Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/ce4a98e934c16799fbf2cc2a643e42af8bab0c07.roa
File:                     ce4a98e934c16799fbf2cc2a643e42af8bab0c07.roa (raw, json)
Hash identifier:          pI55Qewf+V93MKpqEja2OoPs+29yh42QBrWLZY1s/rA=
Subject key identifier:   CD:80:F2:30:32:BD:E9:C9:A6:EC:48:26:D2:F6:8F:44:66:E0:6B:61
Certificate issuer:       /CN=703bede159efdf3fd85e6b49bded6c79dc525307
Certificate serial:       23D3A4
Authority key identifier: 79:AC:9F:BD:47:3B:40:BC:06:D0:F0:51:2E:42:4D:ED:6B:2A:88:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/703bede159efdf3fd85e6b49bded6c79dc525307.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/ce4a98e934c16799fbf2cc2a643e42af8bab0c07.roa
Signing time:             Mon 25 Sep 2023 15:49:13 +0000
ROA not before:           Sun 24 Sep 2023 15:49:13 +0000
ROA not after:            Thu 25 Sep 2025 15:49:13 +0000
asID:                     20312
IP address blocks:        150.189.0.0/16 maxlen: 24
                          150.188.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2347940 (0x23d3a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=703bede159efdf3fd85e6b49bded6c79dc525307
        Validity
            Not Before: Sep 24 15:49:13 2023 GMT
            Not After : Sep 25 15:49:13 2025 GMT
        Subject: CN=ce4a98e934c16799fbf2cc2a643e42af8bab0c07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d2:63:b5:c3:c4:fb:0c:57:42:7b:fe:71:0b:
                    ba:6f:cb:10:26:ce:dd:e5:76:52:a5:fd:49:04:f0:
                    7f:24:38:8d:51:65:07:11:82:98:43:85:5a:21:94:
                    2a:0c:32:f5:4b:28:90:94:7d:6e:b6:bf:eb:c0:fc:
                    6e:ff:ea:0e:f4:4b:d6:67:85:7b:af:45:c8:ec:bd:
                    d0:8a:5f:8c:a3:fa:c8:91:de:0a:fc:33:ab:09:a6:
                    3b:ba:bb:c5:22:2d:03:ee:ec:aa:69:35:c4:59:f2:
                    b9:05:aa:c9:b9:90:03:e9:10:53:22:50:22:da:cb:
                    9d:98:d5:1f:c8:6f:6c:2e:e4:be:38:ba:9c:6b:47:
                    0d:cc:18:d3:43:08:e4:c3:92:2c:ee:03:c2:2c:ac:
                    0c:db:40:a8:8b:8e:ab:98:88:db:d9:79:e5:7e:29:
                    82:b1:ce:22:f1:95:fd:0e:f8:fe:3a:cf:81:2b:a2:
                    f6:31:23:54:89:be:6e:ad:e4:78:4a:82:67:d9:ec:
                    d7:ab:3f:41:ec:d9:c2:49:cb:69:1a:3e:70:ef:d6:
                    3e:0b:4e:07:b5:b2:6b:d5:63:b3:88:c9:36:61:cb:
                    27:98:91:73:10:c0:92:30:94:f4:30:e4:27:e5:1b:
                    ff:3f:9b:fb:be:cd:0d:1e:cb:01:dd:14:84:4d:43:
                    82:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:80:F2:30:32:BD:E9:C9:A6:EC:48:26:D2:F6:8F:44:66:E0:6B:61
            X509v3 Authority Key Identifier:
                keyid:79:AC:9F:BD:47:3B:40:BC:06:D0:F0:51:2E:42:4D:ED:6B:2A:88:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/703bede159efdf3fd85e6b49bded6c79dc525307.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/ce4a98e934c16799fbf2cc2a643e42af8bab0c07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/703bede159efdf3fd85e6b49bded6c79dc525307.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.188.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         58:41:d0:9c:40:d6:b0:6f:4e:5c:98:14:57:ca:79:55:4e:c6:
         68:c2:e2:40:5e:63:e7:74:b7:4b:e6:b2:b1:9c:a6:1c:39:c6:
         68:48:e2:d2:9a:6e:e0:66:94:db:de:c1:34:a1:f4:43:57:1b:
         ba:4c:ed:b7:ee:0a:3d:29:b4:03:bb:15:91:fc:cf:5a:17:bd:
         b8:41:3c:6d:cf:6f:34:43:f2:e0:4c:66:c4:8f:8a:a2:74:47:
         4c:9d:01:ba:ca:25:8b:3a:57:e5:4e:5e:eb:db:bf:bb:58:3e:
         71:80:20:c9:4b:d1:cf:6e:41:c5:45:eb:ad:a6:f4:80:62:8d:
         c9:42:fe:bb:03:58:88:1b:bc:02:d9:39:c1:f6:6b:99:db:75:
         22:64:e1:ed:0e:f9:6e:de:35:5e:fd:8d:23:ed:e2:55:5b:29:
         f9:e6:8d:56:48:39:9e:30:87:65:c4:bf:36:8e:84:b0:f1:a2:
         e0:05:81:15:d8:74:d5:53:9b:51:58:c2:97:5d:ea:7d:92:dd:
         16:ad:45:24:6d:35:60:80:5f:b9:7f:cf:91:a4:7b:38:3c:7c:
         ca:13:2a:61:f1:65:d7:72:47:f0:3f:5e:6d:5a:10:b3:f8:e8:
         94:74:30:b7:44:5d:95:2c:20:47:ad:03:c9:ab:6b:01:6b:af:
         9c:3d:52:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:25 2024 by rpki-client on console-fra.rpki-client.org