Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/a0baa98c07bc120e83847d22ee825d7b9ced7daa.roa
File:                     a0baa98c07bc120e83847d22ee825d7b9ced7daa.roa (raw, json)
Hash identifier:          tsjrb0irGY6t8PUK6v46Jpmt8UWizGcmgf9cK5JCpeQ=
Subject key identifier:   5B:DD:62:21:C1:09:0F:EE:2E:E3:7F:32:7A:92:6D:A3:70:BA:F3:60
Certificate issuer:       /CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Certificate serial:       2A18C1
Authority key identifier: 80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/a0baa98c07bc120e83847d22ee825d7b9ced7daa.roa
Signing time:             Mon 26 Feb 2024 17:07:56 +0000
ROA not before:           Mon 26 Feb 2024 17:07:56 +0000
ROA not after:            Thu 26 Feb 2026 17:07:56 +0000
asID:                     28011
IP address blocks:        190.152.46.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2758849 (0x2a18c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1059e1e3317704575f2c0b750ee73b166a39cd37
        Validity
            Not Before: Feb 26 17:07:56 2024 GMT
            Not After : Feb 26 17:07:56 2026 GMT
        Subject: CN=a0baa98c07bc120e83847d22ee825d7b9ced7daa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:82:72:ea:ab:e1:2c:78:21:87:7e:6b:b0:14:
                    70:7a:2e:5b:f6:65:64:6b:cf:fe:41:8f:64:ed:64:
                    57:99:af:09:cc:4c:89:8e:84:5e:32:d2:44:88:c7:
                    a3:15:36:c6:f7:41:8f:72:f3:e0:d4:9f:79:35:58:
                    59:0b:93:9e:5b:4f:1a:87:68:99:6f:df:4d:b1:a8:
                    07:22:8a:38:a2:4d:19:d9:77:bb:ca:1d:5c:61:4d:
                    96:5e:5e:e2:c8:ff:3d:11:59:53:be:bc:35:35:4e:
                    8c:6f:29:ea:57:94:4a:41:99:53:87:d3:36:d7:89:
                    e6:77:89:49:84:50:8d:91:4f:7b:68:3e:1e:0e:b1:
                    a0:dc:b0:70:42:b4:7b:4b:c8:be:9a:c4:4f:52:bb:
                    52:12:f3:59:cf:8f:ce:23:f6:ca:7a:73:f3:78:03:
                    9d:18:83:08:bf:e5:f8:9b:cd:e4:b7:23:22:b5:71:
                    67:04:96:3b:46:23:ef:89:c1:3a:44:70:b0:0c:e5:
                    b9:c1:df:50:97:97:77:fe:56:ac:60:9a:1d:07:bd:
                    77:dc:a5:78:d1:ef:c9:ed:ce:7b:ff:bd:5f:03:3b:
                    4d:93:a6:3f:46:96:57:a9:e0:be:2d:a4:21:a1:ed:
                    5d:c0:50:35:88:9d:c7:9d:7d:87:66:84:d7:1d:12:
                    4d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:DD:62:21:C1:09:0F:EE:2E:E3:7F:32:7A:92:6D:A3:70:BA:F3:60
            X509v3 Authority Key Identifier:
                keyid:80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/a0baa98c07bc120e83847d22ee825d7b9ced7daa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.152.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:03:28:81:a4:c6:fc:81:09:8d:cb:59:6d:34:5c:04:d3:44:
         5b:ff:b0:36:f4:d6:cd:65:7c:52:7d:d0:5d:52:df:26:35:03:
         a5:ea:74:de:70:36:81:fc:9b:ca:ca:13:8f:45:3a:17:4b:5e:
         88:93:bb:b0:b6:bf:f7:f7:bf:22:89:e0:71:a2:e2:9f:e4:46:
         a6:52:b5:3b:92:a8:3f:ca:79:d2:8b:85:37:d8:46:0b:5f:f8:
         bf:91:bf:4e:ad:43:48:d7:c5:90:7c:a2:66:7d:cc:e5:62:4c:
         48:81:02:95:b4:93:48:90:47:7a:4e:0e:5b:a6:f9:f0:84:c5:
         c5:6e:39:78:f4:12:2c:f5:76:5f:9e:bd:92:0d:37:68:9b:8a:
         13:98:e6:29:05:8f:1c:84:13:25:65:de:06:ad:8e:9f:c7:68:
         03:fc:41:b6:a0:69:21:c6:0a:61:66:81:48:36:0c:ab:6d:2c:
         f9:93:ce:a7:35:53:d8:99:fb:8f:39:c5:29:30:90:68:98:4d:
         ce:8d:72:a5:fc:e0:be:e3:c0:8b:58:fe:44:02:e8:dd:aa:e1:
         33:a3:7d:3c:9f:48:7e:26:3f:42:0a:4b:9b:b3:3e:59:d9:23:
         90:0a:8c:e9:b4:af:a4:b0:32:6d:36:e0:d3:da:a9:e7:8d:fa:
         f9:06:41:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:45 2024 by rpki-client on console-ams.rpki-client.org