Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/1cfedf5992627066f5fd1513e60e952263a1489d.roa
File:                     1cfedf5992627066f5fd1513e60e952263a1489d.roa (raw, json)
Hash identifier:          4axhbs67a3aMNejld5B3rGUk0qEo0iO3SJ3O4NSodaw=
Subject key identifier:   8A:78:58:E4:FE:E8:7D:C1:46:5F:9E:FA:47:99:C6:D8:D6:64:06:11
Certificate issuer:       /CN=e5d85378526621fbd4956efa10478f912f0807db
Certificate serial:       24772E
Authority key identifier: 18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/1cfedf5992627066f5fd1513e60e952263a1489d.roa
Signing time:             Fri 01 Sep 2023 19:30:58 +0000
ROA not before:           Thu 31 Aug 2023 19:30:43 +0000
ROA not after:            Fri 01 Sep 2028 19:30:43 +0000
asID:                     56687
IP address blocks:        190.93.93.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2389806 (0x24772e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d85378526621fbd4956efa10478f912f0807db
        Validity
            Not Before: Aug 31 19:30:43 2023 GMT
            Not After : Sep  1 19:30:43 2028 GMT
        Subject: CN=1cfedf5992627066f5fd1513e60e952263a1489d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:18:0d:4d:41:16:fb:4e:13:4a:b3:8d:f3:20:
                    32:29:27:2e:19:c8:6b:e6:73:1c:55:25:d3:4b:02:
                    ff:60:8b:6f:cc:17:a2:30:ed:c1:da:26:67:25:16:
                    9e:57:de:66:c0:1e:23:5b:89:58:f0:2b:9c:61:fe:
                    79:3f:c1:d2:a8:c9:64:d3:85:0c:28:70:8f:b4:77:
                    59:3f:16:8b:16:f4:a3:62:44:68:1f:cf:9a:49:83:
                    a8:f6:b7:cb:9a:10:81:72:ab:a1:6d:f7:54:df:27:
                    9e:10:b1:d6:f1:ac:96:ba:45:92:9a:6f:4e:3a:9b:
                    94:77:e0:41:47:d3:11:e1:73:a4:27:34:cf:62:f6:
                    ee:0b:fb:a9:62:8e:7b:b4:70:a4:03:f3:ac:37:7c:
                    e7:15:08:09:b8:70:10:f7:1e:fc:bf:0e:04:3a:85:
                    e8:ae:4f:47:b6:cd:e5:ec:f9:e0:67:8c:52:93:91:
                    8e:1c:fa:72:cd:77:2c:80:91:9d:56:a8:23:59:9f:
                    c3:7f:28:6c:0b:a9:70:31:7a:cc:50:6e:7c:72:08:
                    a4:8d:8f:41:51:03:54:dc:4a:87:47:2a:23:78:9a:
                    bd:00:d5:16:97:0b:f0:f9:e4:1b:e1:7e:99:3b:8b:
                    e7:8a:01:96:98:07:1a:60:ff:40:2f:3c:85:72:bb:
                    5d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:78:58:E4:FE:E8:7D:C1:46:5F:9E:FA:47:99:C6:D8:D6:64:06:11
            X509v3 Authority Key Identifier:
                keyid:18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/1cfedf5992627066f5fd1513e60e952263a1489d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:54:e0:71:76:1e:55:f9:ff:32:db:95:12:eb:c0:49:7a:33:
         b0:06:7b:50:4b:74:de:8c:04:45:72:1a:ad:8f:db:15:5a:93:
         cb:dc:28:31:fe:36:ac:3f:e6:2e:00:62:90:1a:3d:1a:f1:a1:
         61:9a:23:69:84:0b:19:c9:3e:23:99:14:57:77:e1:5f:72:d1:
         5d:d3:84:fb:83:de:ee:6c:e6:32:6e:be:2e:e1:0e:ac:ca:4d:
         74:16:5d:09:d3:fc:7d:cc:d7:f2:2a:bb:e8:ee:14:b6:93:5b:
         b7:10:ba:33:e8:cf:84:93:84:64:bb:c6:89:55:06:5b:3c:5d:
         7e:2e:7d:67:33:6b:91:c6:aa:20:ac:62:bf:a2:1e:1f:63:3a:
         fb:f5:0c:a3:36:28:f3:d6:3e:59:7e:12:f9:86:b2:f0:18:22:
         90:7d:a5:a5:83:e2:fc:f2:ed:4f:9e:4b:45:16:d1:39:75:ca:
         4a:9c:8b:e3:18:3e:50:ae:8a:d0:d9:ec:f3:ea:67:3b:10:55:
         b1:37:bf:d4:1d:af:9c:f7:fe:0a:69:97:2e:b0:a6:00:cd:e3:
         ea:9d:3c:34:0f:2c:a4:33:63:f7:ee:06:5a:7c:02:22:7b:58:
         78:30:cd:ea:4f:69:b1:db:59:ff:5f:b9:18:66:43:b9:f7:79:
         e6:82:bc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 14 18:15:34 2024 by rpki-client on console-ams.rpki-client.org