Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/e503c6c23b176dede84439436dbefd03b84b2a6d.roa
File:                     e503c6c23b176dede84439436dbefd03b84b2a6d.roa (raw, json)
Hash identifier:          CfNWxDAZj8KhQq6IwKaufStnd7Ef2HMj3pHR7gkqhPI=
Subject key identifier:   E4:E6:83:6B:C1:D1:95:31:D6:F9:74:EA:AA:F5:74:09:D4:BF:9B:2F
Certificate issuer:       /CN=a9b9d9319d2010f9907e00e3e1940885c59db093
Certificate serial:       204E53
Authority key identifier: 9E:B3:BC:DA:F7:48:47:3B:7C:17:4F:76:B5:48:5C:CE:C5:5F:33:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9b9d9319d2010f9907e00e3e1940885c59db093.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/e503c6c23b176dede84439436dbefd03b84b2a6d.roa
Signing time:             Fri 12 May 2023 13:45:18 +0000
ROA not before:           Thu 11 May 2023 13:45:16 +0000
ROA not after:            Mon 12 May 2025 13:45:16 +0000
asID:                     271868
IP address blocks:        190.108.91.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2117203 (0x204e53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9b9d9319d2010f9907e00e3e1940885c59db093
        Validity
            Not Before: May 11 13:45:16 2023 GMT
            Not After : May 12 13:45:16 2025 GMT
        Subject: CN=e503c6c23b176dede84439436dbefd03b84b2a6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:67:20:6f:08:05:1a:a0:6c:f3:70:d4:e6:0d:
                    b2:c6:b0:45:77:c0:0c:7e:c5:42:26:32:cc:52:86:
                    53:6d:65:ee:dd:a7:48:de:1e:8c:1a:a4:72:18:28:
                    e7:1d:3e:b7:b3:41:03:a3:7e:52:75:6b:5d:9f:55:
                    59:a5:0e:aa:e1:c0:50:0a:9f:6c:ac:9e:83:08:3d:
                    1e:72:c1:66:5f:4c:da:76:03:2a:09:d2:56:5c:3a:
                    14:95:6e:70:c6:9b:d2:d8:4b:7b:43:af:14:f5:b5:
                    e0:83:7b:47:6b:da:04:9e:49:c4:cc:08:9f:3b:05:
                    be:ca:19:9d:2f:e8:df:74:5d:e3:d9:b3:6b:19:bb:
                    a1:94:3d:ce:ec:14:1b:98:77:f5:a9:57:71:77:59:
                    31:2f:48:6f:49:3e:96:6e:32:c3:25:63:73:10:9e:
                    f5:e5:22:58:89:7d:42:21:b7:a9:d2:35:0c:a8:5a:
                    79:47:14:8c:00:86:b5:a1:63:1e:74:8f:54:64:29:
                    81:b6:ed:04:4b:87:e0:c7:6f:d9:22:3d:ce:74:12:
                    45:b2:69:88:5e:c8:18:56:0f:26:82:3d:9e:95:42:
                    64:b2:d4:ac:9b:bd:28:4e:82:5f:e5:1b:a1:48:60:
                    b8:1c:e7:cc:23:d5:1c:36:74:57:ce:2f:e7:d8:60:
                    f1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E6:83:6B:C1:D1:95:31:D6:F9:74:EA:AA:F5:74:09:D4:BF:9B:2F
            X509v3 Authority Key Identifier:
                keyid:9E:B3:BC:DA:F7:48:47:3B:7C:17:4F:76:B5:48:5C:CE:C5:5F:33:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9b9d9319d2010f9907e00e3e1940885c59db093.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/e503c6c23b176dede84439436dbefd03b84b2a6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/a9b9d9319d2010f9907e00e3e1940885c59db093.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:50:f2:10:00:cb:80:d3:18:4f:48:6f:02:6a:49:42:47:6c:
         28:d9:bc:e7:b5:26:9a:b0:ea:05:ca:51:05:fc:15:bf:f8:46:
         56:d6:37:bd:eb:5a:fe:0f:fd:75:3e:08:36:b5:5c:d1:b6:d7:
         ec:d2:a2:a6:f4:db:0a:b7:b4:18:17:64:b6:bf:df:51:09:2e:
         19:dd:49:d7:e5:5a:f1:a9:20:e2:99:2c:04:a7:c9:31:d6:ad:
         18:ed:a6:70:b7:7b:50:45:20:eb:4f:6e:b4:53:e5:b5:31:99:
         17:22:2c:b3:79:9f:07:c1:19:ae:7f:3e:c6:03:a3:c4:5c:a7:
         92:93:e9:ae:a7:56:b4:b2:bf:d8:b9:a2:82:6b:89:2f:09:17:
         98:01:62:fc:43:a7:14:ca:c1:b4:47:3b:86:26:fc:84:db:4b:
         05:5c:78:cb:45:f5:68:b5:d8:1c:7a:cf:73:21:fc:2f:14:18:
         23:bf:b6:21:8a:78:d1:1f:ee:27:8c:c2:4b:61:76:78:2b:bb:
         fe:7c:36:0e:82:8f:6b:61:59:0d:fc:7c:a4:eb:dc:a1:c7:2a:
         aa:f7:78:85:7e:90:ee:0a:a6:1b:74:0a:93:67:84:f9:37:1d:
         57:f5:32:62:65:67:37:a4:28:12:f8:48:d2:ea:ff:f1:2d:61:
         a6:69:72:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org