Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b06901a4-b33d-4a88-b0e4-9ab69be88387/1fb4d9d106f765e2f14d3ad707c541eecd1490a8.roa
File:                     1fb4d9d106f765e2f14d3ad707c541eecd1490a8.roa (raw, json)
Hash identifier:          l+E+a/M5Y4EH2NUv0t6GxvdvsZ3xkvWoVZhuFA6VHls=
Subject key identifier:   11:51:73:A4:C8:93:5E:1C:33:CA:F6:6D:78:93:E3:94:7C:A2:55:E1
Certificate issuer:       /CN=09a203b64348f1b177ff9d7141f0356733b30843
Certificate serial:       24F987
Authority key identifier: C8:23:D6:7D:AD:B0:7E:45:58:BD:2F:96:39:0F:1D:91:87:F9:B9:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a203b64348f1b177ff9d7141f0356733b30843.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b06901a4-b33d-4a88-b0e4-9ab69be88387/1fb4d9d106f765e2f14d3ad707c541eecd1490a8.roa
Signing time:             Wed 08 Nov 2023 23:26:59 +0000
ROA not before:           Wed 08 Nov 2023 23:26:58 +0000
ROA not after:            Sat 08 Nov 2025 23:26:58 +0000
asID:                     27979
IP address blocks:        190.93.235.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2423175 (0x24f987)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a203b64348f1b177ff9d7141f0356733b30843
        Validity
            Not Before: Nov  8 23:26:58 2023 GMT
            Not After : Nov  8 23:26:58 2025 GMT
        Subject: CN=1fb4d9d106f765e2f14d3ad707c541eecd1490a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:08:6b:a3:d5:1f:33:1e:b1:8c:6e:ab:91:fc:
                    c7:51:b9:93:94:28:fe:ec:a0:5b:18:d2:2d:aa:2f:
                    e2:89:b5:1a:1a:bd:d3:b8:91:25:9a:95:22:7c:06:
                    79:44:37:f4:7d:9d:95:6e:9c:71:d4:08:e1:c0:b1:
                    4d:71:dd:38:67:0c:31:6d:35:38:92:72:3e:00:ed:
                    ef:3f:2e:ea:ac:66:56:09:49:17:42:c5:f3:bb:d9:
                    21:78:94:cf:80:f1:d9:bb:c8:e8:76:e8:73:9a:e3:
                    67:0b:19:6a:23:62:18:4d:bd:c0:63:c0:b9:65:ad:
                    d4:30:45:f5:5d:07:4d:10:dd:94:24:5d:ed:b0:a2:
                    cf:df:7a:65:7a:83:e4:dc:d5:35:79:c5:6c:e1:19:
                    0a:5d:52:e1:73:a5:3a:0f:8c:9f:54:6c:39:db:bb:
                    ce:7b:06:20:04:36:41:d8:03:d0:b8:80:bd:28:27:
                    d2:ec:b6:60:a8:dc:0c:bd:d2:cb:0c:25:5d:ea:f3:
                    f0:f9:73:11:c1:ec:a1:c7:aa:78:6f:eb:01:fe:d8:
                    e8:d2:5d:6a:92:95:11:bb:4b:9e:83:a1:8a:19:25:
                    d9:96:8a:8d:cc:70:5f:2d:bd:db:3a:81:ba:be:5e:
                    9e:0b:cb:39:42:3b:f1:c1:94:cc:59:75:67:46:cd:
                    f3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:51:73:A4:C8:93:5E:1C:33:CA:F6:6D:78:93:E3:94:7C:A2:55:E1
            X509v3 Authority Key Identifier:
                keyid:C8:23:D6:7D:AD:B0:7E:45:58:BD:2F:96:39:0F:1D:91:87:F9:B9:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a203b64348f1b177ff9d7141f0356733b30843.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b06901a4-b33d-4a88-b0e4-9ab69be88387/1fb4d9d106f765e2f14d3ad707c541eecd1490a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b06901a4-b33d-4a88-b0e4-9ab69be88387/09a203b64348f1b177ff9d7141f0356733b30843.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:cc:c9:98:eb:98:5a:f9:d0:4e:1f:38:0e:2f:a1:aa:6e:cf:
         73:01:49:19:56:98:e6:57:13:6a:82:67:7b:34:2c:23:37:2f:
         11:ce:97:f3:0f:6d:2f:9e:53:1a:0c:83:61:06:f0:51:12:94:
         b0:b5:6d:b2:cd:c7:76:26:05:c2:65:e3:ee:16:1d:60:42:ed:
         27:d6:38:1a:80:c3:78:a6:21:a2:6b:9d:52:cb:9f:f9:43:96:
         2b:fb:21:0a:33:74:3b:be:2b:13:56:4c:76:de:1e:ce:03:13:
         9d:3c:f6:74:1d:5a:df:84:85:a4:37:f7:28:68:3e:2b:ff:22:
         d0:9e:16:07:b2:5b:a3:9b:50:5f:c1:68:32:78:7c:7f:8e:e7:
         c5:8f:e6:65:e4:a0:31:4b:b1:37:00:48:2e:29:fc:38:96:94:
         34:19:1a:a6:99:d4:ba:dc:f7:13:87:41:a7:26:66:1d:53:26:
         d0:04:7e:b8:f1:bb:6d:ed:0b:e8:d2:a4:78:18:55:5a:db:37:
         aa:b5:04:98:eb:3b:c5:0b:b5:0d:da:0d:0c:6b:38:c0:28:db:
         2b:b0:9a:b9:e3:d2:7f:40:4e:13:0f:cf:59:72:ac:4b:f1:f7:
         3d:4d:1f:ec:79:8f:a7:f9:14:97:24:39:f9:eb:25:91:cc:6f:
         90:b6:d9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:22 2024 by rpki-client on console-ams.rpki-client.org