Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/ca2a0c9ec229727bcad0d34c98efc113b632a503.roa
File:                     ca2a0c9ec229727bcad0d34c98efc113b632a503.roa (raw, json)
Hash identifier:          2SzzJdEXWEioa0dMnPBgvLUX8/fp7D+td/A6yyQooJI=
Subject key identifier:   48:85:92:E9:1A:F5:2C:D5:32:1D:D8:0C:0D:FF:B3:6E:FC:4A:A9:4A
Certificate issuer:       /CN=d5747c1980bcbeed56cb517c667a966b8945ceee
Certificate serial:       1ABF03
Authority key identifier: 14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/ca2a0c9ec229727bcad0d34c98efc113b632a503.roa
Signing time:             Wed 07 Sep 2022 22:32:48 +0000
ROA not before:           Wed 07 Sep 2022 20:49:37 +0000
ROA not after:            Sat 07 Sep 2024 20:49:37 +0000
asID:                     262145
IP address blocks:        190.211.127.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1752835 (0x1abf03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5747c1980bcbeed56cb517c667a966b8945ceee
        Validity
            Not Before: Sep  7 20:49:37 2022 GMT
            Not After : Sep  7 20:49:37 2024 GMT
        Subject: CN=ca2a0c9ec229727bcad0d34c98efc113b632a503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c0:19:4f:4b:03:8c:56:ae:38:a2:c8:26:a8:
                    ca:5c:d2:a1:19:a4:17:3f:43:b5:fb:d0:85:cf:57:
                    fe:01:a4:56:cb:5c:ec:3c:7a:3d:b9:65:22:4e:a4:
                    9b:1f:47:1f:2d:df:4c:3b:c7:72:7f:e9:36:e7:0e:
                    06:4d:ed:37:68:fd:67:f8:6e:0b:9b:99:35:c3:10:
                    31:22:bb:9e:50:aa:9b:1f:fc:15:e1:ff:79:18:ac:
                    6c:0f:40:35:79:f0:32:a9:87:d4:a3:a8:34:6a:52:
                    a4:99:f9:d0:be:be:48:3e:7a:85:53:ce:8a:a7:56:
                    dd:41:12:f1:0b:5c:0c:ae:e1:89:13:c1:19:ef:a1:
                    fc:c2:3d:cb:58:97:c8:e6:08:79:88:09:db:36:6e:
                    9f:05:04:33:ba:4b:43:bb:d4:37:89:da:d8:03:3c:
                    49:0f:44:1f:4e:15:fd:c6:19:da:35:7a:a1:73:03:
                    eb:67:fa:f2:7d:96:90:1c:90:16:fd:80:38:91:96:
                    30:71:63:65:ae:b1:6d:6a:fb:81:36:1e:b8:40:59:
                    26:14:3c:3b:ae:09:85:4e:55:86:16:4e:1e:0a:65:
                    8a:26:f7:51:a2:de:c8:55:5e:6f:2d:fa:e8:da:bd:
                    fd:19:79:0c:34:6d:df:ce:4c:e2:93:07:65:d5:d9:
                    8a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:85:92:E9:1A:F5:2C:D5:32:1D:D8:0C:0D:FF:B3:6E:FC:4A:A9:4A
            X509v3 Authority Key Identifier:
                keyid:14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/ca2a0c9ec229727bcad0d34c98efc113b632a503.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/d5747c1980bcbeed56cb517c667a966b8945ceee.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:38:be:14:df:24:31:79:bc:3f:c4:71:9c:5f:f3:a4:3c:a2:
         42:69:e0:bd:4a:8d:bb:6f:28:f1:8b:25:7f:f3:2c:c0:1c:fd:
         d7:e7:ab:df:92:17:03:8b:b9:fb:45:92:99:ee:a3:03:42:e3:
         4b:48:d2:ea:7a:ea:87:83:6e:20:83:77:96:cb:af:fd:9a:9c:
         3c:bf:4e:93:39:dd:a1:0b:dd:46:37:5b:c2:12:c0:84:45:c8:
         eb:c6:ca:e9:8c:9e:61:05:67:7d:43:ca:7e:c4:2c:2b:74:22:
         6f:c8:c3:ca:7f:76:0b:94:55:2b:6b:1e:55:1e:cb:c6:63:70:
         ae:75:8e:61:06:12:c7:5a:db:42:c5:f8:f7:b7:17:fc:cf:10:
         a4:5d:49:cb:8e:09:d6:3f:aa:8f:9f:4b:53:d5:30:6e:ea:64:
         d8:f6:c6:b6:d5:2e:99:a8:36:4d:f4:73:f5:17:3b:8d:28:f6:
         cb:32:71:0a:48:1b:d5:65:fb:46:60:bf:c6:b0:c8:f5:72:d9:
         3a:07:7e:1e:6d:ac:e0:1d:0c:c7:8a:c0:f3:95:8c:5f:87:64:
         24:da:07:b8:69:dd:41:49:7b:46:a8:bc:0d:e1:4e:84:fb:91:
         26:b4:77:1d:2b:07:da:2b:b3:ac:ed:e8:d2:f0:29:c0:db:a5:
         d2:9c:5f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org