Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa495912-7e00-49f8-8e3e-7e3f99235479/459b8ba3291e4954041b9b66bd36110571c6af65.roa
File:                     459b8ba3291e4954041b9b66bd36110571c6af65.roa (raw, json)
Hash identifier:          1OGWvpjAxa9pn3K060b6XkdOBX54wUqESb4KjSOfB5M=
Subject key identifier:   EF:CC:AB:BE:A9:D8:63:DE:55:B1:B3:B1:DC:7F:7C:F8:16:B1:12:76
Certificate issuer:       /CN=e655cb43dd8f20b8038a37f8f6e9274404c8cbc9
Certificate serial:       0B2B12
Authority key identifier: 02:8C:51:BA:8C:4D:AD:6D:2F:6F:93:65:BC:52:A4:85:72:11:01:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e655cb43dd8f20b8038a37f8f6e9274404c8cbc9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa495912-7e00-49f8-8e3e-7e3f99235479/459b8ba3291e4954041b9b66bd36110571c6af65.roa
Signing time:             Wed 28 Jul 2021 13:03:13 +0000
ROA not before:           Wed 28 Jul 2021 03:00:00 +0000
ROA not after:            Fri 28 Jul 2023 03:00:00 +0000
asID:                     269975
IP address blocks:        190.89.28.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 731922 (0xb2b12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e655cb43dd8f20b8038a37f8f6e9274404c8cbc9
        Validity
            Not Before: Jul 28 03:00:00 2021 GMT
            Not After : Jul 28 03:00:00 2023 GMT
        Subject: CN=459b8ba3291e4954041b9b66bd36110571c6af65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a1:46:81:22:02:29:1e:dd:88:79:29:d0:ad:
                    9a:b6:8d:e5:e4:f9:6e:39:ee:49:81:f7:7a:b0:39:
                    08:93:a2:dc:ae:58:d3:d7:7a:ac:87:c6:80:73:f7:
                    46:56:cb:4a:16:04:ba:04:45:cd:aa:f1:fc:03:27:
                    0c:71:70:ab:dd:88:ca:a1:04:74:dd:29:e4:4d:d6:
                    8d:d5:e4:6a:a3:4a:05:73:b1:03:72:9d:d0:31:2b:
                    d6:84:23:a1:c2:26:6a:3c:1d:cb:c7:de:bb:38:fb:
                    b5:07:8b:88:d1:fa:09:c9:54:be:e1:fb:59:53:d7:
                    93:c8:51:f2:7d:3d:b0:32:61:2b:72:09:51:e1:cb:
                    a3:5b:db:a5:01:4e:0c:86:81:82:ab:9b:15:c3:41:
                    ad:4c:a8:67:24:48:a6:05:07:ed:e4:2f:56:25:cc:
                    aa:ff:ce:88:ef:3a:65:dd:15:c1:d5:52:75:05:94:
                    63:8a:72:8d:01:26:f7:c9:32:8b:9a:54:7d:20:2e:
                    5f:4c:df:1a:6b:6a:17:33:72:9c:cd:1c:6b:c5:b5:
                    05:72:8f:e8:24:96:80:6d:91:1c:94:30:e9:74:9f:
                    04:5f:6c:d4:29:9d:d4:93:56:a6:c7:6e:df:53:37:
                    1b:a6:f2:cd:41:fb:76:43:fd:fc:3e:ec:b8:0f:ba:
                    ac:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:CC:AB:BE:A9:D8:63:DE:55:B1:B3:B1:DC:7F:7C:F8:16:B1:12:76
            X509v3 Authority Key Identifier:
                keyid:02:8C:51:BA:8C:4D:AD:6D:2F:6F:93:65:BC:52:A4:85:72:11:01:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e655cb43dd8f20b8038a37f8f6e9274404c8cbc9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa495912-7e00-49f8-8e3e-7e3f99235479/459b8ba3291e4954041b9b66bd36110571c6af65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa495912-7e00-49f8-8e3e-7e3f99235479/e655cb43dd8f20b8038a37f8f6e9274404c8cbc9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:ac:d7:b4:9a:6b:90:f0:04:a8:b0:35:6f:08:ab:a9:d3:e9:
         6f:ea:93:43:62:0d:45:cd:9f:29:db:a2:ff:dc:85:fa:3b:06:
         72:3b:93:bc:0c:49:7f:ca:6c:31:64:56:0e:82:b6:9f:68:87:
         d8:21:a4:6e:b7:46:b2:1a:35:b6:d2:93:bb:e9:92:5a:ab:e6:
         7b:35:1d:a6:0d:ef:bc:bc:9a:2e:bc:c2:d1:e4:ad:a6:89:46:
         78:71:ce:90:4d:54:b6:52:3f:be:86:e7:7e:df:bc:7f:3e:37:
         b3:c4:f1:17:d0:c7:64:2b:d7:8e:da:dc:93:d7:0b:c4:bd:b1:
         91:c7:c0:40:79:eb:7f:19:3f:54:6e:95:94:46:94:15:48:48:
         dd:e0:cd:ae:16:2d:e1:24:a5:75:09:37:7f:02:15:f4:e1:15:
         b1:0d:37:71:50:86:42:ab:c5:4e:65:0c:16:9e:68:7d:71:a0:
         27:9c:85:0f:7e:cc:50:c3:3f:a7:db:bd:6b:e4:74:67:3e:f5:
         b7:dd:54:85:46:de:8d:93:28:e4:e5:ca:10:d4:fc:e1:19:51:
         c0:ee:19:24:54:f3:0b:05:18:29:81:95:7a:69:c9:9c:16:11:
         5e:66:21:2d:e9:41:bd:57:c5:04:dd:db:7d:c5:08:e7:eb:35:
         12:db:50:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:35 2023 by rpki-client on console-fra.rpki-client.org