Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5e41f8e0-767b-4f81-8908-a853d15adc64/a9c1d9693433b4a7086b5d33e2c5332ae4ab4a25.roa
File:                     a9c1d9693433b4a7086b5d33e2c5332ae4ab4a25.roa (raw, json)
Hash identifier:          yAGfvbdMjawsA1tlw7kgZ2DHGAbAlvjt4LLw8MeHtMc=
Subject key identifier:   8C:6D:60:F6:9B:B0:6E:0F:9A:62:1D:B7:D7:57:8C:88:D2:09:3F:5A
Certificate issuer:       /CN=632e9a2ff72a8398731612b91d77d2040365c4a2
Certificate serial:       077934
Authority key identifier: 5D:2B:36:FF:65:7C:14:4D:98:23:0E:ED:9B:0E:07:38:4F:8A:8F:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/632e9a2ff72a8398731612b91d77d2040365c4a2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5e41f8e0-767b-4f81-8908-a853d15adc64/a9c1d9693433b4a7086b5d33e2c5332ae4ab4a25.roa
Signing time:             Thu 15 Feb 2024 16:10:49 +0000
ROA not before:           Thu 15 Feb 2024 16:10:49 +0000
ROA not after:            Sun 15 Feb 2026 16:10:49 +0000
asID:                     11947
IP address blocks:        196.32.32.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 489780 (0x77934)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632e9a2ff72a8398731612b91d77d2040365c4a2
        Validity
            Not Before: Feb 15 16:10:49 2024 GMT
            Not After : Feb 15 16:10:49 2026 GMT
        Subject: CN=a9c1d9693433b4a7086b5d33e2c5332ae4ab4a25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6f:0b:c9:8f:03:4d:2a:3a:20:24:84:97:4d:
                    27:e8:c5:24:84:cc:2d:04:3f:82:82:fa:2e:af:db:
                    3b:e2:bf:5b:9b:e9:ba:ce:86:61:23:8c:14:82:48:
                    65:82:aa:99:24:cb:78:a3:1a:2c:2d:44:a6:a9:4e:
                    23:8c:00:6d:11:6c:3b:8f:ed:ab:56:8e:fc:ce:e8:
                    61:6f:9f:ee:1a:b6:1a:12:e7:a8:17:a7:3f:1f:8e:
                    09:db:36:57:ab:02:35:a4:e3:1c:c5:33:40:24:67:
                    98:39:09:6c:c0:06:56:99:07:a5:33:00:1b:f3:10:
                    17:57:9a:94:3e:24:c8:38:a2:b5:4a:8f:5d:7e:94:
                    9a:41:c3:bd:59:e2:fc:bf:91:53:92:5a:d3:2c:db:
                    7c:dd:d1:c1:59:2f:dd:e0:64:14:bb:f5:c3:9a:5d:
                    d4:22:95:30:8e:6b:f8:59:1a:c5:3f:0f:0e:93:95:
                    2e:47:7c:20:f5:52:96:d1:b5:c6:1c:d0:6a:c4:2c:
                    a9:0f:56:0e:8c:60:c3:b8:8f:2e:5c:65:f5:26:9c:
                    d7:f3:96:d9:53:62:d3:cf:23:89:a6:d8:de:6d:80:
                    e9:8c:13:47:e5:02:70:02:f6:c7:48:89:3a:d4:78:
                    96:c3:68:88:7a:4a:7b:b4:41:22:d6:70:2e:33:10:
                    00:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:6D:60:F6:9B:B0:6E:0F:9A:62:1D:B7:D7:57:8C:88:D2:09:3F:5A
            X509v3 Authority Key Identifier:
                keyid:5D:2B:36:FF:65:7C:14:4D:98:23:0E:ED:9B:0E:07:38:4F:8A:8F:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/632e9a2ff72a8398731612b91d77d2040365c4a2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5e41f8e0-767b-4f81-8908-a853d15adc64/a9c1d9693433b4a7086b5d33e2c5332ae4ab4a25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5e41f8e0-767b-4f81-8908-a853d15adc64/632e9a2ff72a8398731612b91d77d2040365c4a2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.32.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         04:4e:85:d6:6c:bc:1a:b4:f2:26:4e:eb:f0:5e:43:70:32:d5:
         88:0a:39:49:46:62:2d:e6:8c:35:70:3c:bd:54:b4:2a:96:67:
         31:37:05:d5:da:00:59:a4:12:86:0d:92:99:4b:23:81:c1:a7:
         fc:78:51:8a:1a:d9:6f:b4:63:da:42:47:ed:81:70:d4:ea:fa:
         9f:60:a6:30:b7:52:e8:cf:66:39:25:9d:b2:c6:6a:8e:b0:f8:
         6f:26:1d:17:f3:fc:d7:85:fe:4e:eb:3a:2b:7e:13:b8:30:67:
         76:b1:95:43:e4:18:73:3e:86:56:fe:d9:df:cb:a9:16:4e:ca:
         d1:ab:71:8e:14:2c:ab:49:09:d8:62:7e:86:96:6f:aa:b8:1d:
         0f:61:f8:28:b9:1e:07:a7:d1:af:c1:5f:51:bc:f0:da:70:5e:
         38:2a:82:43:6a:94:9d:08:92:33:f9:1b:22:72:4f:99:2a:51:
         25:c0:af:37:82:0a:68:fd:6d:84:1a:8c:b0:43:dc:8e:d9:1d:
         8a:e3:5e:da:00:ec:65:88:dc:5b:c5:81:f8:2b:a2:e9:59:2e:
         26:6b:8e:85:cf:af:02:12:b3:2b:9e:60:e7:10:d6:9b:fd:91:
         f9:8b:41:37:e5:74:77:96:40:9c:47:62:f2:f2:03:b7:e2:03:
         99:bc:fe:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:20 2024 by rpki-client on console-fra.rpki-client.org