Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/471cfff3aa12202302d766037396405baeb65afb.roa
File:                     471cfff3aa12202302d766037396405baeb65afb.roa (raw, json)
Hash identifier:          Yli5TMOScdrH8RF6/YP2vjFfLo3DDckKpnShBNCFvhM=
Subject key identifier:   E7:52:B6:BE:43:CF:B1:9D:8F:78:D2:48:31:A5:9D:59:EC:41:C4:2F
Certificate issuer:       /CN=e5d85378526621fbd4956efa10478f912f0807db
Certificate serial:       248F22
Authority key identifier: 18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/471cfff3aa12202302d766037396405baeb65afb.roa
Signing time:             Fri 01 Sep 2023 19:31:26 +0000
ROA not before:           Thu 31 Aug 2023 19:30:43 +0000
ROA not after:            Fri 01 Sep 2028 19:30:43 +0000
asID:                     199487
IP address blocks:        190.93.68.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2395938 (0x248f22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d85378526621fbd4956efa10478f912f0807db
        Validity
            Not Before: Aug 31 19:30:43 2023 GMT
            Not After : Sep  1 19:30:43 2028 GMT
        Subject: CN=471cfff3aa12202302d766037396405baeb65afb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:63:fa:e1:cc:e3:e8:90:b0:0f:a6:ad:25:88:
                    d9:8c:52:e7:d6:1f:ab:84:7e:90:1f:d0:42:eb:22:
                    37:29:fe:d2:ae:68:e5:28:17:64:4c:a2:8e:a5:48:
                    fc:83:f9:3d:b5:73:b2:28:54:41:d9:56:50:b7:a3:
                    d4:72:14:04:a1:ef:da:e4:40:6d:d5:99:df:bb:61:
                    8f:c2:ea:12:93:c6:25:cd:39:68:f6:d9:5e:c6:e7:
                    a4:2a:4f:73:23:f5:e4:40:10:90:16:06:f4:3a:7e:
                    3e:fb:3c:27:79:a1:a2:52:96:92:eb:af:a0:51:19:
                    c3:2a:28:28:01:46:98:67:b4:38:28:06:48:b9:f7:
                    4d:d0:6d:00:f2:36:7c:50:4d:9a:80:4f:e8:7c:12:
                    9d:f1:c5:4c:cc:d0:0a:b2:e0:d8:c9:df:a7:4a:85:
                    80:93:1f:b6:30:0b:fe:d4:04:78:47:b4:f7:78:83:
                    d2:6c:bb:93:7c:64:56:ac:53:1f:55:a5:61:96:b0:
                    23:66:28:c9:e1:09:08:37:f6:4c:53:db:a9:9e:3b:
                    91:56:fe:cc:55:5d:dc:d2:d0:6d:72:92:f7:32:ab:
                    3f:85:f1:59:b5:f2:1e:d4:96:50:88:1c:6f:38:23:
                    36:cd:35:05:58:ce:85:0a:c6:17:77:92:5e:80:70:
                    0c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:52:B6:BE:43:CF:B1:9D:8F:78:D2:48:31:A5:9D:59:EC:41:C4:2F
            X509v3 Authority Key Identifier:
                keyid:18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/471cfff3aa12202302d766037396405baeb65afb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:ca:b8:16:f2:36:fc:d1:59:56:25:01:be:d6:0e:47:25:da:
         52:81:f8:ba:7b:b0:2a:fe:0e:ba:96:4a:4a:b9:21:7f:04:b9:
         4b:c6:98:63:cd:58:79:e2:62:96:ac:b3:0e:f4:7b:63:28:8b:
         a1:41:56:65:57:57:2f:e7:1c:5c:7c:90:02:e1:cb:ec:e0:4e:
         fb:73:4e:b9:e2:d8:9e:d1:91:90:f6:d5:d2:8f:88:35:f9:e7:
         75:e2:80:52:5b:71:bc:30:66:aa:cd:c9:35:35:5f:f1:51:a0:
         0d:70:70:f4:ef:04:13:4f:28:d4:78:7c:72:97:32:3b:00:4b:
         69:9b:2b:1e:36:a4:54:e6:61:7b:db:53:2d:54:77:b7:e2:31:
         16:96:3b:4f:88:1b:7e:99:f9:04:e3:d9:2c:b8:f2:86:e2:21:
         0d:93:a2:49:db:2f:43:16:54:4d:1f:dc:c9:13:11:a1:e2:ca:
         53:68:60:45:1b:53:60:74:33:eb:7f:a9:bc:f7:55:c2:c6:33:
         f5:ae:56:a8:b8:25:0d:a3:c3:8a:4f:95:9e:ff:a5:68:97:f5:
         5d:13:00:1a:22:b1:ce:9c:19:3b:b1:3c:d1:f9:98:e5:43:68:
         b9:f1:0d:77:08:f5:e2:d6:56:3a:22:20:10:0f:dc:09:43:d8:
         66:7e:f7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 14 18:19:14 2024 by rpki-client on console-fra.rpki-client.org