Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/e98cb8365bdef19cb080a34e44941d09ed79f549.roa
File:                     e98cb8365bdef19cb080a34e44941d09ed79f549.roa (raw, json)
Hash identifier:          ZkBy0VFsa3+HUJA4h7M0t+E/IQ3gcpR0PxCOr1n6JP8=
Subject key identifier:   9E:BD:63:95:C0:CF:FE:57:A0:D5:2D:6E:12:15:1B:00:CC:71:F8:7E
Certificate issuer:       /CN=96fbc1b8c542f9384f9a2004e66a61080248cdc6
Certificate serial:       157E6D
Authority key identifier: 08:13:39:09:AC:82:C2:8D:B1:37:8F:72:53:42:C9:9F:9F:8D:53:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96fbc1b8c542f9384f9a2004e66a61080248cdc6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/e98cb8365bdef19cb080a34e44941d09ed79f549.roa
Signing time:             Fri 18 Feb 2022 01:22:06 +0000
ROA not before:           Thu 17 Feb 2022 03:00:00 +0000
ROA not after:            Sat 17 Feb 2024 03:00:00 +0000
asID:                     27717
IP address blocks:        190.121.229.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1408621 (0x157e6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96fbc1b8c542f9384f9a2004e66a61080248cdc6
        Validity
            Not Before: Feb 17 03:00:00 2022 GMT
            Not After : Feb 17 03:00:00 2024 GMT
        Subject: CN=e98cb8365bdef19cb080a34e44941d09ed79f549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:10:b3:95:e8:da:6c:08:cd:a0:5b:44:72:a5:
                    87:87:83:c1:2c:65:7c:af:67:13:56:df:50:5f:06:
                    a8:82:1c:8b:02:25:2b:fa:4a:3d:49:07:f2:e1:29:
                    d6:58:d3:f7:44:cb:9f:f5:f1:49:38:eb:aa:4e:ac:
                    ec:f6:ad:3d:91:aa:14:27:2f:ba:74:dc:a2:b5:a2:
                    ae:bb:df:69:e4:ac:66:6e:42:34:ec:a0:de:f1:1c:
                    c0:9c:55:52:23:4f:98:06:1b:52:61:70:ee:f9:33:
                    cb:7b:26:28:15:ae:bb:d2:48:cd:09:e0:e8:3d:23:
                    fe:94:09:44:48:6e:0a:2f:80:bc:60:85:2e:87:f2:
                    66:76:8f:fc:72:4a:9f:db:9d:fc:2e:32:1d:0f:fa:
                    78:b3:64:fb:86:57:7a:00:d1:b5:aa:c1:bd:59:f9:
                    dc:9a:bd:4e:d5:57:54:4c:eb:6d:a5:d0:6a:0b:69:
                    9c:9a:31:db:bb:ce:12:a8:87:87:d0:e1:b0:e2:06:
                    e8:4d:9c:e2:10:8e:ea:93:5f:ae:4e:7b:f1:a4:34:
                    b7:f1:3d:c4:b1:34:83:94:c6:55:a5:2c:a7:37:4a:
                    48:34:86:ec:fe:8c:53:00:7a:48:db:20:a1:da:cf:
                    7b:d1:f1:58:6d:86:bf:3e:f8:43:fc:cb:27:b9:6a:
                    18:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:BD:63:95:C0:CF:FE:57:A0:D5:2D:6E:12:15:1B:00:CC:71:F8:7E
            X509v3 Authority Key Identifier:
                keyid:08:13:39:09:AC:82:C2:8D:B1:37:8F:72:53:42:C9:9F:9F:8D:53:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96fbc1b8c542f9384f9a2004e66a61080248cdc6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/e98cb8365bdef19cb080a34e44941d09ed79f549.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/96fbc1b8c542f9384f9a2004e66a61080248cdc6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:ed:fb:a4:dc:90:3c:3e:94:bc:18:d9:ce:8a:45:f3:3d:08:
         0f:23:1e:97:1e:3e:e0:fd:03:47:f4:1d:b6:b4:79:bc:85:44:
         d7:78:f7:34:35:dc:7f:b6:87:ec:7e:8b:e6:4f:db:27:d1:c0:
         08:02:3e:63:24:aa:5e:b6:e6:2c:b6:23:b3:ee:88:a5:42:ed:
         a0:7d:d3:ad:3a:49:3f:34:e4:6e:8f:a3:1e:fa:01:5f:e3:66:
         93:15:2d:7b:67:46:ba:52:bd:2f:07:3d:79:6d:7b:42:4a:36:
         84:52:65:3d:aa:49:a9:38:81:db:11:55:85:e5:a9:c8:80:60:
         0b:5e:56:5f:73:c3:b8:9f:cd:f5:ec:43:65:b8:e8:2e:6b:d5:
         af:fd:88:c4:b7:c6:22:1f:30:1c:a2:86:c5:29:b2:01:f5:84:
         d1:b5:ec:58:d5:6a:ab:ab:68:ed:29:60:d5:98:cd:08:2d:7d:
         53:0c:a1:e2:70:26:20:07:c1:d9:62:c4:dd:e5:34:00:5f:a0:
         b6:ac:d3:38:08:1f:e7:44:91:64:35:9e:7c:61:ba:28:8a:65:
         37:84:a6:40:ef:c1:4a:50:33:6d:e2:10:dd:b8:68:65:ca:37:
         b8:56:dd:45:72:0f:15:66:1e:c0:8b:6f:44:ec:c9:52:97:29:
         0e:65:47:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:43 2024 by rpki-client on console-fra.rpki-client.org