Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/7d9d250dd4813f876b4aed224be4a90808260585.roa
File:                     7d9d250dd4813f876b4aed224be4a90808260585.roa (raw, json)
Hash identifier:          DQSKCi5YJMkzpUR0oI4NB7NVlZZa6BOteW+X4yxixFY=
Subject key identifier:   C4:E2:76:71:78:BE:6C:E3:3E:B2:97:99:12:D8:4C:E8:7A:FE:30:79
Certificate issuer:       /CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
Certificate serial:       2A6B1B
Authority key identifier: FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/7d9d250dd4813f876b4aed224be4a90808260585.roa
Signing time:             Wed 14 Feb 2024 13:39:51 +0000
ROA not before:           Wed 14 Feb 2024 13:39:34 +0000
ROA not after:            Wed 14 Feb 2029 13:39:34 +0000
asID:                     272460
IP address blocks:        190.93.86.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2779931 (0x2a6b1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
        Validity
            Not Before: Feb 14 13:39:34 2024 GMT
            Not After : Feb 14 13:39:34 2029 GMT
        Subject: CN=7d9d250dd4813f876b4aed224be4a90808260585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:69:9a:52:67:ef:ce:b0:c1:c2:ad:91:74:68:
                    c3:f7:6d:cc:7c:7b:79:aa:e1:e4:33:4c:39:95:d2:
                    46:f0:77:9d:45:f6:90:cd:0c:f5:ff:3b:32:d7:55:
                    b1:76:33:15:32:c3:55:5d:c5:9c:3b:f9:76:61:2e:
                    57:d2:44:c7:cb:6b:a3:0a:76:f3:38:c9:4a:a8:7f:
                    cb:42:42:78:b6:8e:ab:cb:df:f6:f5:f4:e5:3f:24:
                    7c:0f:12:f7:e2:80:c0:27:a2:16:5d:c6:c8:a6:b0:
                    1a:f2:21:c4:74:87:a0:96:47:e4:8c:ef:13:29:85:
                    0d:4d:b6:25:ed:cf:9a:f3:5f:64:33:1e:4d:2f:59:
                    c5:39:d4:6e:6c:52:96:e6:dc:0f:38:85:44:05:b5:
                    ee:57:c0:ac:39:04:28:3d:09:54:bb:43:d6:47:f5:
                    7f:33:55:19:2b:db:e6:8b:7a:e0:e5:48:b2:0b:e2:
                    d6:db:91:00:36:86:e9:ef:5c:1e:67:3c:ca:87:90:
                    d2:0d:62:81:80:96:55:5f:30:12:1e:82:94:2d:57:
                    55:0f:76:a3:11:3c:9a:e9:50:91:63:c3:cf:7d:fb:
                    a5:ab:94:83:3d:19:1d:eb:96:66:39:7d:4d:c2:58:
                    f5:93:34:a7:fa:52:c2:29:d8:a9:dd:12:b2:5a:16:
                    27:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:E2:76:71:78:BE:6C:E3:3E:B2:97:99:12:D8:4C:E8:7A:FE:30:79
            X509v3 Authority Key Identifier:
                keyid:FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/7d9d250dd4813f876b4aed224be4a90808260585.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:4b:0d:62:ea:ce:ea:ea:92:4c:89:54:f1:01:ee:8c:6b:5c:
         b5:48:0f:02:ea:d4:48:8c:4b:89:71:76:3f:7d:ca:fb:c0:d3:
         34:f1:ff:6b:2c:ec:f7:83:0e:92:9e:80:a1:68:86:52:0f:93:
         3d:9e:35:97:72:24:dd:b5:97:d3:81:5e:65:19:bd:08:a1:a6:
         56:ff:d6:11:f2:65:94:49:a5:4f:b1:c8:c2:f7:7e:5d:4c:e1:
         56:30:b5:46:6e:f4:3b:1a:4e:33:18:15:9a:c0:6a:e0:77:55:
         44:48:f7:42:09:bc:fd:95:eb:5d:61:3a:0d:27:46:e4:f9:1b:
         38:28:43:9e:71:a2:53:0c:7d:e4:dd:01:8f:59:5d:56:e2:4a:
         82:ef:5a:e6:83:0c:79:06:0b:6a:cd:9d:36:31:ca:a8:a9:34:
         2d:3b:ff:56:41:3d:b0:d1:4f:ea:88:eb:49:03:15:c9:dc:1e:
         6b:31:cf:5e:4d:d6:b9:22:60:ec:88:5e:31:74:e3:12:2a:47:
         10:a2:87:64:e0:4a:09:35:32:14:57:63:f1:5b:c7:07:08:c4:
         8b:69:94:53:60:36:f4:3c:30:33:b9:e9:70:25:86:3e:d7:d5:
         99:58:da:a6:9c:d5:85:96:f5:5f:49:3b:87:35:f5:c5:bd:c8:
         24:92:74:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-ams.rpki-client.org