Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9eb83a48-f5ea-4e30-b7f5-488676cc1d5d/f91e3875a9163acb42119a1e4e3261e99bfc81d1.roa
File:                     f91e3875a9163acb42119a1e4e3261e99bfc81d1.roa (raw, json)
Hash identifier:          lb7/HFTn7WaUIR1uETUuKWfpXnnFg8bEcVaW7eq4nNs=
Subject key identifier:   54:E9:DC:46:92:B3:DE:BE:BE:09:6B:1C:6B:80:23:DD:AA:BE:C8:1D
Certificate issuer:       /CN=ed8fcfa65d8de09a281c9fdf71280ad87f71facb
Certificate serial:       2765A0
Authority key identifier: C9:BD:27:FE:79:BB:96:F5:3F:FC:66:35:BD:13:88:51:8D:14:98:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ed8fcfa65d8de09a281c9fdf71280ad87f71facb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9eb83a48-f5ea-4e30-b7f5-488676cc1d5d/f91e3875a9163acb42119a1e4e3261e99bfc81d1.roa
Signing time:             Tue 13 Feb 2024 20:55:07 +0000
ROA not before:           Tue 13 Feb 2024 20:55:06 +0000
ROA not after:            Fri 13 Feb 2026 20:55:06 +0000
asID:                     52263
IP address blocks:        177.93.0.0/19 maxlen: 24
                          200.229.0.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2581920 (0x2765a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed8fcfa65d8de09a281c9fdf71280ad87f71facb
        Validity
            Not Before: Feb 13 20:55:06 2024 GMT
            Not After : Feb 13 20:55:06 2026 GMT
        Subject: CN=f91e3875a9163acb42119a1e4e3261e99bfc81d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:85:bf:5c:48:52:41:cf:b6:cf:22:3e:19:e0:
                    b0:1d:84:f1:77:6e:f1:84:ed:be:0d:66:36:f0:9f:
                    f4:fd:40:3f:2c:5c:bf:80:63:cc:fb:e8:4c:a0:c8:
                    32:32:d3:56:0b:c5:d6:d5:73:64:6e:ed:ac:0f:79:
                    42:17:40:ea:fd:32:10:09:07:72:f1:a5:72:f5:9c:
                    10:a1:f1:37:4a:91:2d:bd:6c:6a:c2:86:05:0e:bd:
                    f0:90:6b:ee:52:f4:dc:98:d4:6d:6d:15:86:b7:32:
                    10:bb:14:80:4a:6d:2e:70:a8:8e:34:3e:cb:16:f1:
                    95:1d:1a:d1:66:35:63:90:7d:b8:d8:83:43:fc:b0:
                    a5:67:a9:0c:66:ea:89:46:fd:5d:e3:a3:ad:66:84:
                    13:90:fc:2c:d6:e3:0d:2a:99:10:22:d2:e2:3f:f5:
                    9f:a7:b7:84:2a:62:f8:3c:a5:32:a8:da:ba:4c:de:
                    25:71:44:f6:2e:d7:c0:de:88:9f:db:09:02:46:64:
                    a4:a3:51:c4:1a:5b:88:a6:9e:0b:18:0c:45:10:a9:
                    73:b2:1f:b1:44:47:62:72:3d:ba:a5:5d:5d:d3:19:
                    47:a5:a6:bd:34:86:a1:c9:e6:b6:3b:8b:5b:1b:e4:
                    77:33:88:36:ef:9b:69:5e:0c:b3:5a:d9:ed:57:b5:
                    7a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E9:DC:46:92:B3:DE:BE:BE:09:6B:1C:6B:80:23:DD:AA:BE:C8:1D
            X509v3 Authority Key Identifier:
                keyid:C9:BD:27:FE:79:BB:96:F5:3F:FC:66:35:BD:13:88:51:8D:14:98:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ed8fcfa65d8de09a281c9fdf71280ad87f71facb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9eb83a48-f5ea-4e30-b7f5-488676cc1d5d/f91e3875a9163acb42119a1e4e3261e99bfc81d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9eb83a48-f5ea-4e30-b7f5-488676cc1d5d/ed8fcfa65d8de09a281c9fdf71280ad87f71facb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.0.0/19
                  200.229.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2b:99:5d:86:b9:49:be:ce:61:1d:7b:b9:4e:b6:2c:14:84:a5:
         ec:10:c3:c3:04:ee:70:9d:b9:76:a6:36:61:3c:96:f5:96:65:
         36:d1:59:62:4e:25:3d:d2:48:67:18:b7:a2:f4:dc:ce:cb:42:
         0e:12:64:bc:92:9a:a4:cc:9f:d2:80:a9:c0:57:9f:6d:07:d5:
         b4:65:19:85:f8:19:6e:ee:ca:44:31:66:2c:5c:2c:65:fb:c3:
         aa:dc:ae:11:fa:65:61:24:24:e5:7d:97:aa:71:e3:55:ab:c4:
         00:f4:93:12:ba:8d:dc:5c:de:11:08:9f:7b:06:c6:97:d8:4a:
         ea:0c:be:a6:3f:99:71:71:50:9b:9c:2c:3e:cf:07:6d:11:05:
         83:37:a0:b8:cc:24:25:8b:e2:cd:1b:b1:e9:14:12:50:cb:ef:
         ca:fb:a5:9e:b0:0a:8d:c7:ca:f3:46:1e:83:b5:18:91:f6:35:
         9e:0e:4b:eb:8b:24:48:41:7f:8d:88:e6:44:1b:00:1e:60:55:
         5e:43:eb:3f:db:7e:23:68:01:86:5b:87:2a:bc:e4:32:58:a6:
         b4:92:88:78:03:e8:b8:d9:ff:c4:8f:fa:7a:0e:ea:57:fe:4b:
         99:e0:b6:6c:cc:7a:a0:ec:4c:c3:23:fb:e4:1c:75:13:bd:c2:
         79:f8:42:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:59 2024 by rpki-client on console-fra.rpki-client.org