Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/4085c753b5a330dd80e01d15105bfc09f0759701.roa
File:                     4085c753b5a330dd80e01d15105bfc09f0759701.roa (raw, json)
Hash identifier:          sEaIWz7ydeXV+mhQyP/0+yj0auoAfmcXu3V83fXtXVk=
Subject key identifier:   23:05:9A:93:60:76:60:22:2B:66:3D:3A:CC:3C:52:00:5C:5B:27:C2
Certificate issuer:       /CN=e5d85378526621fbd4956efa10478f912f0807db
Certificate serial:       246F0C
Authority key identifier: 18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/4085c753b5a330dd80e01d15105bfc09f0759701.roa
Signing time:             Fri 01 Sep 2023 19:30:55 +0000
ROA not before:           Thu 31 Aug 2023 19:30:43 +0000
ROA not after:            Fri 01 Sep 2028 19:30:43 +0000
asID:                     27789
IP address blocks:        190.93.96.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2387724 (0x246f0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d85378526621fbd4956efa10478f912f0807db
        Validity
            Not Before: Aug 31 19:30:43 2023 GMT
            Not After : Sep  1 19:30:43 2028 GMT
        Subject: CN=4085c753b5a330dd80e01d15105bfc09f0759701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0a:4c:b3:33:d9:93:3d:0f:f5:0a:1a:2f:28:
                    4e:aa:0b:d3:92:7c:11:32:37:62:aa:2b:85:76:a1:
                    8b:10:61:68:76:fd:ed:31:be:6c:e2:e8:34:7a:59:
                    3c:15:7e:b0:66:87:1b:e3:0e:b3:dc:40:b1:7c:57:
                    eb:0e:17:0c:ff:f8:c7:5b:82:6d:6c:72:c7:ad:4b:
                    b8:9b:4a:32:b6:9d:00:26:ec:7f:1c:e0:c2:bb:cf:
                    4f:f3:71:de:3c:20:d6:1b:a5:fa:c0:3c:13:15:83:
                    f6:cc:33:a5:5a:69:ef:e7:05:97:46:11:96:29:ce:
                    dc:02:2d:1e:af:f6:cb:e3:13:f0:0e:23:90:84:44:
                    76:4a:db:ae:78:39:ea:77:75:54:82:52:30:30:43:
                    42:1f:ec:88:bf:54:1b:8d:70:af:b4:f5:82:7f:d9:
                    f9:4e:93:b4:22:a9:e2:3c:b9:2c:d8:d0:e5:82:cd:
                    db:be:2b:2c:fb:33:94:ab:60:b5:81:92:14:8d:3f:
                    7d:db:0c:80:07:71:29:de:6c:4f:ac:81:70:67:36:
                    13:56:1a:96:02:28:4c:24:b2:87:66:61:f4:4e:dd:
                    88:1e:dc:c6:c7:d2:96:34:03:d0:ad:5b:d0:79:18:
                    3e:ad:54:0b:3f:4c:4a:32:84:e3:c8:79:d8:eb:85:
                    9e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:05:9A:93:60:76:60:22:2B:66:3D:3A:CC:3C:52:00:5C:5B:27:C2
            X509v3 Authority Key Identifier:
                keyid:18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/4085c753b5a330dd80e01d15105bfc09f0759701.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6a:c9:3d:6b:64:33:d0:6a:bd:11:07:10:a8:d4:8a:37:86:f2:
         1c:88:b7:4c:ab:4e:44:79:34:66:9e:fe:81:fb:9e:6e:60:5c:
         9a:65:1a:fb:0a:ec:3f:6e:5c:21:55:8c:1d:be:46:28:ec:dc:
         1c:e2:62:34:2e:89:00:cf:9f:1e:90:28:42:ca:69:b2:83:25:
         ee:9c:7b:a5:d7:8d:b3:ee:ed:b4:47:33:5c:4f:33:9d:50:00:
         29:0a:d1:15:f7:6c:b7:9f:8e:00:52:f0:ca:f2:2f:d5:9a:55:
         45:23:ef:7a:87:3d:52:f6:78:a4:fc:36:c1:13:4a:36:e5:37:
         03:83:08:14:0e:cf:4b:60:4f:4c:2f:b2:8c:6f:bb:3d:97:98:
         65:c5:82:8a:28:7e:8c:88:75:57:0f:68:46:3c:bc:dc:39:df:
         02:7f:54:44:9d:0b:78:b3:09:39:b3:ab:40:c8:c5:ec:8f:e5:
         62:54:d3:96:47:ce:50:de:16:4c:d9:93:8c:de:75:cc:a2:c4:
         79:25:62:57:af:1a:97:7f:2d:08:55:a6:42:1c:2b:44:60:98:
         33:5c:5e:59:fb:8e:2e:87:f8:10:02:92:5c:50:b5:c7:f1:27:
         7a:19:83:69:59:0d:7b:c1:49:1c:ed:8d:6f:f7:75:26:41:06:
         e0:54:02:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 14 18:19:14 2024 by rpki-client on console-fra.rpki-client.org