Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aae69840-7ed2-42a4-a0d0-df468c29db65/d5d88a72dc9ca88586664f1cdd5eb1694f2df7b1.roa
File:                     d5d88a72dc9ca88586664f1cdd5eb1694f2df7b1.roa (raw, json)
Hash identifier:          OssnPu0DTCYDvggMhp+UJ4bnCh3VPzB/1s6EuuUHeEo=
Subject key identifier:   41:14:91:D9:97:85:23:0B:A3:8E:12:0E:CF:D1:A2:75:E8:FE:5C:3A
Certificate issuer:       /CN=acea05e36ade234a2b21796624db8f7c07355124
Certificate serial:       0D3547
Authority key identifier: 7A:75:A3:F8:25:83:24:1F:B3:1B:5E:CC:7F:61:3D:5C:FF:E9:97:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acea05e36ade234a2b21796624db8f7c07355124.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aae69840-7ed2-42a4-a0d0-df468c29db65/d5d88a72dc9ca88586664f1cdd5eb1694f2df7b1.roa
Signing time:             Wed 24 Mar 2021 14:33:39 +0000
ROA not before:           Wed 24 Mar 2021 14:33:39 +0000
ROA not after:            Tue 24 Mar 2026 14:33:39 +0000
asID:                     262256
IP address blocks:        192.141.48.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 865607 (0xd3547)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acea05e36ade234a2b21796624db8f7c07355124
        Validity
            Not Before: Mar 24 14:33:39 2021 GMT
            Not After : Mar 24 14:33:39 2026 GMT
        Subject: CN=d5d88a72dc9ca88586664f1cdd5eb1694f2df7b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:84:24:63:85:6e:68:21:03:83:51:20:8e:37:
                    62:c5:21:75:85:bb:ae:d2:83:5a:29:a9:9b:c1:3b:
                    1a:5e:34:f7:77:2a:44:60:f6:12:e3:0e:12:24:6f:
                    d7:9b:09:16:4d:4c:e2:7f:a9:c7:bf:d7:08:aa:fd:
                    76:18:02:10:81:d8:bf:a4:97:96:91:05:11:ec:57:
                    42:26:92:04:98:b7:fc:ed:ed:61:2c:54:e0:b4:10:
                    04:a4:44:86:88:c0:de:88:e5:5a:9d:16:f9:a1:57:
                    ef:81:c5:a8:b6:fd:1f:fc:fd:4f:b0:a5:07:9e:68:
                    17:ed:f5:77:e2:d4:b8:70:a6:86:18:3f:06:95:c8:
                    5a:87:54:75:c7:e6:fb:f7:36:63:fa:8a:50:23:9a:
                    0d:28:75:1e:d7:eb:d9:79:2d:8c:7a:a4:00:29:b4:
                    fc:ad:70:8d:3a:8b:44:89:d2:d9:20:08:89:83:6b:
                    b9:bc:70:57:b7:56:57:11:09:b4:d2:71:09:a3:3f:
                    45:f0:4f:5f:07:8f:93:df:bb:63:64:be:07:9a:ba:
                    15:4a:b6:8a:f1:09:b6:17:5f:2a:b9:30:6a:48:84:
                    ff:54:24:0b:ee:b5:92:ff:50:db:1e:45:f1:d6:aa:
                    3b:6a:fe:e7:44:61:c8:fe:9d:5f:7f:e3:fb:af:8d:
                    cf:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:14:91:D9:97:85:23:0B:A3:8E:12:0E:CF:D1:A2:75:E8:FE:5C:3A
            X509v3 Authority Key Identifier:
                keyid:7A:75:A3:F8:25:83:24:1F:B3:1B:5E:CC:7F:61:3D:5C:FF:E9:97:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acea05e36ade234a2b21796624db8f7c07355124.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aae69840-7ed2-42a4-a0d0-df468c29db65/d5d88a72dc9ca88586664f1cdd5eb1694f2df7b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aae69840-7ed2-42a4-a0d0-df468c29db65/acea05e36ade234a2b21796624db8f7c07355124.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:b3:b3:0f:4e:7b:bd:52:24:8b:35:8b:a6:19:da:ca:f3:c1:
         25:1d:c6:e7:9b:ef:a0:1b:3e:ef:ca:79:b2:d7:3e:ea:45:39:
         f7:b0:fc:bd:fb:74:76:bc:bf:86:64:c0:1a:ac:4d:1a:e4:a9:
         46:95:62:84:00:3f:67:2c:d2:7b:46:05:6c:4c:9d:78:b0:77:
         cd:d1:f6:10:4a:f9:2f:3b:fe:12:fb:45:fa:6a:af:cb:5b:c2:
         0e:de:b3:cc:1c:38:dc:d7:ae:04:5b:8a:64:71:05:cd:09:a7:
         73:9e:46:ad:d7:a6:c3:65:9a:d3:e9:fe:18:74:5f:25:9f:19:
         a5:78:db:26:9a:1c:2c:7d:eb:e7:c0:d9:31:55:ee:7d:f9:15:
         fc:55:70:43:35:3d:ef:b8:39:83:e0:90:2e:9b:8a:7a:11:5f:
         34:3f:11:51:f2:77:a4:28:bc:38:a3:ee:a5:d1:60:ee:51:23:
         b2:84:c7:d3:cd:33:97:02:2b:46:d7:ce:fc:d0:8e:97:52:b2:
         62:51:2c:6c:78:8d:63:0f:86:81:1b:fb:02:70:62:2f:46:58:
         b6:8e:ab:e6:13:1b:92:f4:2e:b9:6a:86:8d:af:d0:f4:74:20:
         33:9f:cd:c7:d7:d5:bb:d8:d1:99:12:4b:16:05:be:d7:e5:54:
         4f:4f:4d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:45 2024 by rpki-client on console-ams.rpki-client.org