Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/93911a201f320015f9191eac693d1a9a12ae0a69.roa
File:                     93911a201f320015f9191eac693d1a9a12ae0a69.roa (raw, json)
Hash identifier:          ygnrpJ2M/HjQ3TVvd3XutSofQbuqe3jp1ZofbsX39HQ=
Subject key identifier:   64:3E:22:30:34:3F:1E:F4:81:60:3A:FF:F2:62:26:6F:75:B2:6F:60
Certificate issuer:       /CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
Certificate serial:       2E8DFF
Authority key identifier: FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/93911a201f320015f9191eac693d1a9a12ae0a69.roa
Signing time:             Thu 07 Dec 2023 13:01:49 +0000
ROA not before:           Thu 07 Dec 2023 13:00:46 +0000
ROA not after:            Thu 07 Dec 2028 13:00:46 +0000
asID:                     52323
IP address blocks:        190.225.164.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3051007 (0x2e8dff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
        Validity
            Not Before: Dec  7 13:00:46 2023 GMT
            Not After : Dec  7 13:00:46 2028 GMT
        Subject: CN=93911a201f320015f9191eac693d1a9a12ae0a69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:40:74:20:a4:1d:3e:96:a8:94:ed:a8:61:51:
                    77:ab:92:de:57:71:8b:f3:d2:9e:74:14:57:86:22:
                    95:64:87:4a:35:31:5b:43:0d:ea:7d:da:4a:dd:9f:
                    2b:68:a0:1c:af:59:81:0f:5e:e7:f5:e7:91:8e:3f:
                    75:7a:3a:03:82:13:49:81:1f:f0:81:ae:13:33:ef:
                    15:e0:3d:ef:8f:8f:52:10:08:22:a3:65:53:50:39:
                    b9:f6:f7:49:2b:8e:86:a3:5e:8c:06:4a:34:c6:c6:
                    c0:e1:b2:ae:9e:06:4c:ef:19:63:99:43:8d:00:14:
                    06:a9:ba:f8:27:c1:40:da:e6:cd:48:46:fb:12:8e:
                    dd:f9:2f:81:30:54:b2:6b:49:b5:d2:d3:6e:af:cd:
                    f8:50:72:74:94:22:17:e9:05:05:9b:8e:03:95:15:
                    74:24:2f:ec:d5:4c:9d:8d:23:37:37:22:19:d3:54:
                    23:ee:2a:cc:e0:70:58:b1:56:56:23:a3:1e:d6:2f:
                    4f:fd:fc:7f:d5:08:74:26:9b:c4:af:50:09:83:99:
                    cc:eb:dd:b6:fe:b5:97:29:92:e6:cb:9f:59:8d:48:
                    20:bb:3b:b6:13:7c:a4:8e:2e:5d:24:bf:85:f1:52:
                    96:e3:45:e8:8d:cd:94:ea:92:30:bd:b4:93:48:8e:
                    96:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:3E:22:30:34:3F:1E:F4:81:60:3A:FF:F2:62:26:6F:75:B2:6F:60
            X509v3 Authority Key Identifier:
                keyid:FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/93911a201f320015f9191eac693d1a9a12ae0a69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c974409d0c2a70c921dd685e863e9f00cb1e262a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.225.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:2b:c9:43:de:47:29:96:df:26:ef:72:9f:82:48:cf:36:52:
         3b:34:d9:f9:3e:58:a7:67:0b:8a:80:1b:d5:6e:ab:d3:98:43:
         44:a3:52:d4:e3:46:9d:ea:70:f5:84:b8:54:d9:81:7c:64:22:
         d0:c9:73:55:07:ac:a2:dd:3b:a4:d2:06:70:0e:42:74:28:cd:
         f7:10:cb:ad:cd:a0:4f:0d:61:1f:10:e9:16:86:73:2d:4a:a6:
         d0:f1:b0:3c:77:ab:65:87:27:23:7f:8b:81:e0:56:be:4d:f6:
         9c:64:09:f8:16:cb:1d:bf:68:b5:0c:1b:46:f9:23:31:f2:87:
         68:37:97:ed:be:e2:5a:4d:d6:ec:a7:34:9a:19:3d:bf:a5:91:
         52:84:33:31:d2:5f:ce:ae:d2:2d:eb:00:20:f4:ac:47:9d:fa:
         5e:d3:12:25:fc:72:08:3a:f6:12:67:0b:4f:81:bd:bb:e2:63:
         1a:f1:d0:5f:7d:34:8e:1a:2c:4f:58:69:6d:be:54:29:ec:e4:
         c9:66:0b:66:19:00:aa:73:3f:78:e7:cc:5a:2d:f4:57:2d:60:
         3e:fe:0e:a7:99:da:52:75:c1:f8:1c:31:64:cd:56:7b:64:ab:
         b4:3f:5b:f5:4f:90:7f:db:fd:75:1a:30:15:ba:ca:e4:3e:a7:
         b9:bc:e7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:33 2024 by rpki-client on console-ams.rpki-client.org