Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/1ead10c8360b474d5ea52b2ba640e00176e8f8d3.roa
File:                     1ead10c8360b474d5ea52b2ba640e00176e8f8d3.roa (raw, json)
Hash identifier:          1ZNg1ApDr0IqYNDkV7XQBjVC/LfAA5aPLFHDMm2Ypgg=
Subject key identifier:   79:30:FE:2C:6B:0F:2E:53:9A:A7:4F:C1:BA:74:E1:AE:61:D1:04:6D
Certificate issuer:       /CN=d5747c1980bcbeed56cb517c667a966b8945ceee
Certificate serial:       1A6AD0
Authority key identifier: 14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/1ead10c8360b474d5ea52b2ba640e00176e8f8d3.roa
Signing time:             Wed 07 Sep 2022 22:20:08 +0000
ROA not before:           Wed 07 Sep 2022 20:49:37 +0000
ROA not after:            Sat 07 Sep 2024 20:49:37 +0000
asID:                     262145
IP address blocks:        190.211.103.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1731280 (0x1a6ad0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5747c1980bcbeed56cb517c667a966b8945ceee
        Validity
            Not Before: Sep  7 20:49:37 2022 GMT
            Not After : Sep  7 20:49:37 2024 GMT
        Subject: CN=1ead10c8360b474d5ea52b2ba640e00176e8f8d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ab:b6:8d:5d:c3:26:35:53:37:0f:3c:23:e5:
                    e7:49:0f:e7:4d:55:63:a5:7a:eb:ed:11:e4:c8:77:
                    3a:03:72:8a:22:6c:c0:12:56:ca:06:c8:2d:5d:bd:
                    85:5f:87:b4:c4:91:9c:8d:a5:2a:2e:7b:f2:e3:95:
                    65:cf:f4:bb:8c:5c:1f:79:63:d8:97:49:16:0d:2f:
                    05:3a:d8:a0:84:e4:23:17:da:80:95:41:08:5a:90:
                    81:32:ff:52:d1:99:f5:9f:d8:a9:e8:dc:46:26:43:
                    d1:b5:db:f1:9a:18:2d:3d:ab:98:93:01:67:38:21:
                    dd:e6:72:5b:ff:1e:b5:fc:b0:88:90:bb:95:7e:df:
                    d6:04:77:fb:a1:ad:60:ab:63:1c:e4:82:05:2e:a2:
                    5f:e1:d0:68:28:01:07:42:88:f0:5e:d8:40:7e:59:
                    7c:a4:4f:09:09:f2:4c:90:5f:ce:e0:0b:f6:08:62:
                    78:0a:e9:28:97:b0:1b:c2:82:d4:18:85:e6:c3:9f:
                    7f:cd:98:41:5c:9c:b1:10:00:71:51:5e:23:16:38:
                    f7:c3:2e:ab:ba:1c:f7:ce:14:48:22:19:1a:51:cd:
                    2b:b6:e8:72:e1:17:c2:fa:86:c0:dc:0c:21:95:51:
                    86:10:6e:a1:2d:28:0f:0c:7b:f7:c7:9f:3a:27:74:
                    04:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:30:FE:2C:6B:0F:2E:53:9A:A7:4F:C1:BA:74:E1:AE:61:D1:04:6D
            X509v3 Authority Key Identifier:
                keyid:14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/1ead10c8360b474d5ea52b2ba640e00176e8f8d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/d5747c1980bcbeed56cb517c667a966b8945ceee.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:2f:47:79:c1:4e:0f:8a:d6:4f:34:62:41:04:e1:86:2a:ed:
         23:c6:4d:84:93:92:6c:bf:fe:20:25:e3:2c:67:24:a6:45:8d:
         13:2c:18:43:5c:76:88:4e:5a:56:83:78:14:b7:58:c7:fc:bb:
         08:88:7a:1f:61:eb:fb:ea:bc:c1:f5:91:4f:54:71:e6:c3:b9:
         d5:08:45:67:35:50:ca:4e:30:f2:73:60:61:2c:10:2f:e1:a2:
         d4:53:af:5e:4d:cb:42:81:9c:0b:c1:07:1a:46:4b:70:05:0c:
         c6:c4:59:a5:59:5f:fb:1e:fa:84:e7:d8:51:13:14:16:8b:b1:
         42:d1:b7:bc:af:ce:91:be:ee:e8:4f:26:bc:17:67:e2:15:8c:
         dd:93:4c:fa:fe:02:8a:44:91:3d:8c:e7:12:bc:98:3a:c6:9d:
         38:d1:21:40:21:d8:dc:e6:d7:65:4e:27:3b:57:c6:35:a9:71:
         20:77:4b:9f:90:a1:ab:8c:e8:83:9f:95:3b:17:8f:9e:e3:4f:
         ae:5d:60:11:6b:7a:64:d1:f4:69:d1:1a:d7:1e:0e:03:d8:7c:
         4b:84:66:dd:27:67:02:1c:c0:f7:d1:27:7d:70:e7:25:01:2b:
         4a:2d:25:eb:fd:e3:81:33:23:fc:c0:d8:7c:9f:b5:49:e0:2d:
         a4:ef:f9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org