Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/743f81b830e062aa6557e79ac85f800ca3820671.roa
File:                     743f81b830e062aa6557e79ac85f800ca3820671.roa (raw, json)
Hash identifier:          Hc94wWVbwxq9NCAcH6tGA1Jr2y31FmtEqvHRDemQ214=
Subject key identifier:   C3:23:14:FC:17:65:7C:73:57:82:66:F2:42:3F:B4:29:DB:B2:43:B3
Certificate issuer:       /CN=8d2f4d81bbf1e7d227419a51352953ce9c6aca3a
Certificate serial:       2A8286
Authority key identifier: 82:9B:22:8F:F6:D1:CF:D0:15:B1:3E:A7:FF:72:5A:53:FD:CA:3C:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d2f4d81bbf1e7d227419a51352953ce9c6aca3a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/743f81b830e062aa6557e79ac85f800ca3820671.roa
Signing time:             Fri 22 Mar 2024 13:39:10 +0000
ROA not before:           Fri 22 Mar 2024 13:39:10 +0000
ROA not after:            Sun 22 Mar 2026 13:39:10 +0000
asID:                     40311
IP address blocks:        190.98.181.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2785926 (0x2a8286)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d2f4d81bbf1e7d227419a51352953ce9c6aca3a
        Validity
            Not Before: Mar 22 13:39:10 2024 GMT
            Not After : Mar 22 13:39:10 2026 GMT
        Subject: CN=743f81b830e062aa6557e79ac85f800ca3820671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ad:31:e0:49:6d:33:49:bc:46:9c:05:28:80:
                    06:f9:1b:c5:f3:5d:a5:76:e2:a3:70:d5:28:13:31:
                    e4:61:77:fd:e5:7a:e0:bc:db:da:9a:a9:7d:b0:15:
                    9d:cc:8e:3d:ec:a9:d2:94:44:20:79:0c:87:23:32:
                    60:eb:3d:34:ab:74:e4:7a:50:47:92:cd:a3:fb:57:
                    d7:d9:a8:37:e6:6b:b8:86:60:70:8d:28:fd:24:34:
                    07:6d:85:38:78:96:ee:20:9d:c4:5d:17:95:d1:67:
                    1c:b6:2e:51:0c:48:b4:38:5f:b5:db:55:ba:5a:be:
                    cb:74:5f:14:08:5d:6a:20:24:d9:4e:12:5f:a4:3b:
                    e4:59:26:71:a5:16:43:c3:cf:58:d8:c0:ca:4f:c3:
                    ee:5f:49:95:4b:e3:29:d1:b3:0e:5c:5b:48:97:99:
                    f9:dd:1d:3c:61:58:43:3e:99:d4:87:eb:48:51:40:
                    46:4a:dd:c5:56:cd:3c:cb:e7:a3:04:60:5a:fb:c3:
                    3c:e8:82:92:2a:21:91:00:81:af:56:b4:b1:d0:4b:
                    2c:2d:ad:cb:94:4f:35:b4:6c:2b:c8:54:80:5e:65:
                    1e:ad:13:d2:34:da:51:ff:dc:51:35:15:44:11:6c:
                    a1:60:91:13:31:d5:37:c5:aa:90:51:a6:22:ad:6c:
                    93:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:23:14:FC:17:65:7C:73:57:82:66:F2:42:3F:B4:29:DB:B2:43:B3
            X509v3 Authority Key Identifier:
                keyid:82:9B:22:8F:F6:D1:CF:D0:15:B1:3E:A7:FF:72:5A:53:FD:CA:3C:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d2f4d81bbf1e7d227419a51352953ce9c6aca3a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/743f81b830e062aa6557e79ac85f800ca3820671.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/8d2f4d81bbf1e7d227419a51352953ce9c6aca3a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.98.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:36:fd:d5:ee:31:ac:b1:0d:ac:36:ac:c7:a5:91:51:56:40:
         40:89:fe:8a:2c:d5:a5:c8:91:f2:20:c9:29:13:21:2e:f9:e8:
         85:66:1a:73:c1:fc:30:86:1d:eb:d4:1e:91:31:83:d6:68:0f:
         bf:a5:3d:a8:b3:28:b0:76:de:42:11:de:0c:cb:c6:ef:2e:38:
         04:27:7e:f8:34:15:27:aa:ca:61:b7:89:de:8d:15:18:be:b8:
         9d:4f:de:12:50:d4:60:14:f3:76:90:82:af:2c:66:c8:d7:dd:
         47:66:10:b1:00:90:5c:bf:55:50:a5:e7:47:5c:56:c8:36:32:
         e9:1b:ec:61:c6:81:f4:a3:4c:25:03:10:18:bd:44:af:94:8e:
         05:68:8f:ff:2b:72:a5:d9:75:30:fa:ca:7a:bd:04:42:9e:fd:
         ec:a5:9f:d0:c1:52:f6:3c:96:c1:35:f6:55:6f:64:04:22:ab:
         ff:26:4e:64:9d:f1:cc:d5:14:dd:85:6b:5e:2b:68:5a:b8:fa:
         d7:15:0a:be:ab:9a:b4:e4:c6:37:c2:4c:bb:2b:9d:59:ca:c1:
         82:c9:96:f7:2d:b2:d1:33:60:c5:8b:94:e1:04:ec:de:e3:48:
         8b:55:45:bf:cc:32:82:54:d6:70:44:99:ce:66:a5:88:59:5f:
         45:de:62:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:48 2024 by rpki-client on console-ams.rpki-client.org