:6d:e4:9e:a0:b3:ae:b2:4e:14:39:6d:a5:ec:3b:
         bf:f2:f7:e9:d0:c1:ce:d9:7c:9e:38:14:58:eb:71:45:aa:f3:
         11:7b:d6:40:93:3f:54:e8:03:20:e2:07:d4:eb:d3:03:9d:f7:
         b5:20:b9:eb:dd:71:a7:7e:6c:2f:19:ed:c3:87:21:65:b5:9c:
         45:01:e8:4d:6d:13:3a:73:d1:fc:ca:da:fc:da:40:b2:55:d4:
         49:14:f9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:23 2024 by rpki-client on console-fra.rpki-client.org