Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e88b7959-c9d1-4871-85ef-a042c98b1996/48c5d87f7acd8db1521e294c366c8bdafb710eef.roa
File:                     48c5d87f7acd8db1521e294c366c8bdafb710eef.roa (raw, json)
Hash identifier:          LRc4JOYM6BOTJEyMGzE88h6uFvcSTNcb1WCtlGuimsg=
Subject key identifier:   46:DA:89:53:5F:0D:DA:3B:BC:CD:0F:29:7A:A7:6F:55:82:BB:5E:52
Certificate issuer:       /CN=32b7dede0ee425fb7f77655ae699df21e4d9273b
Certificate serial:       0EAD08
Authority key identifier: 8E:4C:F3:18:96:14:32:80:C7:4E:47:1C:52:24:2B:74:70:DA:79:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32b7dede0ee425fb7f77655ae699df21e4d9273b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e88b7959-c9d1-4871-85ef-a042c98b1996/48c5d87f7acd8db1521e294c366c8bdafb710eef.roa
Signing time:             Tue 06 Feb 2024 21:43:57 +0000
ROA not before:           Tue 06 Feb 2024 21:43:57 +0000
ROA not after:            Fri 06 Feb 2026 21:43:57 +0000
asID:                     270080
IP address blocks:        191.241.62.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 961800 (0xead08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32b7dede0ee425fb7f77655ae699df21e4d9273b
        Validity
            Not Before: Feb  6 21:43:57 2024 GMT
            Not After : Feb  6 21:43:57 2026 GMT
        Subject: CN=48c5d87f7acd8db1521e294c366c8bdafb710eef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7c:4f:94:54:cc:b8:37:d7:e2:73:45:b4:86:
                    b1:2e:8f:87:c4:91:ab:a8:ea:a2:02:98:8f:0f:68:
                    14:42:b7:df:82:cb:fc:cd:8d:1d:3e:e0:42:ed:ff:
                    a1:75:2d:00:c1:ab:e6:e4:58:3f:c7:a5:e8:7f:bb:
                    a5:eb:f0:3c:cc:4b:c5:fb:00:9f:ea:63:b9:e4:ae:
                    76:94:7e:1f:9a:c3:50:cf:5c:6e:9a:55:4f:13:07:
                    c3:4e:c0:c8:af:72:a9:af:34:b8:27:15:d4:e2:d0:
                    a6:c1:a9:19:d4:02:c0:8b:0d:ab:f9:41:58:f4:71:
                    c4:50:24:45:57:19:a7:6e:1c:46:a7:47:b3:ab:f4:
                    1f:16:a3:89:55:49:6d:4f:ed:5c:ba:81:23:fe:98:
                    12:69:98:64:53:b5:a2:76:2c:92:73:38:95:f6:17:
                    97:9f:b9:cf:99:c2:c1:2f:41:65:b4:8e:ab:41:d6:
                    da:2c:47:bf:92:ec:43:31:35:42:ad:cb:b0:66:9b:
                    74:bb:d8:36:a0:1e:9b:9c:5e:ab:0c:d4:76:43:62:
                    3f:4d:c4:b0:5f:3c:9a:8d:3d:f9:27:81:65:5a:51:
                    6f:40:ef:03:c7:f6:3e:e1:4e:3e:61:de:d2:31:d9:
                    af:c1:de:f0:24:9c:8d:6c:1e:c1:7e:36:c4:8e:22:
                    0a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:DA:89:53:5F:0D:DA:3B:BC:CD:0F:29:7A:A7:6F:55:82:BB:5E:52
            X509v3 Authority Key Identifier:
                keyid:8E:4C:F3:18:96:14:32:80:C7:4E:47:1C:52:24:2B:74:70:DA:79:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32b7dede0ee425fb7f77655ae699df21e4d9273b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e88b7959-c9d1-4871-85ef-a042c98b1996/48c5d87f7acd8db1521e294c366c8bdafb710eef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e88b7959-c9d1-4871-85ef-a042c98b1996/32b7dede0ee425fb7f77655ae699df21e4d9273b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:da:70:2d:5f:90:93:1e:47:99:b3:1b:be:84:ab:f7:9e:96:
         0a:f3:5b:9d:16:68:91:97:8c:38:1f:82:26:c4:f4:30:2f:d1:
         71:44:ca:40:20:40:63:dd:a0:fb:47:7d:26:a2:14:97:13:53:
         83:59:ec:ce:ac:b2:4d:22:02:39:e9:ae:e6:dc:70:c7:6f:21:
         e0:83:60:10:07:7b:35:8a:ae:30:22:9d:2f:9d:25:a9:1c:7d:
         c9:8e:fb:e3:33:71:e4:f2:65:bf:7f:0d:12:16:6a:65:13:1f:
         74:cc:43:b6:c4:2f:94:51:3f:5c:16:51:0e:c4:81:b9:c3:3b:
         44:ba:23:f7:b8:fd:00:45:f7:9b:ee:80:8b:8d:59:65:e4:c8:
         53:a5:d4:55:37:40:e8:d5:dd:73:ab:c6:94:3e:ee:ec:31:d3:
         1f:15:f2:06:2d:eb:8a:e1:d6:34:73:dc:15:0f:0f:ce:6a:be:
         54:85:44:7a:0d:56:f0:30:9b:07:9f:99:27:42:fb:8c:67:31:
         52:f8:26:35:01:51:f8:58:a9:75:53:3a:89:7a:c3:d6:81:46:
         e6:29:b3:ac:02:32:9b:f8:ce:6a:db:36:e6:b3:20:3f:84:3c:
         c7:52:47:b9:15:ff:8b:60:9a:92:28:44:f9:08:58:3b:8a:60:
         ef:84:4f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:33 2024 by rpki-client on console-fra.rpki-client.org