Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/eaead2b0248fd8ce4017a3f9743af5be894406fd.roa
File:                     eaead2b0248fd8ce4017a3f9743af5be894406fd.roa (raw, json)
Hash identifier:          MjJh3/tbxkVpfw4g/ZYJmZ8jD6MYEFmAW9MVicDKLBs=
Subject key identifier:   D7:0D:BC:7D:31:D9:6D:BD:21:B6:98:12:9D:62:2E:FF:16:EA:AD:9C
Certificate issuer:       /CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Certificate serial:       2A0D82
Authority key identifier: 80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/eaead2b0248fd8ce4017a3f9743af5be894406fd.roa
Signing time:             Mon 26 Feb 2024 16:55:27 +0000
ROA not before:           Mon 26 Feb 2024 16:55:27 +0000
ROA not after:            Thu 26 Feb 2026 16:55:27 +0000
asID:                     28011
IP address blocks:        190.152.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2755970 (0x2a0d82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1059e1e3317704575f2c0b750ee73b166a39cd37
        Validity
            Not Before: Feb 26 16:55:27 2024 GMT
            Not After : Feb 26 16:55:27 2026 GMT
        Subject: CN=eaead2b0248fd8ce4017a3f9743af5be894406fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:31:a6:b9:49:e2:14:d9:fd:71:5c:25:5c:de:
                    e4:be:90:d8:e8:fa:85:62:c8:20:82:97:47:68:f6:
                    46:ff:08:48:09:d8:ab:24:2e:6e:f6:00:1c:6f:e4:
                    2c:31:79:65:3d:7b:43:d2:38:15:32:0d:9e:62:d2:
                    ee:dd:f7:01:b2:a8:b6:da:4c:db:e4:f1:4c:ab:42:
                    60:a4:68:87:70:06:5b:49:b1:1d:66:18:ce:d5:9d:
                    9f:6a:00:f5:c3:bb:96:0e:1a:b4:4a:f7:cf:0f:cd:
                    a1:07:f4:c5:83:19:33:d9:cf:35:d8:fb:62:2a:ee:
                    c1:fe:87:67:fb:37:68:77:e9:d2:bd:74:1d:de:a2:
                    cc:57:73:21:5b:8c:3f:99:64:94:e7:b7:35:e7:75:
                    70:c2:26:3e:bb:6a:5e:3f:c7:ae:96:91:15:d0:b6:
                    d5:5c:5e:0b:51:30:f6:04:15:c1:0c:73:15:d0:e1:
                    45:d5:b6:e4:2a:46:39:d0:4b:db:33:1b:10:da:4c:
                    47:ff:4c:04:2a:3f:b2:f7:34:2a:68:bb:f4:2d:c1:
                    c7:fc:bd:41:fb:e3:52:e8:34:96:82:df:43:24:b6:
                    7a:5d:38:0e:be:14:e7:6e:18:51:36:b5:5c:66:cb:
                    a3:75:8c:4f:c1:01:a1:ba:c9:f8:69:8d:30:28:1e:
                    84:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:0D:BC:7D:31:D9:6D:BD:21:B6:98:12:9D:62:2E:FF:16:EA:AD:9C
            X509v3 Authority Key Identifier:
                keyid:80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/eaead2b0248fd8ce4017a3f9743af5be894406fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.152.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:57:d1:19:f3:46:03:e7:a3:a3:b0:ec:e8:10:c9:38:1b:7e:
         dc:2f:8a:f0:bb:11:1c:00:b8:64:b2:ca:a6:53:50:08:73:5a:
         23:54:bf:e8:78:cb:42:c7:17:bd:0e:76:87:2b:a4:cc:cc:b1:
         8c:f3:6a:a0:a6:53:db:5d:83:99:f2:c4:4b:f1:79:25:fe:2b:
         02:bd:ef:bc:9e:4a:23:7c:0a:c3:6a:4e:ed:79:67:b9:04:c7:
         03:bb:89:a2:5c:cc:61:51:08:bb:54:54:40:f6:64:52:a8:6e:
         d3:d0:79:29:e6:ac:db:46:17:c8:6b:03:85:a9:5e:7f:d5:05:
         0f:ea:e1:b2:b6:ca:ad:d8:3f:15:3e:89:75:4c:14:a3:28:ad:
         c9:c4:18:90:4b:20:15:55:24:e3:56:b1:a6:29:68:4b:f0:7d:
         e8:15:7b:98:98:f4:6c:ae:9c:9b:76:f2:db:6d:71:43:72:e8:
         aa:a0:3f:52:63:bc:55:14:96:81:6f:c8:30:8a:55:66:d9:08:
         76:7b:8c:9f:8b:3f:8b:08:1c:8b:bf:9a:f0:8a:f5:d9:c3:01:
         c4:38:82:87:d6:db:e9:ff:f1:ab:2a:bd:05:1d:16:47:72:c6:
         1c:71:c4:88:84:73:58:44:97:b4:de:dd:2d:0f:be:32:4d:bb:
         6a:88:a1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:01 2024 by rpki-client on console-fra.rpki-client.org