Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/201db7081b6532a4c3074814dba21a4dcc8ebc91.roa
File:                     201db7081b6532a4c3074814dba21a4dcc8ebc91.roa (raw, json)
Hash identifier:          r2PZTt9UMfxt9cnXVEC6tHIK7zFTHbH5PU5r6vkSUyo=
Subject key identifier:   DD:01:91:EA:D4:86:13:5A:7F:8A:93:2F:59:E5:A3:D2:EE:F0:DD:10
Certificate issuer:       /CN=e5d85378526621fbd4956efa10478f912f0807db
Certificate serial:       24C473
Authority key identifier: 18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/201db7081b6532a4c3074814dba21a4dcc8ebc91.roa
Signing time:             Fri 01 Sep 2023 19:31:56 +0000
ROA not before:           Thu 31 Aug 2023 19:30:43 +0000
ROA not after:            Fri 01 Sep 2028 19:30:43 +0000
asID:                     197842
IP address blocks:        190.93.95.0/24 maxlen: 24
                          190.93.79.0/24 maxlen: 24
                          190.93.82.0/24 maxlen: 24
                          190.93.83.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2409587 (0x24c473)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d85378526621fbd4956efa10478f912f0807db
        Validity
            Not Before: Aug 31 19:30:43 2023 GMT
            Not After : Sep  1 19:30:43 2028 GMT
        Subject: CN=201db7081b6532a4c3074814dba21a4dcc8ebc91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:dd:b4:f9:48:7a:e4:40:fd:c6:fd:70:79:0b:
                    a5:e2:6f:33:d6:aa:76:a2:72:63:4f:8a:e0:cc:38:
                    80:a2:5e:fa:3f:98:87:d5:81:b2:b0:84:25:57:17:
                    b4:9a:08:bf:b9:d1:4e:72:fb:0c:d7:d7:7a:e9:d1:
                    93:24:35:c9:0a:a5:7a:9d:13:d9:d7:af:62:2c:23:
                    c5:09:c5:92:dc:05:5f:67:e0:ac:e6:7c:75:81:b9:
                    b4:c7:c4:82:eb:e5:93:2b:f8:ea:31:02:2a:fa:58:
                    d3:40:75:cc:9d:ad:84:28:d7:73:13:32:64:1e:39:
                    c3:2c:51:d4:eb:ee:9c:93:18:8c:2c:fb:7a:8c:bc:
                    6a:eb:f7:4e:44:fb:a9:ac:e2:37:fe:18:8b:96:9d:
                    e1:b7:a7:cf:c1:50:10:a5:b8:13:80:8b:cc:35:a9:
                    a9:32:34:8d:11:27:a9:15:66:3b:46:b9:84:3e:97:
                    a5:e8:b8:db:b9:ac:c5:2c:76:ff:43:31:2b:c4:9c:
                    75:0d:84:5a:ec:fa:1b:a5:27:04:bc:aa:51:68:e9:
                    8e:f3:8e:e5:1d:27:2d:cb:d0:12:b2:75:6d:79:90:
                    f5:05:e5:01:c9:e3:76:92:28:e7:2f:b6:b9:81:40:
                    75:d0:e8:87:4e:a4:35:67:b4:a8:f1:a4:24:b2:50:
                    23:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:01:91:EA:D4:86:13:5A:7F:8A:93:2F:59:E5:A3:D2:EE:F0:DD:10
            X509v3 Authority Key Identifier:
                keyid:18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/201db7081b6532a4c3074814dba21a4dcc8ebc91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.79.0/24
                  190.93.82.0/23
                  190.93.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:9c:31:70:96:7a:e2:37:08:c1:02:26:32:8d:87:0e:cf:d4:
         34:f4:06:7a:34:99:c2:9e:7f:20:b2:36:de:cf:9d:d1:cd:26:
         ca:67:67:94:63:f0:74:54:13:f4:93:57:a5:a0:56:86:65:4d:
         3d:a5:e9:35:ca:55:f9:f6:3b:31:63:d2:da:98:f4:17:87:e0:
         5c:e2:d5:aa:0d:4a:dc:01:c2:97:91:4b:ae:3c:ee:d4:9f:7b:
         97:62:e6:4b:12:7c:77:dd:92:53:8d:90:85:27:9b:10:1d:5b:
         8f:7e:b4:78:ca:32:4f:fc:d3:33:3c:d9:2e:45:8f:2c:f7:56:
         6f:83:47:c5:2f:aa:4d:67:bc:d8:de:3b:b5:19:d9:57:dc:55:
         b1:23:7d:48:c0:fc:28:57:40:a4:d7:e0:f6:86:11:09:3b:5f:
         72:97:fc:84:ce:e6:61:89:7a:38:60:7d:89:fc:66:4b:f0:19:
         51:4a:86:33:e1:4d:3b:a0:13:b7:93:11:3b:4c:50:18:bb:3f:
         d1:fa:11:50:3e:0d:41:e2:ea:06:9f:4f:09:d0:5a:2c:1f:a2:
         2e:1d:36:e7:a1:e6:73:5d:ce:63:d6:6c:6f:7e:ce:f8:65:c8:
         ba:62:c9:5e:4f:f9:dc:58:f8:e5:03:4f:fc:08:06:2c:a5:7b:
         cb:af:ab:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:06 2024 by rpki-client on console-fra.rpki-client.org