Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/c254329ed66c4a7600cef2ea69e882c76f831565.roa
File:                     c254329ed66c4a7600cef2ea69e882c76f831565.roa (raw, json)
Hash identifier:          YAFYJS/AMNe3i8vwV6JEhmBYaxSA/EmWl5JUkEZuIKk=
Subject key identifier:   F4:C6:0D:A2:1E:AF:F9:C0:51:9B:9B:FC:B3:B1:D5:82:17:DD:B3:BC
Certificate issuer:       /CN=8d2f4d81bbf1e7d227419a51352953ce9c6aca3a
Certificate serial:       27A658
Authority key identifier: 82:9B:22:8F:F6:D1:CF:D0:15:B1:3E:A7:FF:72:5A:53:FD:CA:3C:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d2f4d81bbf1e7d227419a51352953ce9c6aca3a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/c254329ed66c4a7600cef2ea69e882c76f831565.roa
Signing time:             Tue 28 Nov 2023 10:57:46 +0000
ROA not before:           Tue 28 Nov 2023 10:57:46 +0000
ROA not after:            Fri 28 Nov 2025 10:57:46 +0000
asID:                     21859
IP address blocks:        190.98.146.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2598488 (0x27a658)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d2f4d81bbf1e7d227419a51352953ce9c6aca3a
        Validity
            Not Before: Nov 28 10:57:46 2023 GMT
            Not After : Nov 28 10:57:46 2025 GMT
        Subject: CN=c254329ed66c4a7600cef2ea69e882c76f831565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:09:c0:43:0d:45:cc:71:90:c5:54:78:99:b5:
                    fe:30:49:66:a9:ec:48:a3:b1:97:b2:73:1f:de:ed:
                    bc:59:74:ec:12:dc:7c:07:91:21:ef:fd:9c:08:1a:
                    56:74:34:04:42:61:48:81:1c:1f:e9:b8:d1:d1:dc:
                    c6:33:9b:28:5e:69:6b:93:f7:2a:36:51:8a:10:f1:
                    43:9d:6b:6e:da:ec:d3:10:94:96:e5:48:e6:94:ae:
                    f6:32:f0:82:48:93:ae:6a:b7:ad:3a:3e:13:3a:1d:
                    0c:be:68:bf:f4:7d:e5:cb:4b:92:51:e3:41:57:ff:
                    48:70:0d:7b:9e:cc:ad:7a:80:a7:53:df:3b:f2:6a:
                    ee:c1:ae:37:26:91:03:6b:91:87:bf:31:19:9b:cc:
                    7f:8f:49:4a:7c:99:29:03:02:29:a9:27:a3:7c:37:
                    ad:be:ac:9d:2d:19:e4:f1:5f:0a:1e:8c:57:fa:ea:
                    87:57:95:55:8b:46:3f:5b:81:77:62:8f:7f:f4:71:
                    bc:1c:44:2f:b1:2a:13:3c:fd:7a:40:d7:30:c7:71:
                    4e:75:81:6a:74:2d:0c:bd:2a:8d:98:4b:ab:1d:e7:
                    fb:44:23:e0:52:57:45:0e:ae:59:b4:8b:55:e3:a5:
                    bb:a3:7e:70:22:e2:45:24:04:55:35:bc:b4:7b:07:
                    1e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C6:0D:A2:1E:AF:F9:C0:51:9B:9B:FC:B3:B1:D5:82:17:DD:B3:BC
            X509v3 Authority Key Identifier:
                keyid:82:9B:22:8F:F6:D1:CF:D0:15:B1:3E:A7:FF:72:5A:53:FD:CA:3C:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d2f4d81bbf1e7d227419a51352953ce9c6aca3a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/c254329ed66c4a7600cef2ea69e882c76f831565.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/8d2f4d81bbf1e7d227419a51352953ce9c6aca3a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.98.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:7b:28:91:49:88:a2:e7:8e:d8:1f:5b:57:4e:4c:b8:8f:25:
         8c:e7:64:3d:00:31:0a:35:92:c6:12:bd:bc:5c:e4:3a:a6:a8:
         bf:f0:a2:2d:6b:b2:0c:66:f4:8a:b5:ab:33:1b:07:41:10:16:
         54:2d:78:76:a0:60:e7:f4:62:94:dd:43:6a:52:dd:6a:1e:89:
         3e:22:51:22:2c:49:ab:32:ca:93:c3:9c:0d:5d:aa:ce:a4:f2:
         a9:a6:de:cc:6f:0a:45:d5:2b:25:84:b9:e7:e7:90:76:a0:c0:
         8b:ed:b6:f5:73:ac:1a:5e:a2:8f:f4:51:b2:9d:be:66:10:34:
         38:28:be:9c:30:78:73:a2:f9:87:ee:b8:d4:fe:4b:dc:cc:60:
         35:59:e2:17:4b:9e:0c:c2:c8:93:01:a4:f3:e6:af:fc:03:a5:
         e3:be:29:8c:18:d5:50:ed:71:79:45:38:92:f3:80:c8:72:c3:
         1c:6a:f1:f1:ca:22:4f:52:d7:0d:8e:95:ef:22:18:b1:31:7f:
         06:1d:c2:8e:e1:66:c8:ad:f5:4e:63:a8:56:30:62:f6:64:bc:
         fd:06:71:1c:0f:3e:80:d6:fc:b1:47:7a:1f:fe:d7:fb:43:df:
         5b:87:4f:f3:66:a9:24:c0:26:79:0d:43:ed:02:ab:a9:40:39:
         80:bc:52:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org