Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/24af4045-a14a-4613-a192-b83b40149cef/ae7ba1f47ebceb6a753e429d8989b08fb2dee6b6.roa
File:                     ae7ba1f47ebceb6a753e429d8989b08fb2dee6b6.roa (raw, json)
Hash identifier:          K0otEv+uznRuULx/bKZ5skuXAwGw4+e2gzBCN7csdiU=
Subject key identifier:   2D:FD:DB:91:AC:DD:F2:0B:A2:C1:BB:83:66:47:EC:BF:15:A8:02:68
Certificate issuer:       /CN=947e70d24d7c2abf8f701b48a1dcf062059b2bbe
Certificate serial:       E1C5
Authority key identifier: 95:58:64:58:FF:08:E5:CA:A4:BE:E1:05:FA:35:D8:43:8A:E8:35:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/947e70d24d7c2abf8f701b48a1dcf062059b2bbe.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/24af4045-a14a-4613-a192-b83b40149cef/ae7ba1f47ebceb6a753e429d8989b08fb2dee6b6.roa
Signing time:             Sun 14 May 2023 02:29:17 +0000
ROA not before:           Sat 13 May 2023 02:29:17 +0000
ROA not after:            Wed 14 May 2025 02:29:17 +0000
asID:                     269931
IP address blocks:        190.110.35.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57797 (0xe1c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=947e70d24d7c2abf8f701b48a1dcf062059b2bbe
        Validity
            Not Before: May 13 02:29:17 2023 GMT
            Not After : May 14 02:29:17 2025 GMT
        Subject: CN=ae7ba1f47ebceb6a753e429d8989b08fb2dee6b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4a:7c:1c:12:ee:7f:5f:47:f6:00:52:6d:06:
                    e0:8c:26:0a:d8:3f:19:8e:5a:62:d1:16:24:5f:53:
                    7d:7a:1e:0e:e6:e0:8e:99:21:eb:42:92:43:92:c2:
                    ed:7e:8b:94:2b:2c:74:52:9f:cf:da:36:aa:bc:dc:
                    45:2d:b3:53:c6:8a:99:3f:af:30:ed:5d:7e:38:ce:
                    f1:92:c4:b5:79:ea:3b:e0:f1:c6:3f:94:12:ae:62:
                    46:3f:72:f9:c5:b9:10:ab:1e:97:b0:f4:39:77:29:
                    82:65:40:8f:f1:97:b8:e8:08:e6:c5:43:ec:cf:1b:
                    c0:e4:a2:0d:b2:42:ac:84:45:86:9f:f5:72:86:72:
                    0d:7e:d4:52:80:1b:c7:d0:e4:ab:83:b4:c7:c1:ed:
                    6a:92:2a:7b:67:4c:4f:9b:bd:37:82:f8:56:5d:6d:
                    bd:63:5c:e8:f8:07:86:63:c0:bb:34:c6:42:92:d7:
                    ef:4c:9f:a6:c6:ef:9c:00:52:ca:c2:17:43:be:06:
                    e0:30:00:b4:c1:d0:18:a2:79:2b:8b:bf:8f:0f:31:
                    a9:fa:78:66:d8:d3:c5:1f:d3:1b:e4:e3:d9:c0:77:
                    2b:e4:66:04:0a:16:2e:59:cf:d4:d1:b0:d2:42:1e:
                    02:3d:d8:6a:86:51:5b:db:25:9b:e2:64:73:fd:16:
                    20:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:FD:DB:91:AC:DD:F2:0B:A2:C1:BB:83:66:47:EC:BF:15:A8:02:68
            X509v3 Authority Key Identifier:
                keyid:95:58:64:58:FF:08:E5:CA:A4:BE:E1:05:FA:35:D8:43:8A:E8:35:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/947e70d24d7c2abf8f701b48a1dcf062059b2bbe.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/24af4045-a14a-4613-a192-b83b40149cef/ae7ba1f47ebceb6a753e429d8989b08fb2dee6b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/24af4045-a14a-4613-a192-b83b40149cef/947e70d24d7c2abf8f701b48a1dcf062059b2bbe.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:f9:f0:aa:be:bb:6c:05:5b:e1:07:7d:a7:e2:1a:f7:04:ae:
         cb:33:e8:56:ed:64:d8:e5:64:52:e5:cf:93:d2:94:f2:0a:a5:
         0c:aa:5f:88:23:b5:91:71:77:f8:43:22:bf:c7:69:66:9b:0c:
         a7:96:78:26:eb:75:d4:27:3d:14:4d:dc:18:b6:6b:f7:77:0c:
         92:d6:f2:b1:50:98:ee:74:e3:4c:0b:56:7f:3a:85:9d:5e:49:
         5b:8d:5b:1c:2b:1d:99:77:3d:26:f3:ea:47:f1:36:8f:ae:a0:
         8e:d0:3b:e9:ab:44:29:85:b8:ce:dc:a5:ae:73:27:68:e9:58:
         31:5d:ea:05:4b:4b:a6:a7:2c:9c:b2:f6:7a:74:33:a1:39:0b:
         4f:c3:1d:29:af:1e:2e:98:a7:65:e4:16:af:6b:7e:b7:4f:52:
         a7:56:a7:42:54:35:9d:17:20:e0:56:e7:a0:7a:a5:50:30:d2:
         a3:22:b9:9c:f1:36:0e:f2:cf:89:2e:c4:da:99:aa:aa:21:81:
         67:3f:a8:ee:b8:ab:64:3e:a2:bc:13:c3:36:b7:6b:09:bd:00:
         a6:79:42:d7:04:ba:41:eb:8b:a2:4e:dc:ab:02:66:72:a6:05:
         26:22:51:8b:e8:b5:ad:ee:df:01:ea:1a:a0:3a:61:df:79:b4:
         f7:f8:71:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:04 2024 by rpki-client on console-ams.rpki-client.org