Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/87c308c3b32059919c7a8cdcd155130dd431104d.roa
File:                     87c308c3b32059919c7a8cdcd155130dd431104d.roa (raw, json)
Hash identifier:          0VnHoWxIA64BZnoMeO1ryFWr1Yutn7C0V1nt71cltWw=
Subject key identifier:   C9:C1:26:5C:17:64:B3:BC:7D:1C:7F:36:2B:DE:30:86:D5:0F:FC:69
Certificate issuer:       /CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Certificate serial:       2A121E
Authority key identifier: 80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/87c308c3b32059919c7a8cdcd155130dd431104d.roa
Signing time:             Mon 26 Feb 2024 17:01:35 +0000
ROA not before:           Mon 26 Feb 2024 17:01:35 +0000
ROA not after:            Thu 26 Feb 2026 17:01:35 +0000
asID:                     28011
IP address blocks:        190.152.44.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2757150 (0x2a121e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1059e1e3317704575f2c0b750ee73b166a39cd37
        Validity
            Not Before: Feb 26 17:01:35 2024 GMT
            Not After : Feb 26 17:01:35 2026 GMT
        Subject: CN=87c308c3b32059919c7a8cdcd155130dd431104d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fd:b7:e9:07:68:67:92:36:fb:af:0b:e4:b3:
                    e9:80:8f:79:b5:6a:af:9f:65:7b:e5:53:a6:d9:7e:
                    b4:e8:85:53:92:9f:14:0c:31:b2:11:ce:41:55:b7:
                    ea:c9:f8:59:fd:58:e2:74:7d:f2:34:a3:c7:7d:13:
                    ea:3b:af:0e:3a:05:44:3e:50:0f:cc:4a:d9:e9:37:
                    d7:cc:45:78:64:c0:37:a9:47:5d:77:1f:94:3e:db:
                    c9:1c:25:d1:28:ed:41:a9:66:79:d5:48:e8:fa:f6:
                    73:a5:d4:7f:9a:4e:7c:28:45:01:ec:cf:f2:db:4c:
                    27:4a:2c:a6:c5:bd:aa:0d:62:37:65:f7:f9:8d:e1:
                    7a:b0:33:c1:80:80:08:fa:bf:4a:69:27:00:01:9c:
                    95:28:05:b3:64:34:dd:fe:c5:0b:ec:83:8e:39:b3:
                    84:90:2c:d5:08:5f:b8:d6:c1:80:18:f1:eb:12:06:
                    dd:f4:b6:e4:bb:fe:03:45:61:3f:18:15:ec:64:cb:
                    2f:7e:68:9c:b6:cc:ab:24:54:e6:90:e0:00:13:4d:
                    d0:3d:20:1e:56:e0:ce:74:6f:bb:2d:5b:9c:58:13:
                    23:64:81:ba:a2:65:9a:f3:cd:5c:a7:53:1c:bc:96:
                    6e:1a:3b:00:09:5b:78:5f:b7:50:88:8f:79:80:8f:
                    22:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C1:26:5C:17:64:B3:BC:7D:1C:7F:36:2B:DE:30:86:D5:0F:FC:69
            X509v3 Authority Key Identifier:
                keyid:80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/87c308c3b32059919c7a8cdcd155130dd431104d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.152.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:02:6f:bc:b6:33:50:b9:b1:35:98:1a:76:54:6d:12:75:dd:
         dd:4b:e5:ee:12:1a:46:c8:17:a9:92:b3:41:a9:0a:41:f3:19:
         50:05:fb:91:00:ff:fc:52:fa:92:d2:ce:f1:78:39:ab:85:f6:
         2d:4f:7d:6b:5d:53:7b:3b:56:0d:85:a9:19:c2:60:03:44:32:
         ac:d9:f6:f0:ff:e4:d9:0f:f7:36:9a:2b:b0:d6:b2:89:0c:58:
         e5:ac:e4:9a:27:86:62:13:c5:29:dd:58:30:c8:78:f7:09:ec:
         d8:e3:80:ca:67:b3:a8:a6:94:01:03:81:7b:cc:a6:d1:35:ef:
         25:bb:f7:ac:dc:0a:d3:4e:59:21:c5:51:4b:87:fa:ce:58:6f:
         34:70:27:56:54:65:61:94:09:fc:cc:40:bb:8e:98:20:ab:e3:
         67:76:b0:ff:49:2f:43:db:89:d9:74:fe:a1:9a:c3:aa:19:69:
         6a:f7:c1:4a:94:5b:b9:e8:75:52:17:a7:dc:b6:2a:db:a5:c8:
         59:3f:d7:db:bf:24:12:af:65:f6:dc:66:a0:b1:3d:69:db:99:
         10:aa:30:51:62:75:23:45:37:7c:cf:2e:d2:42:2b:45:13:96:
         17:bd:2d:2a:c4:e9:d8:6a:3c:7d:12:e6:5f:14:6e:8f:cb:08:
         eb:b2:67:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org