Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/53245d4bbec3496b54533b5b7ae36f1f58cba7d8.roa
File:                     53245d4bbec3496b54533b5b7ae36f1f58cba7d8.roa (raw, json)
Hash identifier:          uB9+UV5yzlAJ8KqVTsvzTK4qJr6f8+PNVcuE6K7FlGU=
Subject key identifier:   38:91:92:BB:D9:A2:9D:4A:61:2C:46:38:72:6C:C6:85:2C:F3:22:C5
Certificate issuer:       /CN=d5747c1980bcbeed56cb517c667a966b8945ceee
Certificate serial:       1A7F55
Authority key identifier: 14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/53245d4bbec3496b54533b5b7ae36f1f58cba7d8.roa
Signing time:             Wed 07 Sep 2022 22:22:48 +0000
ROA not before:           Wed 07 Sep 2022 20:49:37 +0000
ROA not after:            Sat 07 Sep 2024 20:49:37 +0000
asID:                     262145
IP address blocks:        190.211.108.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1736533 (0x1a7f55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5747c1980bcbeed56cb517c667a966b8945ceee
        Validity
            Not Before: Sep  7 20:49:37 2022 GMT
            Not After : Sep  7 20:49:37 2024 GMT
        Subject: CN=53245d4bbec3496b54533b5b7ae36f1f58cba7d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:22:ed:90:47:48:04:56:6b:a1:43:c7:d1:ae:
                    0e:7f:42:6e:0b:80:0f:7d:8d:04:9d:a7:9b:6c:01:
                    73:5f:22:c7:40:b3:ac:dd:1c:24:e8:d7:33:91:5b:
                    bb:63:7b:f4:dc:40:c6:ac:3e:b8:69:8b:fe:ba:53:
                    f8:3c:80:f3:73:57:a5:4d:ee:de:13:dd:10:40:29:
                    61:fa:1b:ee:c6:32:62:df:70:ef:02:d9:c7:18:35:
                    09:e5:9b:f0:2c:ad:48:5f:39:f5:d2:7d:78:4c:61:
                    89:ca:1f:6a:38:f0:fc:d4:66:55:92:46:38:bb:d4:
                    30:a3:6c:5b:26:7c:90:f1:34:a1:ce:84:12:b3:b7:
                    ba:8a:5b:2e:9e:ae:84:5b:5c:77:92:28:92:23:b4:
                    3c:49:10:e2:0d:53:6d:37:bf:4e:16:ed:6f:76:8d:
                    a9:2c:a9:19:02:4e:9f:80:c5:3c:e5:67:d1:c6:30:
                    8f:75:86:91:09:ac:22:3e:80:eb:28:fb:a5:ee:26:
                    86:d3:23:c8:1e:14:03:23:a7:62:fa:c4:c3:1c:d2:
                    36:9c:f8:b0:22:10:17:eb:55:97:ab:8e:d6:d0:64:
                    2c:40:da:35:df:75:52:4e:fb:be:78:db:40:aa:e6:
                    76:6e:cf:10:6e:03:f1:62:fe:d9:ad:3e:dd:33:75:
                    a5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:91:92:BB:D9:A2:9D:4A:61:2C:46:38:72:6C:C6:85:2C:F3:22:C5
            X509v3 Authority Key Identifier:
                keyid:14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/53245d4bbec3496b54533b5b7ae36f1f58cba7d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/d5747c1980bcbeed56cb517c667a966b8945ceee.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:cd:b8:9b:a3:fb:2e:71:07:95:b2:cd:8a:82:48:a3:d4:e9:
         73:92:0f:82:7a:32:b1:f6:7a:50:cb:a6:77:ec:98:f5:54:a5:
         b8:4a:bf:69:b7:fb:47:be:56:11:ea:22:ae:82:04:b6:8e:75:
         67:6e:37:17:72:72:44:8d:ff:fc:62:5e:bf:d9:aa:96:79:7e:
         f9:dd:cc:35:0e:85:74:f2:ee:86:ee:f5:57:41:32:fc:38:b2:
         31:8c:62:41:40:e1:e2:37:31:46:37:a0:83:6b:50:b8:69:eb:
         cd:59:b5:0c:3e:d2:50:9f:a1:fd:4f:63:cc:3b:70:00:51:62:
         38:98:aa:3f:de:fd:ab:e9:89:79:d8:c3:0c:ff:7b:95:53:59:
         1a:2e:73:f8:54:b5:b8:6e:a8:03:79:c1:a3:62:7d:c1:94:21:
         7b:5e:ea:b5:a1:13:48:50:a8:79:7d:5f:83:ad:3e:c6:b4:4e:
         7b:49:3f:e9:ee:39:bc:3e:86:c0:8e:41:6e:a2:9e:e8:43:4b:
         ad:2b:f1:ca:86:9c:3a:0e:3c:f1:6f:d6:4b:b5:38:85:1d:79:
         f9:2e:bc:eb:e3:45:c9:4d:a6:67:81:40:34:b2:8f:f3:eb:9e:
         f2:07:6a:bc:22:59:fd:e4:5c:43:9c:8e:7e:24:70:f4:86:f7:
         2f:84:c2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:45 2024 by rpki-client on console-ams.rpki-client.org