Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/88392e05e808af3c24b866708e1cba783bd696c3.roa
File:                     88392e05e808af3c24b866708e1cba783bd696c3.roa (raw, json)
Hash identifier:          PLDUQL4kp+nr/ytliZFxtX6xt1AWn7sad8T9WjWxUZM=
Subject key identifier:   81:B9:14:01:B1:6D:3E:61:2E:42:C2:6A:3C:54:A8:9D:70:AE:2A:48
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       26DD90
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/88392e05e808af3c24b866708e1cba783bd696c3.roa
Signing time:             Wed 30 Aug 2023 17:50:39 +0000
ROA not before:           Tue 29 Aug 2023 17:50:30 +0000
ROA not after:            Sat 30 Aug 2025 17:50:30 +0000
asID:                     21578
IP address blocks:        190.68.254.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2547088 (0x26dd90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Aug 29 17:50:30 2023 GMT
            Not After : Aug 30 17:50:30 2025 GMT
        Subject: CN=88392e05e808af3c24b866708e1cba783bd696c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5c:b8:16:7e:c6:74:25:4f:d4:1f:1b:83:95:
                    a2:e5:1b:df:00:29:f7:fd:30:2e:bf:c9:1e:61:5d:
                    45:05:11:e4:4d:2d:9e:f9:db:ef:51:64:7e:10:75:
                    00:2c:4c:b7:0b:7e:7c:d6:72:f3:30:f0:3d:23:97:
                    76:4c:f9:b2:1e:2e:2f:6a:c2:a6:d7:de:a6:94:63:
                    36:e1:e7:ad:67:3f:74:0e:c4:aa:84:05:00:69:45:
                    a7:ef:2c:30:69:59:b7:fe:17:29:18:f0:64:de:a7:
                    c6:68:23:b3:14:b0:9a:f9:67:14:0a:30:1b:03:d6:
                    e6:c3:73:d4:ea:32:d4:9c:6d:a9:16:ff:6c:60:50:
                    1f:84:54:1e:33:2f:db:4c:b7:1e:44:65:48:34:1d:
                    cd:cd:8f:f4:82:1b:40:06:1e:6d:59:f3:3e:43:74:
                    65:60:44:d9:0a:4c:5a:7f:a6:fd:07:27:af:b7:5b:
                    b5:99:45:dc:a1:92:d8:bf:87:14:f5:16:26:3d:b1:
                    af:45:e9:fd:62:d8:9e:aa:69:78:1a:e5:6f:d2:30:
                    f5:0c:61:c0:56:6d:fa:54:bc:7c:40:e5:b3:4d:bb:
                    a8:b2:71:40:88:02:fd:87:c4:fd:8e:1a:ab:4d:9e:
                    ad:33:09:19:c5:a0:5f:2c:25:55:7c:29:d5:18:82:
                    5f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B9:14:01:B1:6D:3E:61:2E:42:C2:6A:3C:54:A8:9D:70:AE:2A:48
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/88392e05e808af3c24b866708e1cba783bd696c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.68.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:2c:aa:59:f9:60:66:b5:8c:a7:9e:b0:61:2a:d0:ef:c6:4c:
         eb:90:9e:c7:6b:de:44:b6:f1:db:29:8c:e8:f2:55:50:20:3b:
         67:40:d4:94:d0:9e:37:57:7f:42:ce:58:dc:09:8d:09:a5:c8:
         8d:be:78:e5:78:bb:01:17:fe:c0:47:67:bb:9b:f4:50:34:b1:
         74:8b:e4:6e:64:8e:8f:4a:23:ba:5a:0f:8d:cd:c0:c4:39:78:
         95:04:4c:b3:70:cf:cf:53:66:4b:dc:ad:40:82:43:73:79:a2:
         75:41:16:fd:51:33:e0:eb:c2:1f:de:ab:c6:0c:31:a5:c8:fe:
         79:3f:12:a3:b3:f2:a8:af:c9:f1:d4:f8:e5:f4:7b:4d:fc:09:
         6c:9e:55:44:63:4c:99:81:58:7e:eb:b5:c0:5b:f3:06:ff:45:
         c1:c5:81:1f:ea:80:c2:1d:65:7c:ce:f8:cc:fc:41:0c:91:85:
         9a:83:9d:a4:18:e0:4c:06:4a:60:1a:b7:bc:e0:23:18:35:36:
         76:28:2f:65:46:ee:24:99:37:04:2f:bd:af:6f:df:dd:9e:a5:
         d9:d0:68:33:3f:b5:dc:37:64:7d:6f:fa:68:b7:a5:d7:94:b5:
         04:4a:b5:5f:54:e1:e5:91:32:99:8c:97:80:5a:14:59:6a:22:
         9b:b9:ea:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:06 2024 by rpki-client on console-fra.rpki-client.org