Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/412bdaf44324d5d588d3b734d516a49c3b7973c8.roa
File:                     412bdaf44324d5d588d3b734d516a49c3b7973c8.roa (raw, json)
Hash identifier:          OYWCDvNwXxdRWEAk6R52chh9Z5bWcywJD+R2PC2aers=
Subject key identifier:   78:02:07:7E:20:D8:3B:0E:87:7F:CE:09:62:86:2F:71:12:20:FD:A5
Certificate issuer:       /CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
Certificate serial:       2BEF36
Authority key identifier: FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/412bdaf44324d5d588d3b734d516a49c3b7973c8.roa
Signing time:             Thu 28 Mar 2024 14:55:57 +0000
ROA not before:           Thu 28 Mar 2024 14:55:57 +0000
ROA not after:            Sat 28 Mar 2026 14:55:57 +0000
asID:                     14445
IP address blocks:        190.93.92.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2879286 (0x2bef36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
        Validity
            Not Before: Mar 28 14:55:57 2024 GMT
            Not After : Mar 28 14:55:57 2026 GMT
        Subject: CN=412bdaf44324d5d588d3b734d516a49c3b7973c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:66:ca:8c:ec:11:6b:10:04:32:b3:21:f3:4c:
                    5f:31:24:3b:ae:f7:c3:b6:8a:83:e8:43:84:fd:9a:
                    3a:01:42:af:da:2c:c7:ba:36:e3:4e:4d:b1:1e:ac:
                    23:6d:ab:5e:8a:f2:4c:15:26:e0:fb:2d:ad:ec:37:
                    87:15:5c:4d:99:93:ad:5e:8b:b7:a4:29:0a:70:3d:
                    7c:e2:36:16:66:7e:c8:04:52:ed:3a:f6:a7:9d:71:
                    dc:c6:dc:1c:51:b6:81:6d:6c:5c:95:fe:c6:8c:ea:
                    fb:b7:31:f2:b7:bf:43:39:e2:51:1c:d7:65:96:87:
                    dd:59:f6:b9:12:9c:0c:93:c3:4e:9d:0c:bc:f1:50:
                    fb:1c:cf:df:3d:c0:46:8c:29:c7:26:af:9d:06:c4:
                    f6:27:f1:dc:4f:e4:fe:0a:af:e1:28:70:73:d6:d6:
                    7a:ad:de:fe:5d:da:d0:c9:cb:01:67:8f:0c:1c:77:
                    98:1c:02:89:e2:d7:90:13:f9:f5:54:8f:c4:79:d6:
                    c8:20:b0:89:8f:28:a9:9b:74:cc:f6:6b:05:09:09:
                    00:35:96:c5:24:7f:8b:40:83:61:e8:82:15:17:d8:
                    1f:a5:e6:76:3a:56:69:31:e7:4d:0b:9e:0e:33:80:
                    f9:2b:e9:f8:28:4c:ba:0d:6e:e4:3c:62:25:7b:0e:
                    39:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:02:07:7E:20:D8:3B:0E:87:7F:CE:09:62:86:2F:71:12:20:FD:A5
            X509v3 Authority Key Identifier:
                keyid:FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/412bdaf44324d5d588d3b734d516a49c3b7973c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:05:49:b0:01:2f:e0:01:3f:f7:f8:ef:15:1c:9d:26:57:0c:
         2a:79:f3:67:dd:23:17:13:33:65:14:d0:2f:ee:ca:33:70:62:
         99:1c:2a:af:7d:d4:81:f9:2d:97:ba:fb:29:67:0f:8e:72:5b:
         99:0e:b3:34:2c:d7:e2:06:10:92:d3:79:28:b5:be:27:69:29:
         54:15:38:05:87:a8:2d:31:9f:a8:de:95:5a:62:4d:94:18:95:
         fa:f7:ce:d0:01:85:09:af:5b:31:6e:a6:c1:d3:5d:5c:fd:2c:
         ba:70:a7:32:48:58:b7:14:c7:88:42:23:63:89:65:f9:03:5a:
         4d:6d:5e:87:91:3f:26:2d:07:b6:6f:69:ca:97:1d:17:b4:80:
         1e:c1:c6:b4:27:5f:6b:2d:ed:cd:86:d0:49:b2:d0:fa:c1:96:
         e2:7e:c0:f3:64:77:ed:e7:e0:55:ff:fc:01:39:f3:f6:ec:d8:
         08:47:b7:61:24:1a:f5:7f:93:3e:86:9e:c1:e1:a3:cf:d2:75:
         36:3d:10:05:5c:f6:bd:03:68:8f:78:40:23:f5:5f:b9:e5:f7:
         99:ec:c8:3b:99:27:43:07:20:d2:c4:96:00:ae:8c:3d:44:de:
         46:2d:24:d7:63:64:91:db:dd:2e:7f:87:40:0c:9f:4a:75:92:
         73:5a:8d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:47 2024 by rpki-client on console-ams.rpki-client.org