Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/96af7bb5958b54e477a5ee3f517c7661824beae8.roa
File:                     96af7bb5958b54e477a5ee3f517c7661824beae8.roa (raw, json)
Hash identifier:          pV2iDBYBDVJPLz7M7q1wZMSWsD+6fbozxawN9Bc0E7o=
Subject key identifier:   ED:FF:DF:77:52:08:94:38:90:23:41:78:65:C4:06:9F:DC:42:BE:42
Certificate issuer:       /CN=a9b9d9319d2010f9907e00e3e1940885c59db093
Certificate serial:       0EDB56
Authority key identifier: 9E:B3:BC:DA:F7:48:47:3B:7C:17:4F:76:B5:48:5C:CE:C5:5F:33:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9b9d9319d2010f9907e00e3e1940885c59db093.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/96af7bb5958b54e477a5ee3f517c7661824beae8.roa
Signing time:             Tue 08 Jun 2021 03:21:48 +0000
ROA not before:           Tue 08 Jun 2021 03:21:48 +0000
ROA not after:            Mon 08 Jun 2026 03:21:48 +0000
asID:                     271868
IP address blocks:        190.108.91.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 973654 (0xedb56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9b9d9319d2010f9907e00e3e1940885c59db093
        Validity
            Not Before: Jun  8 03:21:48 2021 GMT
            Not After : Jun  8 03:21:48 2026 GMT
        Subject: CN=96af7bb5958b54e477a5ee3f517c7661824beae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:48:cf:4a:8a:29:f3:82:56:f9:24:71:9f:5f:
                    5e:c8:33:dd:f0:2f:fc:1e:08:bb:83:76:d7:d0:0d:
                    eb:60:9d:59:27:a9:a0:02:8a:42:d2:60:ab:84:07:
                    9b:fb:9e:84:e5:02:e7:4c:24:04:ab:84:04:15:fb:
                    4a:2b:d9:c7:14:03:ec:d5:ca:3f:ca:b9:3e:f5:d3:
                    0a:b5:31:c7:12:87:51:bf:0b:6e:c9:f4:5f:d2:e4:
                    7f:d9:7f:90:e9:9e:55:85:e8:de:b9:f0:35:0f:ce:
                    86:09:d9:98:82:e7:02:bb:fd:fd:d1:4b:17:cc:69:
                    4e:79:00:4d:d5:c9:27:ea:4f:00:61:7f:4a:03:fb:
                    b4:47:b9:76:96:11:d1:f2:6f:c5:3d:d8:ff:2f:87:
                    b3:85:25:8b:d0:8f:b2:42:24:65:c6:03:a8:18:a2:
                    30:55:fe:ba:bd:d6:85:6f:ac:4c:f2:b9:1a:27:44:
                    20:d8:73:b2:a2:3a:08:5f:5d:62:ea:a7:94:69:71:
                    30:ab:9d:31:ab:5f:eb:b1:9b:4c:14:c0:98:5c:74:
                    bd:71:6b:8e:8e:59:93:e2:3f:b7:8f:5a:6e:ba:b1:
                    3f:a4:d9:cc:9d:cc:c6:1e:19:ef:91:0d:7f:49:a0:
                    d5:9e:23:82:4f:31:29:1e:ff:4a:4a:cf:eb:9c:f8:
                    e6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:FF:DF:77:52:08:94:38:90:23:41:78:65:C4:06:9F:DC:42:BE:42
            X509v3 Authority Key Identifier:
                keyid:9E:B3:BC:DA:F7:48:47:3B:7C:17:4F:76:B5:48:5C:CE:C5:5F:33:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9b9d9319d2010f9907e00e3e1940885c59db093.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/96af7bb5958b54e477a5ee3f517c7661824beae8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/a9b9d9319d2010f9907e00e3e1940885c59db093.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:a4:07:0c:2e:33:d0:02:69:e7:de:cf:f2:c0:01:8b:d0:fb:
         61:93:b1:f9:34:ac:9f:94:0e:a6:8b:37:b6:d2:a8:2e:9d:cb:
         2e:f0:55:ad:4d:ac:6e:2c:4c:32:75:5b:8b:71:f0:00:cb:89:
         06:09:fb:05:0b:0b:95:4b:e5:b6:62:f6:4e:de:7d:9d:26:17:
         46:d4:31:57:67:df:71:cf:0e:d5:05:48:75:4b:9d:5b:f6:63:
         1a:a7:c9:4f:0a:c1:a0:e0:1a:d5:05:34:69:6c:c2:d9:b6:89:
         ca:57:45:d9:e4:46:6c:05:2a:10:4a:36:95:1e:37:93:fb:e0:
         d0:12:d5:8a:93:9f:04:5b:4e:fd:10:e4:91:93:f0:54:34:b8:
         58:b9:9d:49:f7:ac:59:9f:c5:92:cb:7b:e6:f3:51:90:dc:2e:
         12:66:ba:ae:01:16:61:5c:b5:1b:62:e6:eb:07:d9:0c:9a:0e:
         fc:a5:4c:83:c2:1d:43:da:d9:77:95:72:59:9b:57:0b:62:ee:
         35:1d:63:17:80:d1:26:f7:31:2c:8c:73:d0:32:cd:a4:a8:4a:
         30:fa:4c:88:2c:86:42:8b:00:79:74:4e:a8:44:02:81:79:8b:
         cd:2d:f9:a3:f7:57:5a:bd:c5:bc:7c:7e:b8:e1:8a:77:79:d0:
         88:92:0e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:46 2024 by rpki-client on console-fra.rpki-client.org