Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/2af0da20a67b56333aa44a48febb96090edb322d.roa
File:                     2af0da20a67b56333aa44a48febb96090edb322d.roa (raw, json)
Hash identifier:          2R3r1jW0uKZJTzG9z29mg/yd0uXTcBt+anZQkn4qzHc=
Subject key identifier:   68:96:71:E0:F2:CC:3D:84:61:CC:E1:6D:D9:7A:B0:B8:CA:8A:1E:D2
Certificate issuer:       /CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
Certificate serial:       2A7BAB
Authority key identifier: FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/2af0da20a67b56333aa44a48febb96090edb322d.roa
Signing time:             Wed 14 Feb 2024 13:40:00 +0000
ROA not before:           Wed 14 Feb 2024 13:39:34 +0000
ROA not after:            Wed 14 Feb 2029 13:39:34 +0000
asID:                     26619
IP address blocks:        190.93.91.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2784171 (0x2a7bab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
        Validity
            Not Before: Feb 14 13:39:34 2024 GMT
            Not After : Feb 14 13:39:34 2029 GMT
        Subject: CN=2af0da20a67b56333aa44a48febb96090edb322d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:db:9f:6a:28:fd:5a:46:e8:a3:ad:9f:ac:f5:
                    5e:0d:89:68:0a:d3:9f:81:4c:22:ac:b2:ac:12:8f:
                    ba:94:a8:25:31:03:04:da:75:de:46:c3:8c:8d:51:
                    d8:12:3b:35:9b:f2:c7:cd:6a:1c:d2:1b:b2:d4:e8:
                    d6:a5:da:31:f3:02:55:1d:58:b2:85:98:b1:b3:43:
                    c5:93:ff:05:06:52:76:96:fd:8e:10:12:c7:d9:d5:
                    e0:d7:93:59:8d:90:73:cf:ca:ce:3a:79:a9:23:05:
                    44:26:87:1c:30:2e:86:6f:b5:1f:de:59:e4:0d:35:
                    f1:72:57:76:60:9e:8a:16:1c:0d:ec:6b:49:fa:dc:
                    85:c9:fb:af:0f:a6:ed:30:a7:3d:10:20:c6:9e:4f:
                    5b:a9:68:c4:0a:2c:7f:ba:42:96:fc:09:89:92:b7:
                    4d:d7:09:b5:65:3b:4b:32:53:4c:67:29:ec:8b:ef:
                    c2:0c:f2:4a:51:83:0e:d0:d6:cf:a6:74:b9:ae:e8:
                    72:30:27:a9:f1:93:0c:1f:58:24:df:a4:4c:92:d5:
                    c5:43:ca:ea:6c:e5:c4:63:7a:d9:01:ba:38:8d:26:
                    78:11:a9:48:b7:72:ac:ac:6d:ae:f2:5b:2c:4f:53:
                    fc:2f:01:c1:3a:65:4f:37:25:36:67:98:8b:a6:3a:
                    f4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:96:71:E0:F2:CC:3D:84:61:CC:E1:6D:D9:7A:B0:B8:CA:8A:1E:D2
            X509v3 Authority Key Identifier:
                keyid:FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/2af0da20a67b56333aa44a48febb96090edb322d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:e0:34:7e:9b:5d:7f:42:0d:79:e6:e5:81:94:eb:a4:37:ef:
         72:77:56:b4:61:2f:bc:1e:19:21:b2:85:95:80:6e:43:a5:e9:
         e9:96:c8:b2:cc:81:1e:bb:2c:b4:53:0b:ee:98:20:00:c3:90:
         a2:47:37:e6:6a:f4:3d:96:7f:c7:57:52:ef:d6:ef:35:fc:19:
         fa:bc:ba:61:43:42:e7:ba:cd:cb:8c:70:5b:4b:4a:93:96:02:
         46:e7:a6:be:43:57:c0:fd:8f:02:b8:8d:59:dc:28:dc:1f:b5:
         74:c5:aa:db:e0:42:78:de:08:7d:da:31:9b:51:32:d3:3e:c8:
         90:38:87:7c:72:38:04:d2:ed:31:b3:3d:0a:55:38:2b:95:d3:
         e2:ee:70:ee:94:6b:c9:03:49:d8:3a:30:32:6a:b2:7e:ae:36:
         a8:a1:51:da:19:e9:b0:86:0f:50:6c:e0:b4:e9:93:69:1b:8c:
         3f:b1:0f:c4:46:8d:1d:43:16:eb:88:a5:6d:28:fa:b2:88:b3:
         88:ea:22:5b:e8:f2:eb:f5:81:8e:26:04:13:9d:e6:cf:f6:53:
         5c:f9:c5:74:33:de:d9:f4:73:a9:bf:29:29:ed:10:ac:a1:8f:
         65:94:87:9e:91:42:29:68:72:a4:23:ad:4c:8e:e6:1f:b4:be:
         f6:1a:96:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:30 2024 by rpki-client on console-fra.rpki-client.org