Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/93176f59df3c70747c40b45bcd84cd2a5f1f75d7.roa
File:                     93176f59df3c70747c40b45bcd84cd2a5f1f75d7.roa (raw, json)
Hash identifier:          8TvduGSwGJ77C3tR5sraPpXY1BfrPeJUWG4jxCKkKTY=
Subject key identifier:   C7:B2:2F:7E:14:0D:E0:82:DD:34:AA:14:48:E5:ED:62:0D:0A:41:6D
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       0B93F2
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/93176f59df3c70747c40b45bcd84cd2a5f1f75d7.roa
Signing time:             Wed 21 Jul 2021 20:56:05 +0000
ROA not before:           Wed 21 Jul 2021 03:00:00 +0000
ROA not after:            Fri 21 Jul 2023 03:00:00 +0000
asID:                     267809
IP address blocks:        191.96.231.0/24 maxlen: 24
                          191.101.25.0/24 maxlen: 24
                          191.101.27.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 758770 (0xb93f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Jul 21 03:00:00 2021 GMT
            Not After : Jul 21 03:00:00 2023 GMT
        Subject: CN=93176f59df3c70747c40b45bcd84cd2a5f1f75d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3e:c8:0c:78:4e:34:d6:99:26:81:82:a7:0c:
                    08:b3:c2:53:92:70:06:e8:ec:b0:84:0b:b6:df:83:
                    c9:a1:4d:2b:50:1c:4d:ba:f3:0d:67:39:ee:3d:4a:
                    bd:6a:bc:e7:7e:cc:8e:3d:ab:37:47:fc:2d:88:56:
                    ff:88:ae:df:37:46:a1:47:78:bd:27:39:f3:30:cd:
                    25:36:b1:ed:b9:6d:21:9c:3b:f8:24:d0:f6:f3:a5:
                    fa:ae:e1:41:d9:f5:8a:03:70:b8:b8:ef:63:5c:c3:
                    c8:20:17:10:30:f8:97:81:dc:06:e4:ac:2f:bf:0f:
                    cb:bc:78:9b:de:26:d8:32:a0:8f:da:0b:bb:6e:e7:
                    d5:35:25:04:65:30:fc:2e:a4:95:8b:e2:8d:4c:14:
                    12:ec:f7:f5:0c:29:64:c3:f5:c6:c4:14:55:38:a3:
                    17:de:28:62:71:c8:fe:4d:ae:12:93:16:23:20:d3:
                    99:3b:c1:33:20:33:8e:2c:82:51:22:91:53:78:23:
                    89:b6:47:63:20:59:d6:b9:99:79:50:3e:04:a6:01:
                    0c:fc:b7:97:6c:ec:f6:29:70:0d:92:80:26:35:00:
                    78:4c:9e:36:95:23:14:5c:7c:a0:6c:cd:b6:16:40:
                    11:51:a6:86:d8:2c:c1:73:4a:87:1b:7f:2b:8b:06:
                    ee:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B2:2F:7E:14:0D:E0:82:DD:34:AA:14:48:E5:ED:62:0D:0A:41:6D
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/93176f59df3c70747c40b45bcd84cd2a5f1f75d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.231.0/24
                  191.101.25.0/24
                  191.101.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:9c:29:90:e2:60:08:66:78:09:71:8e:8f:37:a5:d2:f5:40:
         b0:2b:99:7f:21:35:f9:8a:4e:2d:29:07:f1:ce:be:52:33:5d:
         2b:bd:78:a7:a5:37:77:57:37:a6:83:92:a9:3b:13:43:33:b1:
         74:b6:d3:e7:6a:04:e2:b7:90:0c:4b:64:9f:1b:80:b7:4c:56:
         ac:53:76:b7:97:81:62:4a:d6:01:92:26:e0:91:52:34:92:b2:
         68:d3:e6:e2:c2:23:f7:1a:99:0e:39:ff:99:c3:a4:32:e4:4e:
         2e:fa:81:f1:db:fa:0e:2b:cb:06:bf:32:48:c2:56:58:b6:29:
         57:4a:52:5e:7b:c7:83:a7:73:e5:a0:f3:54:35:bf:ba:d4:4f:
         2d:e3:7f:4c:4b:93:72:b9:cd:f5:ee:42:be:11:5e:e4:6c:f5:
         11:c5:62:8b:bf:75:83:4f:3b:45:ae:5e:25:8a:48:65:bd:56:
         e8:18:9d:85:d1:c2:77:6a:a9:39:dd:c7:51:fc:7b:3c:37:83:
         58:33:ee:6e:4d:0a:6f:66:4e:b0:4f:2e:ac:8a:03:0e:3c:64:
         92:1f:84:23:e9:89:c2:a5:df:16:03:a3:83:d2:b1:46:23:d7:
         4e:ee:d9:f1:80:13:fe:18:4f:a0:11:b7:1a:e4:a2:ec:e1:6e:
         3d:19:b5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org