Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/036a5eb3e1807c1770be3481c5144b90c65512c7.roa
File:                     036a5eb3e1807c1770be3481c5144b90c65512c7.roa (raw, json)
Hash identifier:          Fiv1CpPyCWmADtKgs+fKUnJLWiz6RFNVr7IFmRfS/l0=
Subject key identifier:   0F:CA:56:88:3D:F5:21:18:28:2D:49:7F:E9:4A:ED:87:99:4A:36:F1
Certificate issuer:       /CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
Certificate serial:       2A6EB4
Authority key identifier: FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/036a5eb3e1807c1770be3481c5144b90c65512c7.roa
Signing time:             Wed 14 Feb 2024 13:39:53 +0000
ROA not before:           Wed 14 Feb 2024 13:39:34 +0000
ROA not after:            Wed 14 Feb 2029 13:39:34 +0000
asID:                     269070
IP address blocks:        190.93.67.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2780852 (0x2a6eb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
        Validity
            Not Before: Feb 14 13:39:34 2024 GMT
            Not After : Feb 14 13:39:34 2029 GMT
        Subject: CN=036a5eb3e1807c1770be3481c5144b90c65512c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f1:3a:ec:4b:8f:9f:05:f1:a5:26:6e:2e:92:
                    d1:72:4f:73:ea:7f:e1:b9:5b:30:4e:cb:36:8b:55:
                    21:90:3e:47:cc:83:db:1a:3a:55:43:3d:66:52:ac:
                    ed:26:5a:62:21:a7:b9:b4:47:5e:16:cc:bc:22:1d:
                    af:ec:8f:f7:40:7e:38:06:67:f7:51:e6:17:bb:c5:
                    ff:42:45:60:85:3e:6c:b9:90:a6:86:db:d8:06:bf:
                    94:5a:97:86:c6:0b:07:1f:8a:0f:20:8c:85:7a:1b:
                    ea:ed:7e:78:ed:83:fc:8e:46:ad:d4:f3:b1:88:9a:
                    c8:ee:5c:0e:cb:ae:6e:fa:06:89:0e:12:d4:bf:71:
                    7b:6e:2b:3e:31:d2:4b:9d:88:6e:d3:a1:d6:94:50:
                    8f:8f:9d:2b:33:8d:66:ab:e4:ce:fa:13:af:d6:1c:
                    13:8c:2d:a0:79:10:c1:ee:5b:2c:13:8e:01:77:77:
                    ce:b6:7c:85:73:f6:64:42:0f:89:7b:72:05:3b:91:
                    92:c5:7f:25:e6:5b:78:45:87:7f:22:49:51:ea:75:
                    3c:43:de:a9:05:8c:ab:21:39:20:1e:9c:06:95:17:
                    29:40:39:13:79:2a:0f:01:30:e2:9d:a5:77:0e:47:
                    30:31:44:85:d1:d6:f7:27:ce:a1:e4:74:c1:52:48:
                    3c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:CA:56:88:3D:F5:21:18:28:2D:49:7F:E9:4A:ED:87:99:4A:36:F1
            X509v3 Authority Key Identifier:
                keyid:FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/036a5eb3e1807c1770be3481c5144b90c65512c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:9e:54:b2:d6:9e:f6:b6:a8:8f:fa:7f:f1:c0:95:ca:d7:8e:
         28:71:f5:97:1d:6b:49:1d:b7:d1:54:6b:5b:de:20:71:80:6e:
         79:dd:24:6b:fe:f8:0e:ae:74:d7:4d:97:a7:82:22:ce:ab:8b:
         d2:1f:a9:97:83:90:38:43:60:b9:b4:50:c6:0b:fb:cf:8f:44:
         af:2c:0a:b8:0e:6e:41:9e:29:1c:85:db:e5:1a:55:9d:66:9d:
         05:4a:de:da:9d:e1:f7:45:55:e0:44:33:61:cf:f5:f7:5c:62:
         97:0f:de:92:de:8d:31:9d:38:e3:dc:5d:55:cc:6a:4c:c7:35:
         1d:91:22:0b:f6:02:5a:40:5e:a5:de:bf:b3:32:35:65:ec:74:
         56:56:33:5c:dc:3c:44:6e:72:ce:f0:c7:07:aa:0a:ee:07:c0:
         9a:f6:6d:b4:7b:6e:4c:c7:1c:83:58:d2:4e:36:cb:9c:15:46:
         bf:e5:e6:44:3e:f4:62:84:68:5b:36:22:26:b6:0b:42:f5:6b:
         cf:3c:09:de:29:79:a5:05:86:64:de:ef:5c:50:3f:89:7e:92:
         e9:ac:0c:93:fa:33:82:31:5b:41:e3:72:bb:cf:e5:58:aa:f2:
         f5:22:e7:48:48:55:3a:f4:c0:60:44:27:1f:77:16:cf:7f:b8:
         78:6b:75:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:06 2024 by rpki-client on console-fra.rpki-client.org