Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/b204fb2155402e299d36d9c65f34a7bb9dc1841c.roa
File:                     b204fb2155402e299d36d9c65f34a7bb9dc1841c.roa (raw, json)
Hash identifier:          qDRXFVtZpSoFlnyenHHeqKOLPPkziHF5Z7nP7sb2eQk=
Subject key identifier:   19:71:C6:0E:0D:C3:EC:CE:E2:9B:B5:F2:D8:D1:12:B2:C0:E3:89:1A
Certificate issuer:       /CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Certificate serial:       1FC5F7
Authority key identifier: 80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/b204fb2155402e299d36d9c65f34a7bb9dc1841c.roa
Signing time:             Wed 18 Jan 2023 15:04:08 +0000
ROA not before:           Sun 25 Dec 2022 16:26:20 +0000
ROA not after:            Sat 28 Dec 2024 16:26:20 +0000
asID:                     28006
IP address blocks:        190.214.5.0/24 maxlen: 24
                          190.214.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2082295 (0x1fc5f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1059e1e3317704575f2c0b750ee73b166a39cd37
        Validity
            Not Before: Dec 25 16:26:20 2022 GMT
            Not After : Dec 28 16:26:20 2024 GMT
        Subject: CN=b204fb2155402e299d36d9c65f34a7bb9dc1841c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:47:22:30:d9:55:ac:e9:86:cc:f7:cb:ea:d2:
                    11:e3:09:4c:f9:58:2f:0c:ad:49:87:15:d3:d1:12:
                    85:bd:ac:3b:e0:cd:8c:41:99:91:5b:5c:8f:74:52:
                    13:3e:eb:a8:3d:ee:b4:df:df:3d:a2:12:ab:a1:9d:
                    99:eb:8e:e6:09:d1:69:ba:73:cf:2e:e8:d2:c8:70:
                    5d:16:e3:59:57:13:cb:8f:e7:68:6b:29:98:93:e0:
                    9b:9b:65:23:5b:ef:97:a4:6e:18:84:02:53:a0:c8:
                    39:2d:3b:43:19:af:82:58:18:93:be:67:08:1c:35:
                    92:13:4b:2b:9d:fb:34:97:41:bc:13:c9:66:03:e7:
                    83:c0:6c:19:c6:6e:f4:0c:d6:d1:5b:75:f7:f4:2f:
                    03:15:50:18:e5:4f:33:45:38:a7:88:9d:b3:a3:dd:
                    8c:8d:f6:88:d6:f2:c9:f6:69:4e:a8:61:8f:ce:25:
                    5d:a7:e5:55:2a:af:93:8f:c2:25:8a:03:c1:58:a3:
                    68:14:3a:a3:73:82:0c:d6:02:6c:cd:db:15:b0:f1:
                    73:47:c4:1b:5e:dc:0d:fe:44:3a:89:b0:df:7d:17:
                    d7:da:69:6c:3a:17:4f:39:a7:e8:43:2f:2e:90:d2:
                    27:ba:d5:1e:bb:32:eb:f6:a3:ec:3b:30:10:8e:70:
                    c3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:71:C6:0E:0D:C3:EC:CE:E2:9B:B5:F2:D8:D1:12:B2:C0:E3:89:1A
            X509v3 Authority Key Identifier:
                keyid:80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/b204fb2155402e299d36d9c65f34a7bb9dc1841c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.214.5.0/24
                  190.214.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:39:70:c2:33:1f:7d:9f:f4:7e:7e:6f:15:73:4a:4e:91:a3:
         5a:79:0f:bf:09:c8:4c:46:4b:2b:b1:5f:a9:b7:f2:28:2b:c2:
         ee:89:eb:2d:32:69:e2:8b:c7:ff:d6:36:c7:b8:73:fc:73:33:
         af:6b:86:5e:b4:fd:b5:99:c5:e3:70:7b:5f:75:d6:26:a7:5c:
         ff:3d:c9:34:3d:59:ab:80:7d:0a:63:46:e7:3c:ad:44:aa:6a:
         27:fe:1d:06:c3:b4:3c:61:0c:59:b7:97:8d:c8:96:2f:4d:c8:
         89:61:25:86:00:2d:78:13:6d:2d:b4:00:3b:76:18:e8:bb:0a:
         e6:f9:8d:57:fb:0e:94:23:29:3c:c1:f2:3a:d8:9f:fc:41:bd:
         65:9d:da:d9:cf:33:e4:ab:35:13:67:0d:aa:98:68:69:74:ed:
         51:71:e6:d7:89:cc:a0:36:c1:a4:32:03:f6:73:ed:86:84:db:
         b5:d0:6e:b6:6b:88:ab:dc:75:b5:25:0f:d1:75:10:9b:0c:03:
         d8:9e:5d:d9:18:b4:40:7a:f4:a7:a3:3a:3b:20:5b:56:5b:3d:
         04:76:3e:de:16:43:d2:21:fe:ff:b9:cb:8c:61:95:55:e3:3b:
         ef:a1:79:a1:74:ae:96:be:46:a3:0c:0d:19:bf:b0:25:82:85:
         d1:2a:8a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:01 2024 by rpki-client on console-fra.rpki-client.org