Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/090aeab2e4f3d69948b40c29a53e87fb885fb68a.roa
File:                     090aeab2e4f3d69948b40c29a53e87fb885fb68a.roa (raw, json)
Hash identifier:          6wqlMZVGbE+Yqms+IZnUF0cAqAgosR4tDf/+jdYMSrk=
Subject key identifier:   C6:6E:09:D4:79:2A:B2:60:4A:D7:6E:7D:C5:F6:6B:D6:F5:FD:7D:47
Certificate issuer:       /CN=8d2f4d81bbf1e7d227419a51352953ce9c6aca3a
Certificate serial:       25D1D6
Authority key identifier: 82:9B:22:8F:F6:D1:CF:D0:15:B1:3E:A7:FF:72:5A:53:FD:CA:3C:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d2f4d81bbf1e7d227419a51352953ce9c6aca3a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/090aeab2e4f3d69948b40c29a53e87fb885fb68a.roa
Signing time:             Mon 18 Sep 2023 11:36:36 +0000
ROA not before:           Sun 17 Sep 2023 11:36:31 +0000
ROA not after:            Mon 18 Sep 2028 11:36:31 +0000
asID:                     198198
IP address blocks:        190.98.154.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2478550 (0x25d1d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d2f4d81bbf1e7d227419a51352953ce9c6aca3a
        Validity
            Not Before: Sep 17 11:36:31 2023 GMT
            Not After : Sep 18 11:36:31 2028 GMT
        Subject: CN=090aeab2e4f3d69948b40c29a53e87fb885fb68a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:80:e2:38:d9:cb:2a:95:84:b7:a8:ce:7d:3a:
                    4d:68:9a:19:c4:d4:dc:ff:49:43:f6:2b:cd:99:33:
                    8c:6e:12:8c:1c:a4:27:45:a1:e6:4c:05:13:11:dd:
                    82:ef:2e:2e:7f:ab:8d:a9:9a:a1:ab:80:21:d5:79:
                    2c:e5:6a:6d:64:7b:8c:da:fe:ac:11:7a:a6:b2:ff:
                    75:1a:36:ed:8b:c7:20:49:00:17:39:c6:e3:75:33:
                    b6:8c:41:ec:66:3d:b4:16:c2:2a:b7:93:b3:25:33:
                    28:60:dd:48:3d:0b:10:85:c2:bf:6a:af:e0:73:20:
                    10:6d:5f:47:ea:b6:03:46:58:be:c9:cb:23:ad:8d:
                    44:8a:7c:5d:57:ff:e6:7f:4b:d7:c5:e6:0c:17:aa:
                    ab:7a:c8:df:60:9f:cc:3f:f5:44:b8:c0:19:84:cf:
                    aa:24:76:00:39:28:3e:a8:07:63:00:55:fb:76:8f:
                    62:91:fc:05:f1:c0:27:9f:8c:77:bc:6e:ce:74:11:
                    49:41:91:64:66:eb:5d:79:f2:b9:10:dd:f5:4c:85:
                    8c:54:47:76:5e:60:29:f9:96:cc:bc:a0:ef:7a:d7:
                    3f:d6:6b:7e:64:82:1a:d2:4d:2a:f9:ce:82:cb:8e:
                    40:29:9a:c4:85:21:ba:d1:45:5c:c7:c6:26:a1:4f:
                    c2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:6E:09:D4:79:2A:B2:60:4A:D7:6E:7D:C5:F6:6B:D6:F5:FD:7D:47
            X509v3 Authority Key Identifier:
                keyid:82:9B:22:8F:F6:D1:CF:D0:15:B1:3E:A7:FF:72:5A:53:FD:CA:3C:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d2f4d81bbf1e7d227419a51352953ce9c6aca3a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/090aeab2e4f3d69948b40c29a53e87fb885fb68a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/8d2f4d81bbf1e7d227419a51352953ce9c6aca3a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.98.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:47:2a:46:83:a1:aa:51:a8:67:c0:79:7e:ef:77:42:71:63:
         d3:3e:eb:9a:77:38:3f:65:8f:3d:e3:7f:ec:92:7c:e0:1f:f4:
         71:e0:4d:ea:9d:62:16:7f:f3:8a:da:7b:f2:b2:59:91:86:51:
         48:0b:32:ba:12:7b:d2:31:19:59:da:09:57:2e:b0:d2:03:f3:
         3b:52:a3:44:41:c7:08:fc:e6:c6:49:4b:7a:fe:7d:0e:32:d6:
         c7:6a:6d:c2:0d:51:c3:32:5e:26:eb:d1:da:23:3d:63:93:a4:
         6b:13:5a:f1:db:de:d4:5b:ae:11:e2:5e:e1:ad:57:42:cf:0e:
         5d:d1:cc:fa:90:6d:66:62:6a:86:99:64:a6:5d:22:a5:b9:2a:
         ce:01:c7:12:12:8a:e0:54:55:57:cc:be:5c:8a:ad:46:22:cb:
         a9:dc:b0:35:37:a3:60:68:1c:3f:84:df:67:f5:bd:f6:e5:70:
         75:40:3a:48:ad:3a:48:ac:0e:e4:3f:82:af:1f:4a:9a:b9:d6:
         b1:d7:e9:3f:21:17:ae:b5:54:73:45:a9:84:22:69:ca:f2:6f:
         80:6c:97:e2:45:6b:8e:eb:35:70:64:78:50:41:f0:2e:a2:2b:
         57:5a:9b:02:f2:7e:2f:b0:2c:78:7d:64:cc:78:03:be:cf:6d:
         6a:52:b3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org