Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d76b6fa5-88c4-4269-bdde-3fcc865b8380/48ae7ad1b791dae3e08f37773b71d8960a0bfa4e.roa
File:                     48ae7ad1b791dae3e08f37773b71d8960a0bfa4e.roa (raw, json)
Hash identifier:          UdsziVDfL3RY2DTqHn6JscK9kK5YiBlyaAk3mTbpoUc=
Subject key identifier:   85:EC:09:02:F5:96:E7:B4:CF:C7:5B:D2:46:68:C5:5B:A0:C4:76:D7
Certificate issuer:       /CN=68f7a0910bc6c4f99cea989c6355a0951ef0b528
Certificate serial:       26ABCE
Authority key identifier: 6B:8C:3D:C3:47:40:C7:C9:00:8B:09:AE:D1:04:97:E0:B1:6A:6F:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/68f7a0910bc6c4f99cea989c6355a0951ef0b528.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d76b6fa5-88c4-4269-bdde-3fcc865b8380/48ae7ad1b791dae3e08f37773b71d8960a0bfa4e.roa
Signing time:             Fri 22 Dec 2023 14:29:04 +0000
ROA not before:           Fri 22 Dec 2023 14:29:03 +0000
ROA not after:            Mon 22 Dec 2025 14:29:03 +0000
asID:                     264746
IP address blocks:        191.97.64.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2534350 (0x26abce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68f7a0910bc6c4f99cea989c6355a0951ef0b528
        Validity
            Not Before: Dec 22 14:29:03 2023 GMT
            Not After : Dec 22 14:29:03 2025 GMT
        Subject: CN=48ae7ad1b791dae3e08f37773b71d8960a0bfa4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a1:0c:fd:83:31:e1:67:6b:14:52:e0:ee:a6:
                    d3:7a:02:8b:70:6d:56:2f:08:6e:e7:26:c9:b6:16:
                    85:81:4b:a1:61:50:c6:96:05:74:8e:8d:24:47:9f:
                    b9:44:df:fd:bd:7d:f2:4d:df:85:bc:58:48:1c:19:
                    ac:45:9b:0f:c3:f1:67:52:43:ee:9c:46:25:3d:e8:
                    39:22:37:0a:b0:23:8d:3a:20:dc:b5:3c:69:59:9c:
                    01:5a:e7:ea:36:f0:fc:0a:76:86:89:0e:8b:49:60:
                    57:93:c4:53:c4:cc:93:70:e8:be:d7:c6:74:09:ed:
                    da:61:f7:34:80:ec:aa:15:c3:32:20:78:72:ca:92:
                    64:5b:e9:51:b3:ea:5a:49:2b:76:35:ee:24:4c:2c:
                    61:22:27:6a:3c:fb:fc:6b:d3:d7:23:d8:4f:48:b9:
                    cd:23:cc:ab:06:3f:bf:6b:41:f6:0e:91:dc:3b:0a:
                    52:1f:14:bd:36:4a:06:20:16:0e:46:d0:2d:45:c1:
                    b5:a7:66:bc:3c:4a:78:bf:d3:4d:e1:63:91:dc:4e:
                    7d:9c:b2:26:25:b2:bf:a2:8a:01:4d:52:b9:5f:fa:
                    41:4e:41:ed:a3:19:02:b3:30:ba:70:37:ea:d9:d6:
                    92:39:c5:f8:3f:b4:0e:63:f3:b6:56:34:00:0f:f6:
                    ac:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:EC:09:02:F5:96:E7:B4:CF:C7:5B:D2:46:68:C5:5B:A0:C4:76:D7
            X509v3 Authority Key Identifier:
                keyid:6B:8C:3D:C3:47:40:C7:C9:00:8B:09:AE:D1:04:97:E0:B1:6A:6F:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/68f7a0910bc6c4f99cea989c6355a0951ef0b528.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d76b6fa5-88c4-4269-bdde-3fcc865b8380/48ae7ad1b791dae3e08f37773b71d8960a0bfa4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d76b6fa5-88c4-4269-bdde-3fcc865b8380/68f7a0910bc6c4f99cea989c6355a0951ef0b528.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:d0:56:49:ee:da:ef:ef:00:80:97:2d:fb:0e:b1:04:c7:55:
         69:e2:c5:64:dc:e8:c3:db:a4:b8:13:dd:18:c7:cb:5f:4c:57:
         fb:6e:3b:81:ef:27:23:19:40:a5:32:45:f7:c2:5b:63:4a:1a:
         bd:bb:f8:8f:a4:5a:e8:e3:c1:50:6e:b5:38:dc:81:0d:38:03:
         70:5f:1b:26:4a:49:4f:bf:d8:35:23:c3:7d:80:e7:e0:ad:19:
         43:b1:06:61:51:f1:ad:ae:c0:b4:9e:4f:0a:86:23:c1:c6:26:
         7c:05:ce:5e:4c:64:fe:a3:e7:ad:0a:15:f2:c5:d1:bd:60:02:
         2a:28:a8:15:ac:4d:df:95:66:cb:18:ac:d8:9c:43:f8:a6:cd:
         78:cf:ab:97:14:42:d6:56:bd:8c:59:6b:b1:2f:b4:7b:df:07:
         3c:ce:ee:b2:7c:f7:8d:bf:65:13:eb:b1:8a:e5:19:67:97:d6:
         9a:1d:77:59:5a:5b:6d:ed:54:62:76:10:52:b8:f0:3a:5e:cf:
         05:9e:86:89:5e:d9:27:21:1f:75:e9:44:b8:92:39:81:c4:80:
         a7:fa:86:99:37:5a:37:b7:bf:a3:90:27:5e:99:23:d7:ea:17:
         fc:2c:8a:ae:46:8e:b5:37:1a:d7:46:67:f4:67:f4:8c:c8:c0:
         f4:64:7a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:08 2024 by rpki-client on console-fra.rpki-client.org