Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/e10f14c1fc380f1167bd32bdf46fdc2448a55179.roa
File:                     e10f14c1fc380f1167bd32bdf46fdc2448a55179.roa (raw, json)
Hash identifier:          khNuub/kHfxLtQgc3JN1fYgwPZiABtcZqrT8nwx5Fzk=
Subject key identifier:   C8:CC:D9:57:E3:8E:73:A6:F8:FC:7A:33:2D:D1:28:53:E7:E3:72:06
Certificate issuer:       /CN=a68aca945e5b4e0fa575bbe03b1af65146ef0b6f
Certificate serial:       209134
Authority key identifier: 5C:50:E5:03:69:FD:9F:99:A6:92:F6:88:B9:62:BC:77:AC:8A:A9:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a68aca945e5b4e0fa575bbe03b1af65146ef0b6f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/e10f14c1fc380f1167bd32bdf46fdc2448a55179.roa
Signing time:             Fri 12 May 2023 19:37:24 +0000
ROA not before:           Thu 11 May 2023 19:37:23 +0000
ROA not after:            Mon 12 May 2025 19:37:23 +0000
asID:                     10620
IP address blocks:        191.71.128.0/17 maxlen: 24
                          191.71.0.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2134324 (0x209134)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a68aca945e5b4e0fa575bbe03b1af65146ef0b6f
        Validity
            Not Before: May 11 19:37:23 2023 GMT
            Not After : May 12 19:37:23 2025 GMT
        Subject: CN=e10f14c1fc380f1167bd32bdf46fdc2448a55179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:09:3b:2e:11:fe:09:4f:40:3e:fe:4b:1a:d8:
                    59:82:b2:da:33:ab:c1:51:11:51:b9:c4:15:4f:6a:
                    8e:e4:db:3b:50:c2:23:e7:10:64:7e:da:e2:13:42:
                    57:28:71:b3:5a:d8:c1:0e:38:75:b3:14:10:a5:6e:
                    fc:68:27:aa:fa:86:c0:94:cc:13:45:6f:b7:23:67:
                    a8:c8:18:95:43:3c:09:38:2b:a1:e1:10:a2:65:82:
                    e5:48:42:35:ee:da:9a:68:49:50:a1:b0:31:8f:6d:
                    4d:df:8b:d8:44:6b:9e:ae:d6:a4:e7:bf:42:af:4f:
                    4f:3e:14:02:81:d6:83:83:80:0a:6b:00:61:b7:5c:
                    6a:22:b8:af:f9:89:4a:4a:52:ad:3a:4e:79:fb:ee:
                    a6:fe:b8:8f:ce:7e:a5:b1:f5:97:26:82:ed:82:3a:
                    ee:2f:4f:61:5c:8a:a6:e3:74:3c:53:33:85:bf:e5:
                    47:78:ed:69:5a:a9:86:74:f6:f1:2f:98:e9:bd:62:
                    53:2e:a8:ea:34:dc:7c:29:aa:70:5a:f4:e1:df:72:
                    e9:fd:2c:0f:20:e8:03:f7:4d:97:a8:98:1b:12:1f:
                    73:f5:ca:92:0b:28:6c:59:1c:21:52:91:6d:c4:c0:
                    84:51:9a:9a:87:68:91:22:43:71:79:a8:9d:88:51:
                    34:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:CC:D9:57:E3:8E:73:A6:F8:FC:7A:33:2D:D1:28:53:E7:E3:72:06
            X509v3 Authority Key Identifier:
                keyid:5C:50:E5:03:69:FD:9F:99:A6:92:F6:88:B9:62:BC:77:AC:8A:A9:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a68aca945e5b4e0fa575bbe03b1af65146ef0b6f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/e10f14c1fc380f1167bd32bdf46fdc2448a55179.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/a68aca945e5b4e0fa575bbe03b1af65146ef0b6f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.71.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2b:10:25:65:bb:a3:d1:3a:80:48:d0:12:01:98:ba:a7:57:e4:
         39:fd:b8:a6:fb:ac:9c:bc:71:d0:4b:d4:eb:d5:dc:2f:e0:69:
         03:0e:32:79:18:49:b3:38:2e:a7:a0:dd:7b:90:f6:34:5e:eb:
         af:fe:6d:11:75:51:12:12:8f:d5:14:a3:6f:88:d6:b7:55:58:
         81:a4:86:08:c7:b3:df:b5:f0:64:0d:4e:f5:20:93:c8:e2:44:
         c5:d0:dd:13:09:20:54:96:82:26:3d:ad:23:5d:cf:a8:43:bb:
         4a:c0:7f:71:84:76:51:0a:b7:76:39:6f:3b:10:43:7a:85:52:
         75:99:0a:39:fd:98:ea:d5:b5:c5:11:42:93:fe:30:7c:4e:80:
         31:4f:a3:c5:82:25:7c:a8:ec:76:35:de:d3:02:a3:71:08:fb:
         2a:3d:e2:f9:39:7f:d8:2d:95:a3:a8:c4:4d:94:b5:32:cd:a6:
         0b:54:98:6a:4b:2e:de:fe:b2:be:8a:1e:dc:c5:ef:a7:e4:37:
         e2:11:17:c6:a1:ca:c3:34:ba:76:27:c9:da:0d:bf:da:51:b5:
         33:7e:23:cd:c6:42:82:db:9b:20:45:79:98:86:b3:e1:95:76:
         6a:41:4d:fa:f7:a5:7d:a5:91:56:86:39:ab:da:69:91:5a:fd:
         e5:f6:06:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:02 2024 by rpki-client on console-fra.rpki-client.org