Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/f2c337e8aebce9b5488d8233ccdaf4d712345703.roa
File:                     f2c337e8aebce9b5488d8233ccdaf4d712345703.roa (raw, json)
Hash identifier:          UvJ3Z8P9H73vN0BIJvkNs5ms3pf6fBz1Y56OW/COnMo=
Subject key identifier:   13:CF:15:C2:CC:DC:AB:DA:1B:CA:48:FE:96:38:9C:D7:70:CB:AE:43
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       26C0F7
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/f2c337e8aebce9b5488d8233ccdaf4d712345703.roa
Signing time:             Wed 30 Aug 2023 17:50:31 +0000
ROA not before:           Tue 29 Aug 2023 17:50:30 +0000
ROA not after:            Sat 30 Aug 2025 17:50:30 +0000
asID:                     52256
IP address blocks:        190.255.44.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2539767 (0x26c0f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Aug 29 17:50:30 2023 GMT
            Not After : Aug 30 17:50:30 2025 GMT
        Subject: CN=f2c337e8aebce9b5488d8233ccdaf4d712345703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:dd:75:29:47:9a:88:71:6b:00:21:43:dd:1c:
                    92:bc:a1:64:27:70:81:fa:c6:ae:16:c8:f4:ca:bd:
                    31:1a:f1:d4:35:d3:34:e1:b9:2c:0b:dc:79:25:a3:
                    9b:68:66:97:b1:7f:c6:c9:40:68:15:c0:d0:00:f3:
                    43:d1:d8:86:e4:68:81:72:12:57:bc:66:29:0c:bc:
                    72:5c:0b:6b:e2:23:9f:38:f5:1f:62:08:e3:9c:fd:
                    ce:53:0c:3d:85:d3:4c:db:cb:62:f6:cc:12:e0:54:
                    29:44:61:05:c8:d8:78:c5:9a:a7:b4:bf:dc:d8:6b:
                    68:a9:01:0b:25:88:c1:16:c0:63:75:04:6e:8f:a3:
                    f5:a4:59:36:77:25:fe:5d:53:e1:1c:71:4e:f5:85:
                    f0:ee:56:02:93:e8:07:d6:2f:d3:c2:4b:9e:43:08:
                    be:15:dc:e4:7c:8c:00:b5:7c:79:e7:85:9f:14:38:
                    2f:a8:f7:7a:02:a2:ca:d6:a2:c4:d3:ce:33:2c:00:
                    f4:81:6b:60:d3:bc:8d:50:ce:6c:0d:75:28:77:a5:
                    f4:3c:94:00:ea:fe:c9:f9:0c:e5:cc:a8:53:ff:65:
                    5f:7c:2f:ed:42:ea:6e:7d:90:80:18:37:20:2e:01:
                    c0:b5:c8:8c:f1:df:33:73:e9:f7:36:f9:65:b4:2b:
                    1a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:CF:15:C2:CC:DC:AB:DA:1B:CA:48:FE:96:38:9C:D7:70:CB:AE:43
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/f2c337e8aebce9b5488d8233ccdaf4d712345703.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.255.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:1c:4b:2a:f2:8b:2b:04:4d:a6:67:36:c0:73:4a:27:b0:6a:
         c8:97:3f:b1:12:69:ce:86:53:41:9f:0c:ff:c2:6f:c6:37:d7:
         44:15:af:66:b8:a9:ed:04:5c:04:0a:ee:4c:d8:94:5c:87:42:
         d5:6c:86:79:cc:fe:a0:f7:95:d0:ae:f8:6b:77:2e:4b:87:ea:
         26:09:8a:e0:82:c1:5e:60:76:5a:f1:2e:1c:e8:79:4c:f4:b2:
         d6:52:a9:49:c6:75:15:a3:f3:95:ef:bd:15:77:6a:7c:88:50:
         92:3f:78:2d:ae:0d:77:07:49:ad:0f:04:b2:f5:80:ab:75:ed:
         fd:95:3f:e6:55:e0:ae:57:6e:f6:d8:7c:99:c9:01:b6:83:32:
         f0:b5:7b:25:5d:91:72:90:46:f1:9e:5d:90:ee:93:83:a7:f6:
         22:72:1d:51:f5:39:d9:13:4a:3f:60:42:0a:dc:19:32:35:30:
         6e:b0:43:ec:02:e6:96:41:8f:7b:20:91:2f:c1:59:63:e2:61:
         d3:8d:93:e8:ad:bf:9e:8a:3b:11:2a:46:8d:2b:de:c5:54:4a:
         80:1e:c6:ac:e1:74:48:b0:1d:a4:af:4c:57:f7:8b:71:f5:8a:
         09:93:3a:01:97:46:63:c0:0f:40:b4:0b:69:fb:d6:20:18:cf:
         03:95:3a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:30 2024 by rpki-client on console-fra.rpki-client.org