Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/3802fe9497a1ab0b28da89fca8b9fc6a21cf6e16.roa
File:                     3802fe9497a1ab0b28da89fca8b9fc6a21cf6e16.roa (raw, json)
Hash identifier:          Ex3RjI0piwYM/OVJUiF5p59iFL6+e4HaQMKKgiRCh34=
Subject key identifier:   E7:11:C9:D0:6E:5B:51:81:EA:E2:AF:3E:15:BB:5B:25:11:E2:6F:BB
Certificate issuer:       /CN=e5d85378526621fbd4956efa10478f912f0807db
Certificate serial:       26117E
Authority key identifier: 18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/3802fe9497a1ab0b28da89fca8b9fc6a21cf6e16.roa
Signing time:             Thu 05 Oct 2023 13:44:15 +0000
ROA not before:           Wed 04 Oct 2023 13:44:15 +0000
ROA not after:            Sun 05 Oct 2025 13:44:15 +0000
asID:                     834
IP address blocks:        190.93.87.0/24 maxlen: 24
                          190.93.79.0/24 maxlen: 24
                          190.93.82.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2494846 (0x26117e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d85378526621fbd4956efa10478f912f0807db
        Validity
            Not Before: Oct  4 13:44:15 2023 GMT
            Not After : Oct  5 13:44:15 2025 GMT
        Subject: CN=3802fe9497a1ab0b28da89fca8b9fc6a21cf6e16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c6:ea:73:5b:7e:29:76:e4:8e:96:30:2f:11:
                    03:1f:08:65:d1:7f:ec:0e:b7:32:42:71:06:48:c6:
                    40:0c:59:c9:6c:c8:07:58:39:52:1b:35:4f:13:07:
                    37:29:10:55:21:c9:49:a4:ab:35:45:92:0b:40:22:
                    97:2b:be:55:43:23:cc:a5:69:87:40:65:91:e7:54:
                    a6:33:f5:6b:be:5b:41:10:90:d4:9d:58:b8:f6:91:
                    fe:98:5e:5b:7a:31:9f:4f:77:89:1e:83:c6:b9:f7:
                    39:d1:46:9a:f6:65:95:10:f0:aa:ba:4b:c4:2a:5d:
                    b7:f1:3e:46:f1:ea:a2:62:1c:cf:52:9a:2e:1f:d9:
                    39:35:a9:bf:25:5e:a0:99:99:87:e7:41:13:03:3d:
                    d8:ba:02:1a:6e:7b:a9:c4:82:7c:61:c0:c7:db:7d:
                    cf:3b:99:bd:8e:01:a4:03:7b:f0:1e:49:9e:ee:1a:
                    66:45:62:b7:a8:4d:fe:3d:af:2c:9f:43:87:92:fa:
                    5e:3b:82:61:59:60:35:24:85:81:fb:d3:ec:0d:20:
                    62:fb:e7:89:ba:8b:d1:49:46:54:df:b8:db:82:92:
                    8a:8b:7c:b7:98:44:f0:3a:5b:8f:c2:e2:16:b6:3f:
                    7c:bb:5c:f3:03:6c:44:7b:ef:b8:b3:ad:bf:4d:7e:
                    26:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:11:C9:D0:6E:5B:51:81:EA:E2:AF:3E:15:BB:5B:25:11:E2:6F:BB
            X509v3 Authority Key Identifier:
                keyid:18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/3802fe9497a1ab0b28da89fca8b9fc6a21cf6e16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.79.0/24
                  190.93.82.0/24
                  190.93.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:31:73:85:3a:aa:23:88:46:29:b1:55:d0:86:d9:e2:51:e1:
         8b:57:dd:22:6b:3b:11:1f:39:b7:b5:c0:53:d1:68:19:76:dc:
         78:9f:6d:f7:8f:8c:01:11:5f:bf:fa:56:ff:88:01:eb:60:34:
         ab:34:82:f8:e0:70:fb:55:b7:61:da:12:38:cd:86:79:9f:6e:
         0f:ea:1a:c6:39:e7:93:22:3d:69:fb:c3:95:f4:26:42:74:d8:
         10:a4:d3:21:e5:70:91:66:ec:72:7d:1d:e1:1d:3f:4a:c8:a7:
         50:c0:9d:ab:b6:67:8d:d2:3c:37:70:e8:7c:c6:8d:ef:ff:de:
         2a:20:00:2e:f3:8b:56:6a:0f:73:e4:77:0a:19:96:6c:93:16:
         c2:a9:e0:c6:12:36:b2:d3:99:a4:77:c5:cd:90:ea:84:cf:40:
         be:24:61:ac:bc:2f:5d:a0:1f:2c:67:7a:eb:9b:b0:8c:8e:a4:
         a1:86:c2:24:b5:43:c0:85:23:15:e2:c7:cd:41:6b:cc:d4:d7:
         d9:d5:19:05:72:2b:74:c4:6e:df:f8:03:f3:3c:50:1a:7f:61:
         da:fc:7f:ad:df:24:30:16:97:44:c3:fa:2a:f3:5b:9e:13:2f:
         f2:06:8e:e8:a9:a2:5a:e1:0b:c3:8f:28:5b:28:05:d6:3f:51:
         31:91:48:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:06 2024 by rpki-client on console-fra.rpki-client.org