Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e348bdf3-6c2a-4e7f-9deb-ebcd2c56f245/b676cdef7749aa452f27d9e886b795821be8ebc1.roa
File:                     b676cdef7749aa452f27d9e886b795821be8ebc1.roa (raw, json)
Hash identifier:          Nd/+KXTiTvg9xbrRVUOWcs4tNkOa9KpNFXv5bKKXmUA=
Subject key identifier:   05:25:6F:D6:6E:6A:43:69:27:8F:4C:D1:A2:8A:44:70:25:6F:C5:17
Certificate issuer:       /CN=eb6de066f1c70b82f75b54d19209c0e03f1f0279
Certificate serial:       215C79
Authority key identifier: 76:12:49:46:59:CF:CF:F8:19:4B:DD:87:76:20:C2:55:68:E0:EA:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eb6de066f1c70b82f75b54d19209c0e03f1f0279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e348bdf3-6c2a-4e7f-9deb-ebcd2c56f245/b676cdef7749aa452f27d9e886b795821be8ebc1.roa
Signing time:             Mon 12 Jun 2023 23:46:39 +0000
ROA not before:           Sun 11 Jun 2023 23:46:39 +0000
ROA not after:            Thu 12 Jun 2025 23:46:39 +0000
asID:                     52501
IP address blocks:        190.53.41.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2186361 (0x215c79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb6de066f1c70b82f75b54d19209c0e03f1f0279
        Validity
            Not Before: Jun 11 23:46:39 2023 GMT
            Not After : Jun 12 23:46:39 2025 GMT
        Subject: CN=b676cdef7749aa452f27d9e886b795821be8ebc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b3:64:11:66:60:49:cf:b9:0e:b0:5d:2f:14:
                    88:c2:8a:70:1e:79:48:6a:bc:22:5c:77:2f:e3:d4:
                    84:28:21:b1:30:31:92:be:55:15:b7:c3:8f:82:df:
                    24:9a:b4:49:b5:09:58:43:21:58:df:6e:9e:b6:6b:
                    c3:af:e4:f5:11:1b:14:ea:a0:09:23:f8:39:ff:c6:
                    57:f5:4b:a9:c7:23:b6:4c:c4:8f:98:61:42:45:f6:
                    e0:9e:30:aa:46:19:36:de:01:a9:71:6d:87:04:3b:
                    fe:b9:32:f5:52:f5:c5:ed:b1:9c:ab:80:a5:d3:75:
                    88:8e:72:91:8f:6a:9d:db:25:03:d7:32:bb:f2:45:
                    a9:bf:8f:52:d0:ad:25:6d:1a:27:27:5e:27:17:d7:
                    e4:94:db:9a:8f:7d:ce:63:05:7f:5d:43:09:25:66:
                    b5:a9:8a:22:cc:a3:70:21:4c:3d:d4:1b:2c:b8:b4:
                    60:a7:20:48:75:f6:cd:15:0c:a4:ca:7b:3c:8b:63:
                    94:3b:0d:8e:b7:61:5b:7e:96:20:fe:c3:1c:a9:ae:
                    93:b9:31:bf:28:eb:cf:c5:57:6d:a4:03:37:83:79:
                    ab:6b:55:4a:1a:fa:c5:8e:91:cf:4e:b9:e3:f1:1a:
                    6b:62:5a:77:8f:b7:97:a0:c3:66:c2:cb:bf:24:37:
                    b6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:25:6F:D6:6E:6A:43:69:27:8F:4C:D1:A2:8A:44:70:25:6F:C5:17
            X509v3 Authority Key Identifier:
                keyid:76:12:49:46:59:CF:CF:F8:19:4B:DD:87:76:20:C2:55:68:E0:EA:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eb6de066f1c70b82f75b54d19209c0e03f1f0279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e348bdf3-6c2a-4e7f-9deb-ebcd2c56f245/b676cdef7749aa452f27d9e886b795821be8ebc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e348bdf3-6c2a-4e7f-9deb-ebcd2c56f245/eb6de066f1c70b82f75b54d19209c0e03f1f0279.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.53.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:aa:aa:52:f9:ba:5b:41:2f:75:41:d9:3c:2a:6b:36:03:b0:
         1d:7b:19:ef:46:13:21:f3:c2:cb:73:ca:37:73:58:21:99:22:
         8a:60:ee:54:24:09:42:bc:be:8b:31:42:61:e4:9f:6b:a1:82:
         18:2c:e5:6e:fd:6d:3e:f6:2f:ed:55:c0:95:a2:22:b8:22:63:
         f6:06:75:70:e5:4d:2a:29:95:9b:07:bb:6b:e1:69:a8:11:01:
         dc:b0:27:6d:a7:81:d6:37:3e:83:28:df:35:b2:f5:20:2f:df:
         0d:52:6a:13:b3:97:80:ac:4c:7a:1f:95:43:4e:50:57:90:a6:
         f4:39:e3:12:bd:96:ff:ce:91:51:89:86:51:5d:13:91:d7:6c:
         87:be:16:95:30:0a:22:61:7f:27:41:16:8e:bb:18:43:3d:7b:
         37:28:26:3d:ac:88:78:ce:e7:74:70:a5:09:8a:04:34:54:11:
         05:c7:89:7a:44:b4:c2:35:03:93:69:cf:7d:6e:12:2f:40:98:
         1b:64:c5:f1:5d:1f:f3:11:e3:37:eb:77:06:f5:93:dd:cd:82:
         17:ac:fe:d6:ca:3f:5e:28:7a:b4:ff:ba:b5:f3:b9:be:3a:0e:
         57:b6:86:d7:5b:f1:94:9f:44:23:ce:2b:74:86:2b:f8:7f:35:
         8e:35:9e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:50 2024 by rpki-client on console-ams.rpki-client.org