Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/15d03892ad932631367b438386faf61001167c4c.roa
File:                     15d03892ad932631367b438386faf61001167c4c.roa (raw, json)
Hash identifier:          o74z7ypQKiX5B5RwORi5gvP+QiDCsNJOUcujAaUqBbc=
Subject key identifier:   30:8B:63:65:D6:35:39:4A:AC:04:99:B8:3C:26:64:17:D8:9D:A3:1E
Certificate issuer:       /CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Certificate serial:       29555B
Authority key identifier: 80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/15d03892ad932631367b438386faf61001167c4c.roa
Signing time:             Mon 29 Jan 2024 14:08:41 +0000
ROA not before:           Mon 29 Jan 2024 14:08:40 +0000
ROA not after:            Thu 29 Jan 2026 14:08:40 +0000
asID:                     28011
IP address blocks:        190.152.254.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2708827 (0x29555b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1059e1e3317704575f2c0b750ee73b166a39cd37
        Validity
            Not Before: Jan 29 14:08:40 2024 GMT
            Not After : Jan 29 14:08:40 2026 GMT
        Subject: CN=15d03892ad932631367b438386faf61001167c4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f6:14:c5:da:39:20:95:71:d9:4e:71:bd:1d:
                    5b:ce:8d:24:b1:3b:0f:a0:0b:ae:89:dc:41:e8:da:
                    bf:36:46:ac:5d:0c:1e:82:36:50:00:3f:44:db:52:
                    f7:29:f4:40:44:f8:c6:7c:c2:b0:64:7f:b4:79:d0:
                    d0:be:69:33:a3:0d:e0:8d:e7:66:d2:d8:a4:da:d7:
                    9d:d6:45:7f:db:9d:24:5f:37:6e:e1:e2:59:75:d4:
                    c6:82:16:4e:df:56:fb:3c:35:da:43:04:89:0e:da:
                    7e:e2:4e:76:53:2b:b1:16:86:7a:9b:d9:48:bb:2f:
                    7c:39:ee:6e:32:bf:68:23:f5:ed:e5:10:22:13:79:
                    54:3d:38:e6:96:da:17:7a:e4:81:84:57:e7:40:53:
                    33:55:48:e0:e0:fe:84:4d:81:bc:74:92:c0:c7:78:
                    4a:eb:72:65:b9:ae:a6:3d:0a:44:ac:77:32:43:b7:
                    9c:82:55:f0:c8:07:23:08:f9:ae:ce:d0:c1:b7:1f:
                    4f:60:db:09:61:3c:fd:0a:1c:7f:52:60:c8:a6:ba:
                    ed:82:bb:5e:e2:a6:bb:ea:1e:f6:20:ba:5b:4a:fd:
                    90:37:7c:d2:36:42:6c:8a:f3:78:9e:8e:4a:7c:ab:
                    28:a2:ab:58:b5:1f:4b:f6:ed:5d:e0:4d:a6:d4:4d:
                    8b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:8B:63:65:D6:35:39:4A:AC:04:99:B8:3C:26:64:17:D8:9D:A3:1E
            X509v3 Authority Key Identifier:
                keyid:80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/15d03892ad932631367b438386faf61001167c4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.152.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:88:c9:e4:53:20:08:c0:10:53:08:50:9d:a2:8f:71:04:42:
         d5:02:db:20:fc:ad:28:ad:fa:d8:18:6e:05:92:07:5c:4d:41:
         b2:57:e1:f9:4c:e7:f7:00:06:12:15:ea:f1:a9:dc:8c:8e:e1:
         eb:37:0e:8f:dd:59:9f:9a:86:00:c9:39:96:3a:10:fb:3c:e2:
         3e:f2:4c:a2:05:87:0f:71:3f:85:e9:ac:ec:56:ae:79:a6:95:
         45:1c:d4:c8:fd:1e:ec:fd:82:e3:88:8f:10:69:d0:1d:02:6c:
         63:3a:ef:e3:53:fd:5a:8d:cd:84:ae:14:40:f7:a1:1c:4d:7c:
         0a:bd:68:f9:bd:ee:e3:85:9d:28:96:ec:39:9a:73:56:89:85:
         3b:77:65:64:b1:e4:07:30:3c:bc:d2:6f:67:ae:55:ca:ef:d2:
         74:87:40:69:d7:88:9c:9c:c8:31:8f:0d:37:8d:93:fa:da:1e:
         fe:ee:44:99:ee:48:f0:d6:ec:d9:5b:c2:d2:4a:b7:ae:ac:00:
         20:e8:a6:41:46:87:9c:4f:49:37:93:7a:12:88:85:13:d8:6b:
         22:22:04:d7:94:ce:e3:ed:dc:81:27:25:fd:b9:a3:8c:b5:b5:
         02:fc:ac:ee:73:d1:03:b4:62:4a:83:8a:6a:b1:a6:48:37:59:
         6c:3a:df:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:45 2024 by rpki-client on console-ams.rpki-client.org