Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/2198a8ffaff223bea17776c09bc4c5560872c65f.roa
File:                     2198a8ffaff223bea17776c09bc4c5560872c65f.roa (raw, json)
Hash identifier:          J18oPPUnXT/irEJNcpfwYPl1ynVgfgsiZBxXc1PHr68=
Subject key identifier:   E9:F8:8A:D5:DB:C9:E9:57:06:8C:D5:08:74:F1:33:CA:C6:8F:B8:44
Certificate issuer:       /CN=e5d85378526621fbd4956efa10478f912f0807db
Certificate serial:       2889AC
Authority key identifier: 18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/2198a8ffaff223bea17776c09bc4c5560872c65f.roa
Signing time:             Fri 22 Dec 2023 13:27:27 +0000
ROA not before:           Fri 22 Dec 2023 13:27:27 +0000
ROA not after:            Mon 22 Dec 2025 13:27:27 +0000
asID:                     834
IP address blocks:        190.93.95.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2656684 (0x2889ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d85378526621fbd4956efa10478f912f0807db
        Validity
            Not Before: Dec 22 13:27:27 2023 GMT
            Not After : Dec 22 13:27:27 2025 GMT
        Subject: CN=2198a8ffaff223bea17776c09bc4c5560872c65f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:59:88:69:42:72:aa:78:77:ab:a3:77:01:f0:
                    53:c6:bf:b8:47:cc:2f:0d:31:c7:d0:5b:2a:6a:a8:
                    bb:ea:d8:0d:29:5d:4f:bd:f6:a9:19:ef:79:ad:c9:
                    c9:f6:df:ae:cd:2e:cf:42:4c:f5:da:1c:bf:d5:82:
                    44:94:e7:3c:7b:1d:c6:f0:b5:e3:c7:ba:86:5b:52:
                    e4:82:0b:49:1c:5a:02:b9:bc:0e:2f:24:52:39:ab:
                    c7:66:65:04:1e:21:fc:36:15:45:69:1a:b6:39:f8:
                    80:8d:6c:63:bc:bb:b5:82:fa:bd:48:16:a0:e4:58:
                    6f:0b:0a:ea:1d:18:12:ed:a2:15:e9:7a:14:08:23:
                    5a:65:c6:11:09:b0:a0:ce:c6:e5:61:99:b3:ec:dc:
                    9d:c7:a9:8c:36:47:89:ab:a4:be:d5:f6:49:2b:b0:
                    54:fc:ab:08:96:9c:69:4c:6d:af:90:9f:d3:42:fa:
                    60:85:8a:ab:47:7b:15:0f:15:fb:04:9c:a5:72:b0:
                    22:cf:27:63:bc:3a:fc:ce:74:08:6c:5e:f2:5b:b8:
                    b3:c1:93:f1:42:02:cd:76:de:6a:06:16:19:cc:d8:
                    4d:0f:2f:24:c6:66:ae:ee:e0:b5:97:1d:72:04:32:
                    cd:25:e4:86:02:02:23:59:70:b5:3c:93:f8:8c:2b:
                    f8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F8:8A:D5:DB:C9:E9:57:06:8C:D5:08:74:F1:33:CA:C6:8F:B8:44
            X509v3 Authority Key Identifier:
                keyid:18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/2198a8ffaff223bea17776c09bc4c5560872c65f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:05:37:47:6b:fd:82:93:22:89:41:4e:44:8f:6e:cc:ba:9a:
         67:6c:91:90:ec:29:44:65:4c:4a:66:ef:07:8c:01:19:27:14:
         76:82:f0:46:74:87:a9:7d:e8:bb:01:53:ee:69:da:7b:80:64:
         da:08:1c:67:12:77:aa:b9:aa:c4:3d:c7:96:f8:0c:99:ce:88:
         1a:8b:22:84:fa:5e:91:31:7a:5e:41:d3:e4:dd:1b:66:1a:cc:
         fc:eb:63:50:5c:b7:96:9e:ac:c4:13:a0:29:6c:fd:91:4c:5a:
         56:c6:86:ca:61:2a:d5:1a:75:1e:97:9c:19:71:b7:47:a5:07:
         94:cb:c4:c8:1f:83:79:72:73:84:7a:ad:76:3e:ea:00:1c:a5:
         5c:6c:32:e1:86:97:f9:9c:d4:9f:13:3c:d3:f4:03:98:ae:0e:
         44:84:80:cc:8f:89:e1:f8:eb:6c:2e:74:ce:fc:cd:a7:8c:95:
         60:d5:c0:b7:a1:fa:0e:85:c7:62:90:72:8c:de:c9:fa:2e:92:
         d2:f3:5f:aa:ec:d4:2f:cf:0e:0a:68:ab:7c:03:aa:0e:33:7c:
         07:7f:b5:75:0c:2a:e1:46:73:89:72:4b:be:6d:a1:87:6f:71:
         74:b2:a3:6b:06:c5:5f:7a:46:60:4b:d3:4b:c4:51:9b:c7:f3:
         93:e3:32:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 14 18:19:14 2024 by rpki-client on console-fra.rpki-client.org