Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/0e4b8f5a5c8302554e5067c8a0fe8e8f3433aa4b.roa
File:                     0e4b8f5a5c8302554e5067c8a0fe8e8f3433aa4b.roa (raw, json)
Hash identifier:          ZXJwXa7ecciok/grsF13GeivyI1iKJl0E7BBkki245U=
Subject key identifier:   D6:98:A1:26:51:E4:B7:02:96:50:4E:99:F4:29:C0:47:02:65:F8:C6
Certificate issuer:       /CN=e5d85378526621fbd4956efa10478f912f0807db
Certificate serial:       27A2DB
Authority key identifier: 18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/0e4b8f5a5c8302554e5067c8a0fe8e8f3433aa4b.roa
Signing time:             Sat 25 Nov 2023 11:02:56 +0000
ROA not before:           Sat 25 Nov 2023 11:02:56 +0000
ROA not after:            Tue 25 Nov 2025 11:02:56 +0000
asID:                     63375
IP address blocks:        190.93.95.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2597595 (0x27a2db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d85378526621fbd4956efa10478f912f0807db
        Validity
            Not Before: Nov 25 11:02:56 2023 GMT
            Not After : Nov 25 11:02:56 2025 GMT
        Subject: CN=0e4b8f5a5c8302554e5067c8a0fe8e8f3433aa4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a8:eb:cd:28:f0:56:5c:0d:b5:61:dd:0b:08:
                    41:df:94:e5:8f:01:bd:45:57:87:75:1f:50:a6:4f:
                    a4:55:f4:50:b1:9d:56:cf:3f:22:3e:80:e8:35:fc:
                    43:b9:8d:dd:4d:87:89:c2:80:6a:79:b5:db:40:ca:
                    a2:bc:d8:01:21:83:65:df:68:63:76:bc:5a:be:62:
                    27:c0:3d:9d:2f:c8:24:cb:51:0d:fa:2b:27:93:6b:
                    3c:e9:e6:87:ec:6c:9f:7d:f8:db:b8:b8:c0:a3:a3:
                    b5:fb:bc:e0:4f:f6:64:a9:62:b7:41:89:30:98:ca:
                    25:00:d0:4a:77:7b:d4:40:53:4a:9d:f3:a8:a3:ff:
                    b6:65:d3:b6:a8:2e:c0:d0:03:af:2e:1f:15:0b:ef:
                    cc:04:0d:ea:20:3b:31:9c:86:d7:95:4f:96:68:72:
                    21:19:99:e5:61:9a:86:6c:01:2a:4b:1e:aa:f2:a8:
                    04:45:3a:5c:06:9a:ec:38:9a:8c:70:7f:4c:0d:57:
                    56:ed:96:00:a2:5a:8f:96:ce:09:2e:e9:87:85:55:
                    31:65:ff:d9:5a:4b:bb:44:98:54:2d:73:ca:e8:56:
                    6b:62:d6:13:11:9e:a9:72:01:25:5d:73:e2:33:37:
                    68:36:36:4a:1f:de:fb:7f:34:57:bd:e2:ff:02:88:
                    8b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:98:A1:26:51:E4:B7:02:96:50:4E:99:F4:29:C0:47:02:65:F8:C6
            X509v3 Authority Key Identifier:
                keyid:18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/0e4b8f5a5c8302554e5067c8a0fe8e8f3433aa4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:95:61:05:3c:87:87:b4:e7:6e:c5:45:41:f9:d6:b0:2f:29:
         e2:f2:f1:f2:d9:8c:70:86:18:26:6d:af:80:a3:31:f8:b1:84:
         61:ea:01:bf:d2:01:a0:e3:70:48:d4:dc:1a:69:e3:63:a6:63:
         71:10:32:99:37:0b:bb:1d:91:0e:a9:01:3d:6a:af:57:8c:94:
         26:69:10:63:2f:6a:bc:48:39:2a:41:6d:70:63:0e:b0:4b:6f:
         ec:5d:1c:3c:9f:f6:ff:4c:bc:07:5e:2c:59:37:5f:3a:07:1a:
         c0:14:53:93:cf:3f:f6:e1:e6:78:8b:65:c4:68:a2:ce:18:11:
         45:2d:35:e4:3c:a5:1f:3b:83:59:bc:c7:1b:c8:c6:a4:d7:fe:
         12:58:e5:10:77:c2:e9:45:86:c9:70:b8:7a:34:67:4d:82:09:
         85:33:9f:a7:ae:cb:61:78:4a:9a:a5:7e:26:31:40:12:a4:0a:
         7e:f3:cc:94:e5:59:c9:43:ee:d1:04:23:11:e4:d7:ef:96:54:
         a2:f7:94:81:1e:39:0b:a7:d5:4b:ef:df:37:c6:b3:76:d7:57:
         1f:23:45:98:08:47:b5:3c:79:f4:20:4f:6e:1c:fe:58:b6:5f:
         0c:b5:f8:7a:25:64:e7:cf:c3:3b:bc:5a:f1:d0:7f:d6:7d:8e:
         98:bf:30:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 14 18:15:34 2024 by rpki-client on console-ams.rpki-client.org