Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/24361422-166f-49fb-976e-6e90747a9a46/a1b14a363b0ca32fce7f8e4936db2a5a1f3e80bb.roa
File:                     a1b14a363b0ca32fce7f8e4936db2a5a1f3e80bb.roa (raw, json)
Hash identifier:          MuALz63C6UCMuEtKdIh5QZ1a/CD6zShrBSxxLdMpKMI=
Subject key identifier:   4E:31:1F:FE:1E:6E:A8:1B:9F:73:31:85:D7:3D:A7:51:D1:EF:A1:D4
Certificate issuer:       /CN=2844fc34dad2e9ab1b8d792185500633344de91d
Certificate serial:       23D66F
Authority key identifier: 5A:ED:9A:44:DA:EC:34:1F:B6:EE:38:B4:11:CB:32:2C:77:51:CB:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2844fc34dad2e9ab1b8d792185500633344de91d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/24361422-166f-49fb-976e-6e90747a9a46/a1b14a363b0ca32fce7f8e4936db2a5a1f3e80bb.roa
Signing time:             Thu 07 Sep 2023 17:50:04 +0000
ROA not before:           Wed 06 Sep 2023 17:50:04 +0000
ROA not after:            Sun 07 Sep 2025 17:50:04 +0000
asID:                     28100
IP address blocks:        190.120.96.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2348655 (0x23d66f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2844fc34dad2e9ab1b8d792185500633344de91d
        Validity
            Not Before: Sep  6 17:50:04 2023 GMT
            Not After : Sep  7 17:50:04 2025 GMT
        Subject: CN=a1b14a363b0ca32fce7f8e4936db2a5a1f3e80bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:eb:fe:b7:5a:3f:ad:d7:14:5e:dd:1f:44:8b:
                    47:6c:28:64:0f:85:80:91:44:34:5a:bd:fa:cb:f2:
                    91:0c:12:e0:df:b6:20:a5:2e:85:b2:0d:0a:5a:d1:
                    a0:cb:2e:19:49:39:c1:16:9c:09:7e:43:22:a5:b5:
                    87:ea:9f:e6:90:22:d4:e7:d4:ab:a3:83:d0:8b:5d:
                    3f:a4:d7:eb:2a:ec:7b:00:2e:4c:fb:2b:51:7d:e6:
                    bc:e7:3e:07:0b:bd:e4:59:f7:bd:b0:52:48:f9:26:
                    74:8d:34:6f:3b:d1:c7:4d:a6:9f:3e:3b:16:00:9c:
                    25:6a:9a:08:0c:24:d1:b0:36:8e:05:54:78:8c:f5:
                    80:13:01:66:ca:10:96:c1:69:94:14:31:c0:9d:57:
                    96:5b:65:73:14:3f:cc:68:6a:b0:95:7e:eb:ef:87:
                    f8:a1:0f:b4:a8:a9:8b:a5:7f:2c:2c:85:3f:c9:ab:
                    32:d5:a7:a4:f5:31:f2:75:95:20:82:d1:44:c9:c7:
                    27:82:fc:e5:db:7f:e4:76:ed:50:0f:94:ad:3b:51:
                    fc:11:d6:2d:35:cf:ac:30:22:6a:67:7d:60:92:1c:
                    b0:6a:2c:6e:a0:ec:84:89:a9:a8:14:2a:24:f9:50:
                    92:ac:54:f6:32:11:c5:29:59:89:a5:d1:a0:db:ce:
                    72:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:31:1F:FE:1E:6E:A8:1B:9F:73:31:85:D7:3D:A7:51:D1:EF:A1:D4
            X509v3 Authority Key Identifier:
                keyid:5A:ED:9A:44:DA:EC:34:1F:B6:EE:38:B4:11:CB:32:2C:77:51:CB:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2844fc34dad2e9ab1b8d792185500633344de91d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/24361422-166f-49fb-976e-6e90747a9a46/a1b14a363b0ca32fce7f8e4936db2a5a1f3e80bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/24361422-166f-49fb-976e-6e90747a9a46/2844fc34dad2e9ab1b8d792185500633344de91d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.120.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         81:26:9a:40:1f:20:09:73:75:93:04:0e:a7:ff:aa:e5:51:8d:
         b6:55:ac:bd:5d:10:49:c1:75:43:ec:fc:4e:16:ce:0e:7b:89:
         08:e9:db:a7:2a:ce:2e:ac:70:61:83:82:fb:c6:c0:e9:47:9a:
         6f:2f:e1:ad:87:1f:45:2e:9e:15:d9:40:9a:40:b7:b9:84:91:
         76:39:d7:de:90:61:39:2f:ef:aa:71:0c:97:fa:3b:c6:6a:d3:
         ac:79:3a:59:96:ac:2e:17:55:1a:7b:e8:98:4e:e2:11:bb:4d:
         d4:20:e9:0a:9e:56:9a:99:e2:cc:45:66:66:a2:99:c2:c5:47:
         0a:2d:c0:51:49:76:77:58:09:00:ec:23:e2:4d:aa:e5:c8:ac:
         59:09:f5:93:20:2f:eb:0e:f5:02:3b:ed:c4:a7:e7:1d:77:fa:
         f0:6e:89:59:3d:4a:1b:af:45:be:80:4a:21:8f:99:d3:02:ee:
         3b:08:84:6f:33:5c:e9:77:53:0d:9b:55:fa:9d:ff:59:32:ff:
         60:54:e0:fb:87:39:52:36:fd:2e:3a:dc:8d:1c:f2:f7:6a:ab:
         58:b0:b6:da:3f:3b:66:2f:aa:23:53:87:46:13:9c:62:01:db:
         99:f5:6e:9e:8a:30:6c:98:3e:42:d8:cb:73:81:20:3f:e4:9a:
         d7:77:6a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:18 2024 by rpki-client on console-ams.rpki-client.org