Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/0f8c9cfe2638003b2eea307f21ac1628775bb360.roa
File:                     0f8c9cfe2638003b2eea307f21ac1628775bb360.roa (raw, json)
Hash identifier:          dLDJEeIERwY5/pnVPnDezrjF4XwovA03XovMCjrLXps=
Subject key identifier:   F9:30:01:AD:56:5F:72:07:74:8A:59:22:14:AC:0E:54:D4:59:F0:1F
Certificate issuer:       /CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
Certificate serial:       2A718B
Authority key identifier: FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/0f8c9cfe2638003b2eea307f21ac1628775bb360.roa
Signing time:             Wed 14 Feb 2024 13:39:56 +0000
ROA not before:           Wed 14 Feb 2024 13:39:34 +0000
ROA not after:            Wed 14 Feb 2029 13:39:34 +0000
asID:                     262361
IP address blocks:        190.93.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2781579 (0x2a718b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
        Validity
            Not Before: Feb 14 13:39:34 2024 GMT
            Not After : Feb 14 13:39:34 2029 GMT
        Subject: CN=0f8c9cfe2638003b2eea307f21ac1628775bb360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7e:bb:66:d7:12:d2:39:9d:2c:0b:11:56:d1:
                    c5:7f:94:44:e0:24:ff:a0:c8:4b:42:3e:e3:45:6b:
                    04:49:03:89:0a:7b:ad:23:39:98:34:ab:6d:c3:d0:
                    a2:98:18:1d:06:4f:b0:bb:76:a6:78:63:f9:95:ec:
                    15:a2:4f:97:cb:09:59:8c:f2:24:ec:e6:44:06:aa:
                    f9:ea:03:bb:a3:c8:84:73:cd:94:86:37:8e:b9:a5:
                    f0:70:27:bc:0f:2a:0e:4a:00:06:ee:51:6b:94:df:
                    74:60:7e:f7:d1:69:69:1f:9e:25:f8:e0:86:26:2c:
                    0c:16:d5:b3:31:ac:76:8a:6d:44:a6:f8:9f:f6:8f:
                    7c:38:af:d9:19:e5:27:e5:a8:f0:73:b3:19:72:e0:
                    b5:fb:be:b9:95:8a:ae:4f:61:8b:45:3f:55:e8:ca:
                    23:0d:bb:4d:a8:41:09:1c:d2:a2:c2:5a:b0:10:e6:
                    71:ed:52:2a:b6:92:5d:76:65:95:60:53:96:a2:a9:
                    90:a0:c7:4d:7e:f3:41:e8:d6:33:61:81:df:fe:14:
                    8c:38:26:a4:42:6f:fb:bf:5e:c4:16:62:be:d0:75:
                    00:45:f4:59:8b:9c:92:74:dc:e7:c6:36:9c:50:db:
                    5e:8a:ea:41:0a:63:56:b7:14:d6:09:6e:35:28:24:
                    6f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:30:01:AD:56:5F:72:07:74:8A:59:22:14:AC:0E:54:D4:59:F0:1F
            X509v3 Authority Key Identifier:
                keyid:FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/0f8c9cfe2638003b2eea307f21ac1628775bb360.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:00:91:b3:67:3a:bd:d2:9b:1a:c6:5d:74:08:a8:23:4e:f5:
         32:4b:fc:fc:b8:11:b6:68:02:c3:80:db:e9:95:b3:06:c6:23:
         45:0c:9d:d8:80:05:78:e2:38:46:eb:90:d8:0d:b8:65:61:93:
         70:73:61:94:b5:ac:90:e4:f0:32:f0:7b:22:c9:b0:83:23:6f:
         85:08:8f:47:d7:0c:0c:fc:3a:9b:55:aa:8e:82:2f:be:41:0a:
         30:58:1e:ef:5d:33:d1:ca:ff:95:8d:b7:91:98:27:d5:70:1c:
         39:74:6c:46:8e:53:b2:0e:c5:cf:ac:05:50:a9:d3:6a:58:76:
         bd:32:91:c1:af:bb:c1:23:ea:0c:c0:5c:cf:72:8c:98:36:0b:
         81:af:54:07:c1:9b:51:60:43:2c:52:0c:c3:d7:6c:82:e0:22:
         27:ba:da:71:37:fd:f6:f7:a3:e5:36:8e:36:e7:d4:46:d3:9f:
         22:5e:79:4b:30:8b:ad:64:fe:22:b9:2d:4e:71:ff:95:34:b6:
         e4:eb:b1:4a:1d:9e:03:a2:4b:ae:b8:77:cf:fa:26:90:3f:00:
         64:71:3d:6b:c1:51:6a:4d:55:18:19:b0:a3:00:6c:6b:45:4d:
         ed:ef:57:c2:cb:3c:e4:ea:d4:7e:a2:ae:ff:24:b9:6d:7f:fd:
         67:57:f5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:30 2024 by rpki-client on console-fra.rpki-client.org