Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/cb08183312fe54c24d2805a856a7ee3e2a00bd38.roa
File:                     cb08183312fe54c24d2805a856a7ee3e2a00bd38.roa (raw, json)
Hash identifier:          MI5lDQ4k0rSHyzVxPkdoH9Msd3TxvrWXwSpOAF9cSEI=
Subject key identifier:   7E:93:9A:49:51:1B:E8:B9:85:AA:CC:F5:D2:F9:52:2C:AC:50:C9:47
Certificate issuer:       /CN=8d2f4d81bbf1e7d227419a51352953ce9c6aca3a
Certificate serial:       27A41F
Authority key identifier: 82:9B:22:8F:F6:D1:CF:D0:15:B1:3E:A7:FF:72:5A:53:FD:CA:3C:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d2f4d81bbf1e7d227419a51352953ce9c6aca3a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/cb08183312fe54c24d2805a856a7ee3e2a00bd38.roa
Signing time:             Tue 28 Nov 2023 10:53:13 +0000
ROA not before:           Tue 28 Nov 2023 10:53:12 +0000
ROA not after:            Fri 28 Nov 2025 10:53:12 +0000
asID:                     400866
IP address blocks:        190.98.146.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2597919 (0x27a41f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d2f4d81bbf1e7d227419a51352953ce9c6aca3a
        Validity
            Not Before: Nov 28 10:53:12 2023 GMT
            Not After : Nov 28 10:53:12 2025 GMT
        Subject: CN=cb08183312fe54c24d2805a856a7ee3e2a00bd38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:83:04:29:a8:86:db:6e:12:33:48:7d:cf:b3:
                    ac:60:51:98:71:93:3a:94:50:56:fb:5a:b1:2e:cd:
                    ae:d5:40:d7:20:d8:d5:4b:2c:81:d4:36:38:e3:37:
                    e3:92:c0:e6:42:01:8f:b9:55:dc:cd:f3:2f:b6:04:
                    f2:66:70:6d:4f:00:db:9b:65:89:f1:2f:3e:b1:bc:
                    47:6e:e2:d0:f6:99:28:61:af:ea:8b:7a:5f:f4:6a:
                    28:9e:a6:17:f3:d5:ce:76:3c:a7:07:4e:c2:e9:a3:
                    d6:74:de:b7:2b:b5:ab:95:4e:35:c5:96:e0:4f:64:
                    90:50:7a:d9:04:62:fe:53:6b:8c:93:19:1b:e9:17:
                    4f:c4:bd:73:40:53:3d:20:3a:55:ab:f2:b4:c5:41:
                    50:7c:be:64:4e:91:5e:85:cf:8b:5c:18:3d:83:20:
                    7d:5f:8f:76:05:05:97:2c:97:a8:29:e0:3c:59:47:
                    c8:5d:85:d8:6a:8f:3c:1f:43:d2:af:47:94:21:dd:
                    51:65:e8:87:32:c7:b5:a9:c1:4c:46:ba:41:b4:1c:
                    fd:be:ae:10:2e:0f:97:71:fc:41:24:46:74:0b:95:
                    30:4b:a2:f0:39:b2:4c:4f:98:38:a0:d5:02:88:85:
                    75:fb:bb:69:f4:9c:99:31:59:05:e6:b5:85:99:f0:
                    b4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:93:9A:49:51:1B:E8:B9:85:AA:CC:F5:D2:F9:52:2C:AC:50:C9:47
            X509v3 Authority Key Identifier:
                keyid:82:9B:22:8F:F6:D1:CF:D0:15:B1:3E:A7:FF:72:5A:53:FD:CA:3C:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d2f4d81bbf1e7d227419a51352953ce9c6aca3a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/cb08183312fe54c24d2805a856a7ee3e2a00bd38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/8d2f4d81bbf1e7d227419a51352953ce9c6aca3a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.98.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:3e:d9:58:ec:21:81:81:7c:87:21:aa:d4:d8:ee:ee:63:57:
         20:7a:b1:39:14:8c:b0:27:b8:85:bb:7a:09:87:3f:0e:29:3d:
         a8:51:30:2b:80:44:5b:dc:c2:6d:f2:a0:1a:df:28:79:91:2e:
         5b:70:fe:ee:1c:30:4d:b4:2f:86:22:e7:63:c6:39:17:1d:2a:
         8a:e7:eb:7a:56:c9:79:99:65:54:f0:59:17:99:27:07:26:c0:
         10:93:6e:6e:9d:7c:ea:b2:3f:f9:57:69:a0:40:d4:f1:06:3e:
         0e:16:ec:99:ec:5f:f8:97:de:52:6b:dc:dc:b1:ea:78:e8:13:
         f5:6d:dc:67:a3:09:7b:2b:72:ed:53:97:8e:ea:14:62:94:8c:
         20:b4:b4:5d:66:6f:51:47:69:a4:88:aa:e9:0b:95:d9:d9:a5:
         2e:ae:4c:f2:b4:ef:80:3d:b5:2b:17:dd:99:2f:4f:ae:d7:de:
         ae:84:18:57:96:cb:40:31:0c:72:9d:cc:71:2b:56:e1:ba:c2:
         76:82:38:6d:a3:74:21:57:94:2e:67:ed:33:b5:f0:5b:01:56:
         63:1d:f2:6c:f9:f0:2c:74:73:dc:b9:b3:12:15:0b:c7:4b:5c:
         74:01:3c:ae:a6:e1:1f:2e:30:d2:d7:a9:e4:91:a0:e6:32:44:
         bb:f3:ab:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org