Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/231400ab8a8fdeac8c9c1cf43145a08ece9fc27b.roa
File:                     231400ab8a8fdeac8c9c1cf43145a08ece9fc27b.roa (raw, json)
Hash identifier:          TP0y6Odf7wCZ/JddUeBrruivY7B3DJ4DIcofJgQcCMU=
Subject key identifier:   F2:C9:12:D4:8A:03:13:11:08:E1:04:82:16:71:1C:F4:89:BF:3F:AC
Certificate issuer:       /CN=d5747c1980bcbeed56cb517c667a966b8945ceee
Certificate serial:       1A895D
Authority key identifier: 14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/231400ab8a8fdeac8c9c1cf43145a08ece9fc27b.roa
Signing time:             Wed 07 Sep 2022 22:24:05 +0000
ROA not before:           Wed 07 Sep 2022 20:49:37 +0000
ROA not after:            Sat 07 Sep 2024 20:49:37 +0000
asID:                     262145
IP address blocks:        190.211.111.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1739101 (0x1a895d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5747c1980bcbeed56cb517c667a966b8945ceee
        Validity
            Not Before: Sep  7 20:49:37 2022 GMT
            Not After : Sep  7 20:49:37 2024 GMT
        Subject: CN=231400ab8a8fdeac8c9c1cf43145a08ece9fc27b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:48:db:13:75:04:61:4f:06:08:f6:4c:3c:ba:
                    a4:ee:63:72:42:64:0e:dd:93:6c:85:9c:f3:58:4e:
                    ae:11:33:0a:51:7c:91:5e:a5:9e:3f:d6:66:17:82:
                    1d:61:26:e0:b8:6d:46:8f:78:3a:cd:83:80:f7:7f:
                    64:e7:d4:f0:24:d5:bd:d4:9a:7e:fc:c5:b6:56:3e:
                    3b:c3:cf:04:0c:91:02:d6:3d:c7:7a:96:fa:3e:85:
                    3f:d3:8b:94:cf:fc:7f:d5:ba:f8:14:2e:f3:e8:a7:
                    82:9b:41:b6:d6:23:39:3e:24:b5:52:7a:c9:95:0c:
                    5e:a7:c0:39:65:0f:4a:45:f8:a5:ed:3f:75:08:40:
                    de:3b:20:3f:95:13:14:9f:cf:7c:41:4f:7a:a8:7c:
                    7c:05:d6:27:f4:e7:b8:49:d9:55:39:80:03:9f:09:
                    46:c5:b6:d3:aa:9f:9f:08:f0:2d:72:09:72:70:a8:
                    71:fb:d3:8b:07:21:f1:0b:aa:be:24:94:23:ee:0f:
                    9a:32:8e:c3:e3:b9:86:90:1f:09:67:a1:2b:07:22:
                    dc:c4:53:ef:ce:6e:e2:dc:56:7e:64:66:67:bb:0c:
                    9d:4d:b6:af:56:6c:15:6b:b8:6a:eb:34:c6:db:44:
                    51:dc:a7:c4:51:a1:b2:23:02:e1:8c:91:c9:88:c9:
                    46:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:C9:12:D4:8A:03:13:11:08:E1:04:82:16:71:1C:F4:89:BF:3F:AC
            X509v3 Authority Key Identifier:
                keyid:14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/231400ab8a8fdeac8c9c1cf43145a08ece9fc27b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/d5747c1980bcbeed56cb517c667a966b8945ceee.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:8a:88:05:2b:26:dc:29:a9:e9:6d:e6:95:15:32:9b:22:50:
         c6:c0:53:16:fe:c1:5c:1d:91:f4:7d:aa:3d:9d:39:5b:d2:a3:
         89:fd:93:1c:eb:06:02:0c:5d:4c:25:57:72:51:a5:2c:99:fa:
         60:9f:87:31:9f:c1:3e:2f:ea:7c:47:a3:d9:c3:75:e8:46:7e:
         02:68:44:43:c0:f6:1f:81:39:4c:d7:82:b0:af:86:fd:09:50:
         7e:3c:3e:92:ec:f2:63:c4:96:06:78:bb:5b:78:3f:b6:70:93:
         2b:64:41:42:f1:60:81:3e:c9:6d:c0:5c:c4:60:d3:4f:35:e1:
         66:6d:b3:73:cd:0b:fe:43:57:ad:62:10:b0:48:fa:cf:dd:b1:
         66:20:4f:e4:21:e2:9f:a6:94:39:7a:84:cb:5d:9a:04:bf:5c:
         0e:d6:96:af:46:0d:05:29:11:b8:65:40:59:7c:d2:1e:8b:70:
         65:1c:c8:a1:5d:95:39:ad:2f:e5:99:f2:b0:1c:3b:01:1b:df:
         c0:5a:41:44:2d:3a:15:7b:47:6c:16:f2:b2:2a:8f:ae:75:a7:
         03:e1:28:81:01:5c:29:64:4d:aa:2f:57:a7:66:68:99:48:57:
         09:19:70:1d:92:50:f4:da:9b:ee:b2:0b:79:a6:f3:fc:42:be:
         e9:be:db:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:45 2024 by rpki-client on console-ams.rpki-client.org