Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/02dcaa7a3a7748b5eac7746aee06e84265144ea8.roa
File:                     02dcaa7a3a7748b5eac7746aee06e84265144ea8.roa (raw, json)
Hash identifier:          ZOvok4ncrcpLVti5tJwnfHw9m3NxmoM7F4BLZiyMeB8=
Subject key identifier:   BB:72:86:83:65:F2:A4:AD:48:5D:27:44:D2:B0:45:DD:C4:F4:E9:05
Certificate issuer:       /CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
Certificate serial:       2514B2
Authority key identifier: B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/02dcaa7a3a7748b5eac7746aee06e84265144ea8.roa
Signing time:             Wed 27 Sep 2023 14:51:03 +0000
ROA not before:           Tue 26 Sep 2023 14:51:03 +0000
ROA not after:            Sat 27 Sep 2025 14:51:03 +0000
asID:                     26506
IP address blocks:        190.95.141.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2430130 (0x2514b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
        Validity
            Not Before: Sep 26 14:51:03 2023 GMT
            Not After : Sep 27 14:51:03 2025 GMT
        Subject: CN=02dcaa7a3a7748b5eac7746aee06e84265144ea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ca:c0:0a:ff:e7:12:47:1a:7a:31:47:c5:39:
                    d6:c5:ad:7b:4a:63:88:54:28:f1:6c:df:f3:b1:70:
                    1a:91:f4:62:5f:13:e2:e0:3f:a8:58:30:de:6e:e4:
                    f0:87:fd:b4:20:08:b7:b4:cc:bd:1c:1a:09:60:90:
                    7c:3b:4d:a8:1a:13:18:3f:b2:29:9d:5b:2d:ee:df:
                    29:80:41:f9:12:0f:98:e0:ea:17:91:0a:bc:33:fd:
                    7f:48:f0:08:b7:25:ee:81:fc:18:ff:1b:1d:4d:a3:
                    1f:16:06:0f:a1:8a:8d:f3:84:02:12:69:27:a8:82:
                    de:d5:0a:9b:7a:b5:4d:90:01:fe:9e:05:4b:f7:4a:
                    1f:f6:a1:b2:52:69:b8:cc:2a:0f:0c:dc:3d:b6:63:
                    14:74:c6:73:30:2d:f5:46:fd:55:e7:b4:cb:06:3a:
                    85:15:79:7f:ae:34:4e:61:52:e4:68:b1:84:af:d9:
                    32:10:d7:de:6a:88:18:6f:fc:3a:7c:e5:9f:02:04:
                    ef:f3:d5:16:d7:a1:8f:b0:15:b5:84:93:54:66:b6:
                    6d:7c:a3:32:2b:35:2e:f1:ea:18:3e:9b:d2:aa:93:
                    75:27:97:73:cf:6a:78:06:d5:73:d8:bc:a9:77:ff:
                    04:6c:ad:d8:a1:69:44:40:43:76:24:6e:10:73:40:
                    9e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:72:86:83:65:F2:A4:AD:48:5D:27:44:D2:B0:45:DD:C4:F4:E9:05
            X509v3 Authority Key Identifier:
                keyid:B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/02dcaa7a3a7748b5eac7746aee06e84265144ea8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.95.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:b2:49:69:49:0f:73:60:51:49:46:2c:0e:d2:f1:62:79:34:
         e0:6e:d1:a5:97:62:b8:e4:cb:14:5d:a9:b4:9b:4e:58:86:f4:
         de:c0:6c:1f:5e:63:91:bd:9e:4a:48:45:7a:a8:e4:3f:91:38:
         8a:df:d7:2c:b8:de:37:0d:b2:16:f8:7e:0b:15:4a:fd:4c:b4:
         e2:0d:4a:a9:ed:e0:d6:a7:a1:e1:bb:86:f8:a6:21:2b:8a:02:
         b2:a1:b2:db:1a:44:d6:09:b2:97:9a:60:0a:13:53:1b:a8:e4:
         bc:6e:da:4e:02:a4:17:b6:95:8c:da:0b:41:eb:08:56:83:e5:
         a2:44:1b:67:13:a3:9e:3b:12:11:1e:65:19:ef:ff:00:8c:03:
         cf:8f:68:61:8b:2d:53:ad:35:90:73:7e:43:64:bd:bc:ef:6c:
         ec:cf:67:5b:24:4c:2b:42:98:99:36:08:f7:39:1f:cb:6c:76:
         9b:da:bf:88:bf:0d:02:9c:bd:23:e1:4d:b4:03:96:55:45:ed:
         a9:24:88:72:8c:2c:dd:89:ce:b4:25:f4:9a:49:ac:a7:f3:3b:
         ef:5f:f0:93:c3:6b:07:4c:38:9c:7c:74:8e:b5:8f:0a:59:18:
         de:de:8a:fd:6b:96:2e:f5:3a:80:5c:e8:9d:56:54:ac:73:54:
         b0:b7:22:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:53 2024 by rpki-client on console-ams.rpki-client.org