Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/3340fe00b359db25ad7b704c12a86f2f31cf129b.roa
File:                     3340fe00b359db25ad7b704c12a86f2f31cf129b.roa (raw, json)
Hash identifier:          zEKqiRiAwJA+kYT9AttIPkHhGwDumvsM5f+ehudaHlA=
Subject key identifier:   61:5D:E3:54:DB:81:06:14:16:BF:E3:07:42:6B:B9:76:59:CB:FB:0D
Certificate issuer:       /CN=17e63b4149d0b23e7b741a7cccfb0b544a043d7b
Certificate serial:       28F45B
Authority key identifier: 7D:BF:36:DC:91:A2:4C:E6:1D:EA:8F:47:24:E7:9C:88:DA:69:03:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/17e63b4149d0b23e7b741a7cccfb0b544a043d7b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/3340fe00b359db25ad7b704c12a86f2f31cf129b.roa
Signing time:             Thu 29 Feb 2024 01:31:40 +0000
ROA not before:           Thu 29 Feb 2024 01:31:39 +0000
ROA not after:            Thu 01 Mar 2029 01:31:39 +0000
asID:                     22724
IP address blocks:        190.15.140.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2683995 (0x28f45b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17e63b4149d0b23e7b741a7cccfb0b544a043d7b
        Validity
            Not Before: Feb 29 01:31:39 2024 GMT
            Not After : Mar  1 01:31:39 2029 GMT
        Subject: CN=3340fe00b359db25ad7b704c12a86f2f31cf129b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:89:67:4f:26:8b:b5:13:18:a2:fd:63:5a:81:
                    e4:d9:7f:70:68:c1:4f:ce:23:fc:dc:83:bb:ab:80:
                    66:15:20:1a:be:2c:5c:c2:93:31:68:93:db:94:3a:
                    46:a8:a3:ba:a2:29:36:aa:9b:3f:fc:af:3a:ca:6b:
                    ce:dd:ef:63:0b:66:5e:2e:8d:e7:5b:31:b5:68:93:
                    35:a6:33:9d:47:8e:1c:27:72:f9:84:75:95:64:5d:
                    9a:a5:fd:02:ff:2b:ec:2e:58:6d:dd:f9:33:ef:42:
                    ed:bd:bd:44:27:e2:6b:40:86:41:28:0a:fa:01:5c:
                    e5:25:2e:f8:ae:8c:1f:a5:ad:24:cf:b9:51:bf:9f:
                    d3:0b:45:90:52:62:7f:12:b6:c1:59:27:8a:ed:14:
                    83:8f:5a:03:01:a3:1d:3a:fe:23:48:b6:30:05:a4:
                    78:ad:3b:6e:4f:a3:ac:40:f6:f9:3b:66:57:e6:cb:
                    3f:50:31:88:7b:f9:1a:3a:02:ef:f6:e9:f4:57:01:
                    8e:92:a0:37:82:e2:7f:d6:77:29:95:00:a5:2a:19:
                    d4:ac:39:61:3e:11:21:15:62:a9:2a:14:e3:0e:55:
                    a1:40:1a:b7:36:86:8b:72:c5:06:71:44:74:94:b4:
                    8c:44:27:32:38:23:ec:d2:08:89:98:11:af:c2:c8:
                    cf:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:5D:E3:54:DB:81:06:14:16:BF:E3:07:42:6B:B9:76:59:CB:FB:0D
            X509v3 Authority Key Identifier:
                keyid:7D:BF:36:DC:91:A2:4C:E6:1D:EA:8F:47:24:E7:9C:88:DA:69:03:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/17e63b4149d0b23e7b741a7cccfb0b544a043d7b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/3340fe00b359db25ad7b704c12a86f2f31cf129b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/17e63b4149d0b23e7b741a7cccfb0b544a043d7b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.15.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:07:cb:81:ac:aa:50:e8:fc:ca:70:2b:1f:16:e8:fb:e5:8c:
         79:99:ea:28:77:b2:aa:8a:98:0e:d2:00:ee:da:bb:00:33:73:
         15:90:aa:98:07:46:b9:44:8b:8e:0b:56:c6:b8:e4:17:b0:e9:
         64:d2:65:af:2b:31:8c:d2:4b:18:a4:73:9f:57:64:95:4e:a1:
         d0:b8:64:1b:8d:ab:be:49:3f:69:14:fc:31:a5:94:f5:64:56:
         00:d1:bb:4c:55:4e:d8:05:fe:64:d2:b5:70:fa:d9:b4:58:ff:
         00:77:eb:7d:ec:b3:7e:9d:2c:18:9c:3e:d5:5f:37:0c:0c:96:
         27:13:b7:ec:22:d9:19:9f:ef:1b:4b:3a:87:ce:39:9d:b5:6e:
         db:f4:ad:05:bd:83:7b:df:fd:7b:e3:47:c9:1b:d7:58:9c:f9:
         e5:e3:84:94:9e:dc:1e:01:b3:aa:bf:48:95:7f:ab:03:0e:30:
         45:6c:d6:90:8c:46:16:cb:04:64:11:94:1b:c4:18:f2:14:e3:
         0d:fe:e9:03:23:e6:b2:b2:1a:74:62:b6:90:29:94:2e:42:26:
         b1:9c:09:b0:d2:12:d7:3a:29:e7:99:9e:5a:91:57:33:42:6e:
         9d:02:47:91:15:fc:15:6e:ab:ab:75:ae:03:35:d5:23:96:4f:
         32:b5:ef:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:24 2024 by rpki-client on console-fra.rpki-client.org