Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/0e8aff955587d4f89d08bad4a712f50fb7a76572.roa
File:                     0e8aff955587d4f89d08bad4a712f50fb7a76572.roa (raw, json)
Hash identifier:          YEFCyNK1FCzDswVJerPkNJKBScQPxlju+I8653/EYTg=
Subject key identifier:   4A:6A:58:CF:2C:22:F0:DC:F9:38:13:6C:BF:82:7A:63:1A:52:5B:0A
Certificate issuer:       /CN=e5d85378526621fbd4956efa10478f912f0807db
Certificate serial:       2719DF
Authority key identifier: 18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/0e8aff955587d4f89d08bad4a712f50fb7a76572.roa
Signing time:             Tue 07 Nov 2023 18:26:17 +0000
ROA not before:           Tue 07 Nov 2023 18:26:16 +0000
ROA not after:            Fri 07 Nov 2025 18:26:16 +0000
asID:                     834
IP address blocks:        190.93.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2562527 (0x2719df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d85378526621fbd4956efa10478f912f0807db
        Validity
            Not Before: Nov  7 18:26:16 2023 GMT
            Not After : Nov  7 18:26:16 2025 GMT
        Subject: CN=0e8aff955587d4f89d08bad4a712f50fb7a76572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:49:40:f8:82:75:f2:cd:c3:0c:5f:87:84:9e:
                    7d:3e:f0:b2:e8:ee:a6:81:ae:d8:4a:c8:36:5c:3b:
                    64:12:d6:0b:f2:56:f0:28:85:3b:9c:2f:be:8a:06:
                    2e:33:03:e1:c2:ed:46:22:f0:ac:e2:64:44:bc:a9:
                    1e:cb:b7:2f:4d:26:0b:29:cb:41:b2:e6:9a:16:0f:
                    91:9e:03:7b:7e:a0:82:ae:81:f5:79:7d:ee:eb:9c:
                    b0:f6:ce:43:a5:39:61:0b:9a:95:fa:6e:b5:de:af:
                    5b:d1:ca:77:58:3a:41:06:c4:95:e9:dc:a5:12:d5:
                    5c:3a:3c:38:f4:17:2d:76:9c:e1:dc:9b:7e:f7:e7:
                    63:63:54:59:12:76:af:fc:9c:87:91:ad:89:c5:d9:
                    29:87:17:74:5c:ee:3e:e3:fd:9f:4e:54:e4:56:a1:
                    e2:af:1f:e6:00:f6:42:e3:aa:e7:c9:0e:c0:0c:54:
                    b6:e0:eb:ed:5c:be:9c:28:13:18:7b:dc:98:77:92:
                    0c:bd:73:f3:62:96:c4:0f:8f:7a:c9:19:36:d5:09:
                    48:6b:22:b0:10:5b:32:b3:3a:ee:e9:f5:22:02:b0:
                    08:d2:74:c5:2e:97:f2:2d:2d:6f:28:1a:42:9b:ec:
                    ff:60:d8:6d:90:dc:02:ee:5b:cd:b6:19:c0:57:bc:
                    3a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:6A:58:CF:2C:22:F0:DC:F9:38:13:6C:BF:82:7A:63:1A:52:5B:0A
            X509v3 Authority Key Identifier:
                keyid:18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/0e8aff955587d4f89d08bad4a712f50fb7a76572.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:0e:11:0c:c1:69:b2:b9:5a:51:d5:90:f7:09:6e:2f:3f:06:
         d3:46:bd:1a:41:3b:24:34:46:e6:19:70:36:41:40:07:d8:2c:
         db:30:06:b4:5e:b3:32:76:16:74:14:e2:7c:41:d2:6d:a6:89:
         dc:43:bb:c1:10:14:91:c4:57:55:46:74:8f:03:a1:cc:ee:4a:
         09:ae:86:61:c0:83:a9:71:01:34:f0:be:c2:7a:c7:4f:5e:17:
         dc:45:c3:82:17:3d:9a:b7:e7:36:4f:82:fd:0d:31:8b:24:42:
         e5:fc:c8:b4:51:43:07:a8:8b:f4:7a:0d:89:24:85:af:d1:8e:
         e8:2f:44:c1:23:2f:e7:9e:17:d0:a9:a7:65:ed:c9:a9:f1:17:
         92:64:9f:d0:1a:41:3a:9b:9a:c4:d0:46:30:ac:b0:50:8b:b8:
         f0:06:e6:97:b1:23:d8:90:38:63:df:20:8c:16:52:16:79:c9:
         48:ea:75:76:a3:7e:b6:69:0d:20:45:32:22:41:44:23:9a:c1:
         ff:e4:6b:2c:e4:24:e4:24:29:08:8f:2d:13:c1:7f:77:06:db:
         e8:c0:26:9c:7e:4e:1b:77:60:3f:2e:6f:62:ff:ad:c8:e3:fc:
         17:64:03:54:f7:c2:39:f4:77:43:09:f6:b9:1d:64:02:d0:36:
         90:bf:9b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:06 2024 by rpki-client on console-fra.rpki-client.org