Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/8be1337d24bc3b1212ca70d98feb7aa972dcf5f2.roa
File:                     8be1337d24bc3b1212ca70d98feb7aa972dcf5f2.roa (raw, json)
Hash identifier:          0l5PpSiswnlaNwjgYtaUvaT6h+dJkg8NDlN57eYxJIM=
Subject key identifier:   6A:24:2E:69:38:94:C7:40:AA:77:A4:CA:90:8A:F3:F1:59:92:88:EC
Certificate issuer:       /CN=d5747c1980bcbeed56cb517c667a966b8945ceee
Certificate serial:       1A77C9
Authority key identifier: 14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/8be1337d24bc3b1212ca70d98feb7aa972dcf5f2.roa
Signing time:             Wed 07 Sep 2022 22:21:37 +0000
ROA not before:           Wed 07 Sep 2022 20:49:37 +0000
ROA not after:            Sat 07 Sep 2024 20:49:37 +0000
asID:                     262145
IP address blocks:        190.211.106.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1734601 (0x1a77c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5747c1980bcbeed56cb517c667a966b8945ceee
        Validity
            Not Before: Sep  7 20:49:37 2022 GMT
            Not After : Sep  7 20:49:37 2024 GMT
        Subject: CN=8be1337d24bc3b1212ca70d98feb7aa972dcf5f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f3:c9:57:c7:11:5a:e9:24:b6:79:36:09:a9:
                    44:0d:82:38:03:29:24:5e:7c:87:48:3c:88:65:53:
                    86:a4:00:63:41:98:9c:f6:0f:af:66:40:b6:61:4a:
                    e4:2f:50:ea:f2:6a:d6:83:d3:cf:9d:39:64:21:85:
                    4f:a0:5a:8d:78:13:9f:46:b9:ca:45:e9:53:6e:26:
                    0a:7e:8e:e5:1f:44:9a:c3:b9:e9:05:26:5f:36:7a:
                    2a:f0:30:73:e4:95:90:9d:9f:90:b4:d4:21:47:75:
                    85:9e:de:2e:73:61:d6:57:15:84:e5:7c:ea:59:db:
                    7e:09:de:ac:95:86:f6:cc:2d:1f:c9:7b:01:5f:3d:
                    22:10:2b:57:d1:fe:11:d0:d4:d2:8a:d6:94:38:78:
                    68:fc:c2:3c:c4:e8:07:39:42:40:9b:ff:60:29:cf:
                    d7:da:8d:d1:ba:8e:b3:7c:39:c1:ad:73:7d:77:3e:
                    ea:74:4e:65:e1:9f:19:18:56:2e:89:2d:80:87:5a:
                    e6:93:77:ca:be:96:4f:5d:4d:58:ad:0e:58:8d:06:
                    c0:fb:d3:e6:c6:89:05:e9:1b:eb:d0:e9:e8:b3:1f:
                    80:39:5d:ec:3e:4b:25:98:a8:43:65:04:00:82:41:
                    d8:69:3e:5d:3c:7f:45:8e:d0:34:69:b2:93:0d:8d:
                    3a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:24:2E:69:38:94:C7:40:AA:77:A4:CA:90:8A:F3:F1:59:92:88:EC
            X509v3 Authority Key Identifier:
                keyid:14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/8be1337d24bc3b1212ca70d98feb7aa972dcf5f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/d5747c1980bcbeed56cb517c667a966b8945ceee.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:1e:8b:f4:27:3d:73:3d:0f:fd:c9:8b:d5:90:32:91:d5:54:
         34:72:dc:42:ed:ee:f8:a1:56:c9:ed:08:76:6f:f9:bd:8d:2e:
         52:88:ff:88:58:b0:38:00:25:35:d1:0e:bc:eb:4b:59:cc:97:
         65:a0:99:ef:0c:47:83:5f:19:0e:b1:03:0e:29:c4:f0:1d:b5:
         b6:85:55:26:9b:70:38:28:eb:06:3a:92:2a:c3:18:29:b1:bf:
         82:d7:66:f7:8a:31:19:d7:a5:c1:ec:23:65:44:f2:66:a0:19:
         9d:de:7a:8b:85:0a:06:fb:bd:eb:ca:3f:d4:f8:66:13:4d:5e:
         5e:98:c1:12:2e:ce:17:80:48:38:a3:82:45:1a:29:47:a3:bb:
         a4:e7:52:fb:e1:f2:e9:a8:97:02:8a:3d:df:60:e3:2a:20:b1:
         96:20:4f:9d:8a:46:22:81:29:6b:3c:c5:cf:40:c8:42:22:19:
         ac:83:b5:7b:ab:fe:3f:0e:d3:31:b7:10:ce:83:e4:1c:71:d0:
         e5:52:20:73:14:9b:f8:16:a6:06:1c:18:58:98:2d:2f:d4:2a:
         24:c9:5f:55:b3:fb:b7:0c:b8:e5:8c:ae:94:8a:73:c3:a2:c6:
         25:13:7b:fb:e0:bd:78:d5:8e:76:ed:1e:cf:33:0b:06:f2:03:
         bb:b9:62:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:01 2024 by rpki-client on console-fra.rpki-client.org