Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/92f499c5d1670badd9af220699c207c6296a1d15.roa
File:                     92f499c5d1670badd9af220699c207c6296a1d15.roa (raw, json)
Hash identifier:          Vsg//DORK/prSkRn6+VJJSt15JizBEkb3unROWULrMo=
Subject key identifier:   5D:6E:5F:52:21:62:34:9D:40:2C:35:48:CF:49:E0:F9:FC:CC:AA:50
Certificate issuer:       /CN=e96ad0760fe41dfa57b0ded382e54d4a9f8cba25
Certificate serial:       0B79D2
Authority key identifier: A8:D7:AF:27:9E:5F:AB:1A:CC:05:3B:0A:62:16:4E:DE:C8:24:FA:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e96ad0760fe41dfa57b0ded382e54d4a9f8cba25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/92f499c5d1670badd9af220699c207c6296a1d15.roa
Signing time:             Wed 01 Jun 2022 22:17:44 +0000
ROA not before:           Fri 26 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     269905
IP address blocks:        190.112.169.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 752082 (0xb79d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96ad0760fe41dfa57b0ded382e54d4a9f8cba25
        Validity
            Not Before: Mar 26 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=92f499c5d1670badd9af220699c207c6296a1d15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e1:8a:20:95:bf:96:16:d9:7b:58:b5:68:7f:
                    52:e7:f2:49:24:99:0d:c1:d6:01:ef:80:79:c7:78:
                    d5:b5:0b:e6:c8:d3:1c:5d:82:1a:76:e0:4c:e6:ec:
                    51:be:76:c8:20:d8:9a:21:91:6d:90:e3:55:8f:13:
                    9b:bd:b6:36:35:ec:b4:8b:ad:f8:cb:f1:43:29:dc:
                    fc:51:61:f1:9f:c6:74:96:f2:96:66:1a:cb:6b:20:
                    72:45:f5:de:77:a7:8f:be:73:5d:5c:52:f5:d8:2a:
                    77:3d:5e:e3:a2:41:12:9d:be:4c:c2:d6:24:8d:a9:
                    bb:96:46:28:d0:a1:b7:f4:cc:a5:67:15:09:98:79:
                    7d:79:9f:35:12:c2:47:85:0f:bb:29:5a:ec:ba:10:
                    b4:f5:0b:aa:f5:80:10:a5:1b:02:22:43:d1:a8:02:
                    37:cc:a9:3e:65:4d:2d:0f:55:45:f7:f9:2f:45:09:
                    89:81:1b:94:cd:13:eb:1c:73:e2:83:98:62:97:9a:
                    19:45:d8:fc:12:bb:cd:15:5a:57:ca:d2:25:ae:0e:
                    07:89:75:11:c3:fa:27:04:d2:e1:5a:d3:b6:9e:23:
                    89:88:fe:06:02:da:4e:c5:b9:98:a5:fa:71:22:23:
                    d7:7b:70:3c:3c:c7:38:20:5c:ae:e6:0f:75:dd:51:
                    bd:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:6E:5F:52:21:62:34:9D:40:2C:35:48:CF:49:E0:F9:FC:CC:AA:50
            X509v3 Authority Key Identifier:
                keyid:A8:D7:AF:27:9E:5F:AB:1A:CC:05:3B:0A:62:16:4E:DE:C8:24:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e96ad0760fe41dfa57b0ded382e54d4a9f8cba25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/92f499c5d1670badd9af220699c207c6296a1d15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/e96ad0760fe41dfa57b0ded382e54d4a9f8cba25.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:44:b4:b8:25:1e:53:53:2d:3c:6d:37:95:17:ba:e5:90:41:
         1a:75:c0:73:21:fe:f6:8d:06:29:c5:0c:d8:4a:80:db:76:d2:
         2d:a4:5f:d9:94:ba:0f:40:3c:ad:07:04:32:e0:5f:13:ed:e1:
         00:c9:95:2a:8f:12:52:33:fd:da:79:95:d5:be:02:aa:8a:9e:
         0f:6f:82:c0:da:68:49:4e:55:9d:b4:d6:7d:e5:e3:2a:5d:dc:
         a1:ee:2d:1b:58:84:81:05:b1:3a:b0:30:f6:7a:00:f1:b7:18:
         60:46:e3:e7:ef:5f:b6:00:d4:a7:5b:08:b9:cb:79:51:77:20:
         06:d3:29:47:b7:1e:77:14:f0:ea:aa:48:a0:6c:79:2c:f6:72:
         ca:2b:65:bf:5a:3a:8e:5a:67:50:12:ca:44:43:e7:48:9b:c0:
         fb:eb:9d:fe:3c:a0:1d:ae:b0:c3:4a:fc:99:bb:bf:de:6f:17:
         21:68:f0:30:69:c9:99:ed:97:10:0f:f1:0b:b7:2f:c3:a1:bb:
         6f:b2:d3:d9:a4:07:f2:07:06:0b:73:ec:47:a3:f7:70:24:c2:
         02:8a:3a:7f:ab:35:69:15:17:83:ce:18:7b:b4:df:30:f2:33:
         7a:90:0f:94:4e:0f:79:84:b4:f7:81:f0:8b:6e:c2:7c:c8:52:
         c0:8a:c7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:15 2023 by rpki-client on console-fra.rpki-client.org