Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ee70b8a-3beb-482a-a0eb-3d566f3931db/0571193d279a96fc1fad06b81bf2f87f8560b18c.roa
File:                     0571193d279a96fc1fad06b81bf2f87f8560b18c.roa (raw, json)
Hash identifier:          EExKONf6JMlWOJDyu1o3zbDCncRoUF7ziA3GO+ZC1jI=
Subject key identifier:   13:E2:EB:CC:00:26:04:4B:2A:52:1C:24:55:81:D3:A7:2F:61:6C:37
Certificate issuer:       /CN=e11ec0a0b43ef57ac407a6c5051281adb24eb48d
Certificate serial:       2394E2
Authority key identifier: F8:73:26:40:20:33:30:20:14:9B:00:A0:A2:2E:BE:5F:F8:AB:5E:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e11ec0a0b43ef57ac407a6c5051281adb24eb48d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ee70b8a-3beb-482a-a0eb-3d566f3931db/0571193d279a96fc1fad06b81bf2f87f8560b18c.roa
Signing time:             Sun 24 Sep 2023 08:30:00 +0000
ROA not before:           Sat 23 Sep 2023 08:30:00 +0000
ROA not after:            Mon 22 Sep 2025 08:30:00 +0000
asID:                     263698
IP address blocks:        190.113.84.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2331874 (0x2394e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e11ec0a0b43ef57ac407a6c5051281adb24eb48d
        Validity
            Not Before: Sep 23 08:30:00 2023 GMT
            Not After : Sep 22 08:30:00 2025 GMT
        Subject: CN=0571193d279a96fc1fad06b81bf2f87f8560b18c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0d:59:bb:a1:1d:26:68:c3:13:31:38:c3:38:
                    a2:74:91:51:49:27:3e:98:7c:bb:b7:e4:d3:7e:62:
                    34:1d:91:90:59:6b:36:b5:25:67:e8:62:12:ab:3a:
                    91:4b:74:7b:3b:95:06:18:cb:39:8d:29:4a:7c:8a:
                    52:2d:a6:30:89:d2:00:42:4a:31:8e:44:2e:10:0b:
                    89:5c:7c:65:20:1a:43:2b:2e:10:99:c2:0f:ee:f5:
                    40:05:b0:66:3f:54:a1:46:6c:a8:1c:44:08:d5:d9:
                    ce:2c:0c:c3:59:8e:42:e0:c8:8c:05:5e:f5:39:f3:
                    4d:ec:77:6b:a3:25:83:1d:2d:5c:6a:54:56:66:13:
                    09:e2:03:6e:0d:cd:6a:e8:8c:43:65:f2:5a:37:c4:
                    fe:42:83:4b:bd:8d:96:4d:76:e7:c0:5d:b8:9d:e3:
                    92:75:85:7a:0a:62:08:b3:74:9d:7c:fb:f6:7c:5a:
                    44:7f:7f:d8:0f:5b:42:a8:5d:74:c0:6d:30:38:67:
                    87:e4:52:39:61:8b:4b:1d:f9:cc:e8:0c:c4:dc:83:
                    b4:49:59:37:a5:40:42:ce:ee:13:fa:df:22:44:0f:
                    01:89:a0:6a:13:bd:0d:4a:74:c0:dd:c3:82:99:4c:
                    48:dc:63:3b:d7:82:b1:b2:5c:92:8e:c1:3f:ab:f1:
                    f4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E2:EB:CC:00:26:04:4B:2A:52:1C:24:55:81:D3:A7:2F:61:6C:37
            X509v3 Authority Key Identifier:
                keyid:F8:73:26:40:20:33:30:20:14:9B:00:A0:A2:2E:BE:5F:F8:AB:5E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e11ec0a0b43ef57ac407a6c5051281adb24eb48d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ee70b8a-3beb-482a-a0eb-3d566f3931db/0571193d279a96fc1fad06b81bf2f87f8560b18c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ee70b8a-3beb-482a-a0eb-3d566f3931db/e11ec0a0b43ef57ac407a6c5051281adb24eb48d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:f9:08:17:04:6c:8f:5b:87:0a:f6:38:dc:49:0a:dd:de:5b:
         e8:4f:0f:ad:ab:fe:16:77:83:f8:39:6d:2f:b9:26:41:af:f0:
         37:2d:2f:f2:ad:0d:e1:9c:95:c5:f2:8e:c8:0a:c4:96:96:d0:
         4c:64:4c:f2:b2:a3:f8:2a:67:27:ed:11:ae:87:00:d5:46:5b:
         1c:96:7c:fe:53:d4:fb:03:49:bb:3e:41:83:89:c6:6b:05:af:
         05:d7:08:ab:b9:7f:ad:39:72:9d:9f:d3:20:6f:d5:5d:ac:5f:
         d0:0f:88:09:58:59:4b:ee:51:24:d5:ba:9d:66:86:20:a0:ac:
         9d:4d:ab:21:48:ba:e4:1a:e0:97:bb:7f:dd:18:e4:aa:80:d7:
         a7:50:fc:6b:af:69:ba:aa:56:3c:97:a0:3a:1a:88:22:8f:17:
         6d:af:a2:6a:52:71:ff:f4:65:72:08:f9:ab:ec:4c:ba:9d:94:
         82:77:fe:c8:8e:4e:7a:ce:ac:d5:42:c9:f7:bc:9d:ea:3d:06:
         cc:3b:5c:82:f5:1d:c8:00:9a:c8:7a:81:3c:39:77:b1:79:66:
         a7:a6:8b:9d:02:b5:2c:94:6a:62:0b:b7:19:a8:df:21:d9:9a:
         c2:86:e9:97:7b:2d:03:dd:d7:10:f9:34:8e:58:55:32:45:8f:
         de:ab:f0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:36 2024 by rpki-client on console-ams.rpki-client.org