Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/81845c708696b348308f4fa19d68933c8ed0bd16.roa
File:                     81845c708696b348308f4fa19d68933c8ed0bd16.roa (raw, json)
Hash identifier:          k2NQsmYTbR9NIRZaBJ088iqKQ1XXvp1fJxBjyfa0Rkk=
Subject key identifier:   ED:B1:29:A4:25:77:C8:2D:48:F5:73:D9:C7:A1:31:02:5F:8D:22:3B
Certificate issuer:       /CN=d5747c1980bcbeed56cb517c667a966b8945ceee
Certificate serial:       1A5E3D
Authority key identifier: 14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/81845c708696b348308f4fa19d68933c8ed0bd16.roa
Signing time:             Wed 07 Sep 2022 20:53:36 +0000
ROA not before:           Wed 07 Sep 2022 20:49:37 +0000
ROA not after:            Sat 07 Sep 2024 20:49:37 +0000
asID:                     262145
IP address blocks:        190.211.99.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1728061 (0x1a5e3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5747c1980bcbeed56cb517c667a966b8945ceee
        Validity
            Not Before: Sep  7 20:49:37 2022 GMT
            Not After : Sep  7 20:49:37 2024 GMT
        Subject: CN=81845c708696b348308f4fa19d68933c8ed0bd16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ce:d7:bd:83:9e:8d:aa:a4:bb:dd:33:f7:be:
                    0f:ec:5a:06:de:3b:50:06:38:00:14:10:7c:b9:1d:
                    a8:b9:88:2f:a8:9d:cc:78:b4:df:83:57:bd:df:03:
                    89:7a:3b:a4:41:9b:1b:e4:a9:6d:27:1f:da:4d:e4:
                    f7:be:97:6f:0c:7c:94:89:5a:ff:b3:79:26:a3:d0:
                    3f:9e:82:c4:1e:47:91:77:37:72:1c:d7:1a:e7:42:
                    6d:1f:32:76:98:8e:f2:d6:c1:24:44:f5:8e:e7:98:
                    89:56:73:25:a8:8c:83:ba:3a:c8:da:0f:5f:6f:cf:
                    9e:56:65:97:36:f5:0b:6e:64:14:a9:15:76:87:b1:
                    88:90:8d:e3:69:ba:cd:aa:5a:76:5f:e6:6f:6d:ef:
                    d1:da:03:a3:31:89:37:11:8b:e3:b1:d6:bf:93:ea:
                    d1:07:1b:bd:97:ac:65:a6:bc:64:a8:80:e9:a8:e9:
                    1a:53:f8:a6:46:09:e2:5c:68:47:ef:9e:90:ba:18:
                    97:aa:5c:8c:4f:a9:d7:d2:9e:6f:53:c2:00:5a:47:
                    cd:b5:f5:89:29:b7:dd:f3:96:54:d4:93:29:c8:c2:
                    b7:d1:23:80:e7:9d:94:0d:01:25:59:38:32:96:cd:
                    0b:bc:e4:ff:7d:89:93:54:26:4f:b6:e1:fd:bc:e5:
                    51:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B1:29:A4:25:77:C8:2D:48:F5:73:D9:C7:A1:31:02:5F:8D:22:3B
            X509v3 Authority Key Identifier:
                keyid:14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/81845c708696b348308f4fa19d68933c8ed0bd16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/d5747c1980bcbeed56cb517c667a966b8945ceee.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:2d:f4:26:84:6f:bc:e7:3a:4a:e3:83:c3:75:25:fd:dc:1c:
         3f:2a:41:bb:62:30:97:c5:f2:0d:f2:2a:fe:68:8b:9f:c9:34:
         1c:b6:73:03:ab:e6:7b:c4:70:e1:a6:a2:5f:9e:57:cb:eb:aa:
         eb:fd:34:c9:b6:78:65:0b:89:6c:19:28:da:9e:5c:81:fa:92:
         68:15:a8:a7:da:4d:19:d5:ea:e6:3c:ad:8d:4e:73:13:67:30:
         45:aa:d2:35:e7:2d:85:dd:7f:c9:51:f2:34:a8:d9:71:60:79:
         d3:0a:6a:85:8d:a7:f9:11:86:2e:56:5a:24:28:bc:4f:53:ce:
         58:28:1e:ed:c0:b2:cf:ca:fc:a4:5b:ba:4e:2a:cf:40:20:55:
         0c:a8:80:7c:2b:86:7c:f7:d6:33:99:b4:98:ea:52:f8:89:13:
         09:b1:24:74:51:1b:9e:1a:ab:f4:d7:a3:8f:6a:d7:9f:08:2a:
         78:b0:ed:b5:58:b1:43:23:7e:2b:81:d0:9c:e3:7b:1e:66:48:
         7c:c5:e2:fe:55:44:3d:78:87:02:b4:d3:37:4f:93:b2:8f:9a:
         77:a7:1c:3c:a4:cb:a0:26:89:7f:18:ce:7e:39:e7:34:08:56:
         50:26:7e:29:1d:64:b8:86:d4:42:39:b7:10:89:ae:e6:ab:b4:
         15:9e:79:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org