Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/fc5d391dbd3b614f05681dce360e6a95bd3502bf.roa
File:                     fc5d391dbd3b614f05681dce360e6a95bd3502bf.roa (raw, json)
Hash identifier:          btnoohN8qG1FjwwKHYkpdY+IO7IkQkuKv9p7ysMQZ9M=
Subject key identifier:   ED:5B:69:7A:D1:D3:52:1A:06:01:E3:25:62:6A:5A:25:55:05:77:01
Certificate issuer:       /CN=38b29341362af70cee57f236bd01d638b2845ee4
Certificate serial:       1FA27B
Authority key identifier: A6:30:D2:7A:2A:C9:20:A7:F1:E0:20:0C:B1:49:E4:83:39:77:D6:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/38b29341362af70cee57f236bd01d638b2845ee4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/fc5d391dbd3b614f05681dce360e6a95bd3502bf.roa
Signing time:             Tue 31 Jan 2023 16:05:05 +0000
ROA not before:           Mon 30 Jan 2023 16:04:20 +0000
ROA not after:            Fri 31 Jan 2025 16:04:20 +0000
asID:                     262171
IP address blocks:        190.93.166.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2073211 (0x1fa27b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38b29341362af70cee57f236bd01d638b2845ee4
        Validity
            Not Before: Jan 30 16:04:20 2023 GMT
            Not After : Jan 31 16:04:20 2025 GMT
        Subject: CN=fc5d391dbd3b614f05681dce360e6a95bd3502bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e5:fa:0f:9d:90:6a:aa:63:25:fa:5a:18:87:
                    04:46:90:b3:d3:fc:7a:56:29:63:0b:b6:24:05:6c:
                    f3:b9:1b:d1:2e:60:a4:86:ed:2b:5f:ac:91:dc:a5:
                    77:7c:33:e1:89:0c:80:75:da:84:8c:58:b9:45:9d:
                    7b:70:d3:30:e4:35:1f:a9:73:90:be:1d:c9:c8:96:
                    2e:3f:3e:79:10:fc:13:e0:ec:fa:74:03:38:a7:e4:
                    1b:e8:86:ab:ed:eb:8c:eb:6b:9f:f2:59:65:bd:c8:
                    42:53:ca:c2:90:13:44:64:d7:56:3a:d0:33:cf:f2:
                    81:9d:cb:fc:b1:1e:ba:14:25:37:d5:41:40:21:89:
                    9f:2e:76:e1:da:9f:f4:9c:38:29:e4:d7:38:76:32:
                    af:10:36:59:bd:2a:79:c1:ea:36:7f:56:1b:2f:db:
                    ec:50:4e:12:79:ec:9a:29:a8:4b:98:8e:b4:52:dc:
                    16:ae:a6:05:b1:b9:f1:90:1c:53:05:ab:a4:c5:c7:
                    9e:16:6d:2b:55:f5:38:79:0b:70:81:c2:4b:01:76:
                    5b:bc:c7:6c:13:4b:58:1f:c2:00:22:3e:4c:2a:4d:
                    0c:b0:1d:e0:be:60:92:70:5d:f2:fb:a3:c4:55:57:
                    ae:05:a2:c9:a4:cd:3d:8e:0d:3d:33:39:09:10:6a:
                    a8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:5B:69:7A:D1:D3:52:1A:06:01:E3:25:62:6A:5A:25:55:05:77:01
            X509v3 Authority Key Identifier:
                keyid:A6:30:D2:7A:2A:C9:20:A7:F1:E0:20:0C:B1:49:E4:83:39:77:D6:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/38b29341362af70cee57f236bd01d638b2845ee4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/fc5d391dbd3b614f05681dce360e6a95bd3502bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/38b29341362af70cee57f236bd01d638b2845ee4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:00:14:04:ff:46:b4:2e:1f:e6:ba:c0:8b:e2:28:bb:ec:29:
         54:e0:fd:5d:7e:4d:95:6e:f4:03:68:53:71:d9:69:3d:08:0e:
         09:4c:20:51:d0:0d:8e:8a:c9:d4:04:96:25:13:1b:2c:34:49:
         4f:37:5b:fe:d4:4f:53:ff:64:63:c8:3c:2a:d3:4a:8b:a5:6b:
         de:36:4b:44:a6:85:5d:fc:24:95:58:35:6f:6e:0c:02:bb:5c:
         ce:1e:81:96:39:04:72:05:2c:45:72:37:49:2a:b8:3e:1e:c0:
         e6:3f:b8:87:36:38:31:23:d4:8a:16:21:81:10:45:eb:67:0f:
         d5:b4:94:a8:1d:f0:48:d7:1e:30:1f:9a:53:3f:f4:b4:05:c5:
         98:fc:ec:7d:9a:6c:df:5a:d9:d1:40:fd:fa:f5:75:bb:45:9a:
         fc:79:cf:c2:cd:fd:52:42:16:27:6b:da:35:10:af:c4:d0:dc:
         62:0e:d3:9e:65:77:e3:48:98:e4:61:4e:4b:df:af:4d:ae:32:
         ed:5d:bb:c2:61:be:8c:63:cf:d3:26:d2:81:a3:24:b3:07:d0:
         0a:be:2b:2f:c2:3a:81:88:84:42:ed:68:59:83:3f:4b:48:09:
         f0:e3:d6:14:70:c5:e3:23:1f:11:15:ae:ee:4b:7f:9e:ac:96:
         b4:c7:ac:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-ams.rpki-client.org