Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/285bd8df5bf2ebfa2ed67e3aa31a726676f9e8f1.roa
File:                     285bd8df5bf2ebfa2ed67e3aa31a726676f9e8f1.roa (raw, json)
Hash identifier:          AqeHJhvpn/5QSfEzV9aBdXU+y/1swe93xlsylZtyU/M=
Subject key identifier:   4A:EF:6D:5E:AB:D8:0E:D7:50:98:A9:2C:F9:DA:30:7A:5A:F1:E1:E0
Certificate issuer:       /CN=8d2f4d81bbf1e7d227419a51352953ce9c6aca3a
Certificate serial:       25CC55
Authority key identifier: 82:9B:22:8F:F6:D1:CF:D0:15:B1:3E:A7:FF:72:5A:53:FD:CA:3C:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d2f4d81bbf1e7d227419a51352953ce9c6aca3a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/285bd8df5bf2ebfa2ed67e3aa31a726676f9e8f1.roa
Signing time:             Mon 18 Sep 2023 11:36:35 +0000
ROA not before:           Sun 17 Sep 2023 11:36:31 +0000
ROA not after:            Mon 18 Sep 2028 11:36:31 +0000
asID:                     60725
IP address blocks:        190.98.129.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2477141 (0x25cc55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d2f4d81bbf1e7d227419a51352953ce9c6aca3a
        Validity
            Not Before: Sep 17 11:36:31 2023 GMT
            Not After : Sep 18 11:36:31 2028 GMT
        Subject: CN=285bd8df5bf2ebfa2ed67e3aa31a726676f9e8f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:61:4d:e0:60:9f:8a:e6:31:9a:bb:36:b6:be:
                    09:94:56:1d:70:2e:49:05:21:cd:64:4f:a0:b5:aa:
                    b6:22:15:a6:ee:f8:0f:33:e2:b4:52:80:0c:f6:15:
                    99:44:d4:98:09:bd:64:b2:13:5a:d9:b3:4c:19:d1:
                    19:7a:06:da:30:ed:9a:d2:bf:b2:8b:59:ba:ea:b0:
                    42:e8:97:8a:0f:83:9c:4a:e9:ca:44:b3:07:39:be:
                    41:9e:35:9b:ca:80:99:6e:0f:d4:3e:cc:25:42:a6:
                    bb:60:5b:23:d6:f9:46:fc:99:66:43:db:0c:e8:99:
                    6b:37:77:3d:17:ec:0f:92:b0:00:8e:b3:d4:ff:80:
                    8d:4a:f2:30:6d:8e:73:43:af:a0:75:86:d3:d5:a7:
                    7f:be:39:2b:11:55:f5:48:7c:c1:65:56:66:9b:ad:
                    7a:9d:08:48:20:42:ed:68:ff:7c:81:a1:e5:17:d8:
                    6c:31:45:41:e6:64:31:91:8f:d4:bd:57:fc:11:1b:
                    9e:42:17:28:f2:8f:34:b6:3a:85:95:57:f4:a4:14:
                    b5:6c:d6:48:b5:31:4f:5e:b9:03:aa:51:da:d8:24:
                    f0:2b:60:3a:0b:7a:02:cf:3d:78:e9:64:b1:30:cd:
                    ae:3b:ab:04:19:39:9c:80:20:19:fb:f2:62:f2:3f:
                    01:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:EF:6D:5E:AB:D8:0E:D7:50:98:A9:2C:F9:DA:30:7A:5A:F1:E1:E0
            X509v3 Authority Key Identifier:
                keyid:82:9B:22:8F:F6:D1:CF:D0:15:B1:3E:A7:FF:72:5A:53:FD:CA:3C:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d2f4d81bbf1e7d227419a51352953ce9c6aca3a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/285bd8df5bf2ebfa2ed67e3aa31a726676f9e8f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/8d2f4d81bbf1e7d227419a51352953ce9c6aca3a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.98.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:8d:77:71:59:a0:07:4e:e4:d3:1e:27:cf:10:c9:c9:21:17:
         81:00:ae:7a:b2:34:76:8b:76:8b:32:00:03:bd:d0:f6:66:5b:
         65:08:eb:d9:2c:13:01:dc:c9:8b:2c:4c:78:37:8e:6b:4f:b8:
         50:1e:c0:78:58:10:65:d3:9a:5b:b6:42:8f:42:2a:0f:01:19:
         08:c5:e0:ef:7b:76:be:73:4d:34:4a:db:92:08:b5:27:2c:35:
         1a:6b:f1:94:ac:29:fe:90:2a:17:73:29:eb:d8:a6:9f:24:b8:
         4f:65:ca:04:56:57:45:7c:b5:1e:99:07:30:3a:66:02:1d:fb:
         c0:55:93:88:39:81:62:6a:ed:c5:8b:9e:86:6e:85:e2:7e:d6:
         93:dd:09:51:35:9e:f7:03:f5:37:06:64:45:43:19:c0:ed:11:
         ed:2b:3a:e5:10:56:ac:c9:1c:8a:08:64:39:08:86:5c:1a:ac:
         a5:40:58:0c:ac:96:a2:69:55:ab:85:f8:55:6f:9f:4b:b5:e8:
         00:76:6c:d4:81:96:4d:d7:99:26:8a:ea:e8:02:d2:10:b4:ea:
         81:25:06:e8:8b:fc:bb:61:10:28:ef:44:0f:56:a8:d7:9c:32:
         d5:a4:6b:5d:78:b4:cf:0c:f6:8e:11:c6:fe:e6:54:f1:9e:28:
         3f:ab:4c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org