Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6e6e184c-3a6e-43af-b63e-95ee45a8b3b2/5c75f968ebf8be6e6552cda8c921d385b7840738.roa
File:                     5c75f968ebf8be6e6552cda8c921d385b7840738.roa (raw, json)
Hash identifier:          PBvF+6dh5Ypwaf1cAKvFnugMo7y2lkVo2plo3zYX+4M=
Subject key identifier:   CD:E4:91:0C:A6:AB:74:6D:D9:93:26:DE:15:E7:B5:E0:B6:D4:D9:95
Certificate issuer:       /CN=4ec9e37ddb578cbbdc4e2281b37679864d80672b
Certificate serial:       26157C
Authority key identifier: 6A:32:EA:0E:A5:50:8E:89:35:14:6E:9E:46:73:44:A0:B1:21:57:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ec9e37ddb578cbbdc4e2281b37679864d80672b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6e6e184c-3a6e-43af-b63e-95ee45a8b3b2/5c75f968ebf8be6e6552cda8c921d385b7840738.roa
Signing time:             Thu 18 Jan 2024 12:34:20 +0000
ROA not before:           Thu 18 Jan 2024 12:34:17 +0000
ROA not after:            Sun 18 Jan 2026 12:34:17 +0000
asID:                     60781
IP address blocks:        190.105.193.0/24 maxlen: 24
                          190.105.195.0/24 maxlen: 24
                          190.121.212.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2495868 (0x26157c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ec9e37ddb578cbbdc4e2281b37679864d80672b
        Validity
            Not Before: Jan 18 12:34:17 2024 GMT
            Not After : Jan 18 12:34:17 2026 GMT
        Subject: CN=5c75f968ebf8be6e6552cda8c921d385b7840738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b8:ef:c7:a9:df:a1:10:88:4f:91:b0:a6:e9:
                    28:32:d7:51:1f:db:2e:d8:03:11:2c:80:75:52:b8:
                    95:fa:20:cb:42:17:18:d4:5d:88:91:8b:5d:0c:73:
                    1d:ed:ec:83:2b:a8:96:c4:53:42:c8:d3:18:74:50:
                    fc:39:5f:ac:32:af:38:8d:5f:59:8a:73:ab:85:ba:
                    01:92:cf:ee:4e:c9:83:09:29:a6:30:f7:65:6c:a6:
                    38:4b:6c:b0:8a:44:5d:7b:e2:42:ca:18:dc:1a:30:
                    3a:86:48:26:48:17:ee:74:3f:69:1c:eb:15:82:0b:
                    4c:fc:da:e2:68:cc:85:df:d7:f1:e5:72:85:13:1d:
                    48:87:e8:1c:29:0d:39:44:28:5a:a1:4a:b7:a7:64:
                    a1:94:11:5a:c0:66:35:5f:2f:ea:9c:ee:6c:08:7c:
                    16:70:5e:36:fb:02:1c:85:57:20:f8:6f:23:67:86:
                    ff:c1:cb:3f:48:ee:b8:49:c8:99:77:6e:ec:ab:24:
                    37:79:21:78:0a:5e:7f:69:a1:73:0f:86:dd:5f:c3:
                    d7:35:02:49:50:d5:de:16:91:74:e2:58:df:31:6e:
                    be:91:5b:93:07:db:a1:7b:71:5d:d0:76:e7:e3:46:
                    d7:e4:8f:f6:80:1b:ce:01:b6:51:9b:b3:3c:da:98:
                    d1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E4:91:0C:A6:AB:74:6D:D9:93:26:DE:15:E7:B5:E0:B6:D4:D9:95
            X509v3 Authority Key Identifier:
                keyid:6A:32:EA:0E:A5:50:8E:89:35:14:6E:9E:46:73:44:A0:B1:21:57:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ec9e37ddb578cbbdc4e2281b37679864d80672b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6e6e184c-3a6e-43af-b63e-95ee45a8b3b2/5c75f968ebf8be6e6552cda8c921d385b7840738.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6e6e184c-3a6e-43af-b63e-95ee45a8b3b2/4ec9e37ddb578cbbdc4e2281b37679864d80672b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.193.0/24
                  190.105.195.0/24
                  190.121.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:d4:f9:ef:46:bd:ae:68:c0:ec:cd:4e:d2:38:c6:10:5d:57:
         11:26:06:fc:13:f2:2d:7a:b5:89:c1:7d:40:5c:96:bf:b5:75:
         96:39:cd:d0:1e:ae:09:cd:bc:c2:73:42:45:d0:b1:b0:c2:96:
         8a:b2:1f:b7:6b:24:84:93:43:68:01:d6:a9:d0:8d:ce:63:f0:
         9f:b3:32:ee:85:2d:9c:f0:ac:fa:a0:fd:eb:88:10:2d:99:80:
         35:89:b9:20:3d:e0:39:b8:b5:a1:a3:36:7f:44:7f:9a:e9:6d:
         4e:d7:fd:c3:3b:44:45:62:4b:39:8d:fe:8c:60:98:e3:07:13:
         d8:d8:5d:57:08:4e:00:be:85:cb:01:2b:2e:aa:a6:97:0e:bc:
         f5:61:7f:4e:c7:f8:d1:19:a4:be:a6:be:56:82:31:88:82:5b:
         0e:31:ba:7f:dd:a8:09:1c:38:23:17:be:a8:bb:4f:d5:5b:6d:
         82:f0:6f:1c:d2:ab:f3:28:e7:df:83:18:45:4b:ef:12:51:42:
         9b:2a:45:aa:61:64:6d:cd:0f:3f:4b:10:bf:85:d5:4f:0d:05:
         3c:d5:5a:be:9e:87:b1:55:68:dc:bf:b6:48:13:ad:18:d0:b2:
         a7:18:ef:ff:bb:e3:60:38:8f:c4:9e:e0:00:6e:a1:b9:90:2f:
         a2:6e:f8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:22 2024 by rpki-client on console-fra.rpki-client.org