Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/57333bdf235dc5e8280196ec46a9e464a002fc08.roa
File:                     57333bdf235dc5e8280196ec46a9e464a002fc08.roa (raw, json)
Hash identifier:          +LNkBtlWl6fGiMhQHCdPBYmpjTE6QpI3n97YC7Lfsgc=
Subject key identifier:   FC:9B:F2:FB:EF:53:42:AD:5E:1D:00:03:66:BA:3F:F6:54:04:E6:17
Certificate issuer:       /CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Certificate serial:       2A08E9
Authority key identifier: 80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/57333bdf235dc5e8280196ec46a9e464a002fc08.roa
Signing time:             Mon 26 Feb 2024 16:46:26 +0000
ROA not before:           Mon 26 Feb 2024 16:46:26 +0000
ROA not after:            Thu 26 Feb 2026 16:46:26 +0000
asID:                     28011
IP address blocks:        190.11.20.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2754793 (0x2a08e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1059e1e3317704575f2c0b750ee73b166a39cd37
        Validity
            Not Before: Feb 26 16:46:26 2024 GMT
            Not After : Feb 26 16:46:26 2026 GMT
        Subject: CN=57333bdf235dc5e8280196ec46a9e464a002fc08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3e:85:4d:ae:92:f8:17:d4:45:22:d3:fe:c3:
                    f6:12:df:1d:eb:ba:c8:05:6b:09:d2:10:c3:e5:a8:
                    60:53:33:77:0f:89:68:01:0c:28:03:94:7a:1d:9f:
                    79:f4:37:72:c2:96:7c:a3:be:fa:d4:0f:8f:cd:b0:
                    d1:73:1c:86:22:ac:f1:b5:87:c8:f3:36:89:21:6d:
                    d8:22:24:af:0c:81:8f:e1:38:bd:fa:12:cc:d2:4b:
                    9f:b7:40:fa:10:fb:00:b0:e4:82:5b:2c:cb:f4:33:
                    7a:44:d6:76:bf:a7:4f:19:1a:e7:d3:9e:e0:5f:7a:
                    0d:d1:c1:2c:b1:12:85:61:39:9d:e2:7b:65:03:36:
                    0e:e4:68:d5:58:ce:c5:1b:55:20:21:80:da:f6:37:
                    92:05:3a:f3:5a:70:d7:66:85:a1:79:ac:db:2b:8d:
                    75:a0:c7:99:cd:cb:86:4a:9f:a1:25:91:06:05:55:
                    78:ca:25:5e:76:97:0b:e1:97:43:7f:2b:d5:b9:a6:
                    92:da:6f:06:4b:fa:fa:cc:ea:88:4b:05:05:7a:6a:
                    2f:dc:43:44:08:bb:35:40:f3:75:d7:d2:8d:83:cc:
                    ce:80:c8:af:4e:d3:53:18:4b:6b:29:29:4e:53:5f:
                    17:1b:0e:eb:eb:a7:eb:e8:79:e6:a0:5a:e2:76:8f:
                    c3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:9B:F2:FB:EF:53:42:AD:5E:1D:00:03:66:BA:3F:F6:54:04:E6:17
            X509v3 Authority Key Identifier:
                keyid:80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/57333bdf235dc5e8280196ec46a9e464a002fc08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.11.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:14:94:af:f4:c6:00:49:42:1c:14:82:af:6a:ac:33:92:b2:
         00:18:2e:41:54:3b:7f:e7:a9:58:0d:7b:0d:ce:71:e0:e1:b8:
         10:19:6b:ef:c9:12:bd:44:ff:11:9f:e0:b7:08:99:12:12:18:
         55:42:28:03:0a:7a:ec:4b:c5:79:1a:42:f9:58:66:22:fa:8f:
         ad:c8:0e:bf:61:46:24:47:40:70:db:1b:ae:88:9a:29:1a:15:
         33:06:51:9c:3b:b5:03:76:04:c7:d8:ba:e0:24:46:a0:f4:69:
         a7:24:88:3d:3e:1e:4a:6c:1b:78:e4:b0:7d:b9:25:e2:07:43:
         46:50:65:cb:e1:ee:d4:27:1b:9f:02:96:f1:cb:e0:38:4b:da:
         38:19:f7:94:7b:b9:43:b8:cb:5a:22:e5:9e:38:b3:6e:16:19:
         4f:65:bd:25:46:04:eb:f4:4e:49:2a:70:96:7c:95:34:e6:0f:
         53:51:c9:62:6f:9c:dd:06:d5:60:5d:0a:ee:aa:16:f8:21:1e:
         7c:2b:0f:29:03:22:94:6e:89:1e:6b:5b:0f:12:32:34:3b:76:
         e5:5b:d3:80:1e:c8:11:64:33:2a:f6:62:3a:5c:8c:21:38:1f:
         37:60:a1:87:88:3f:db:d6:07:8d:a4:9e:9f:1a:99:57:93:83:
         aa:1c:2f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org