Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/4bc5db9fc5348bf1b0e457e875c082033223c649.roa
File:                     4bc5db9fc5348bf1b0e457e875c082033223c649.roa (raw, json)
Hash identifier:          erXQmRTIbth8A/AG7aSCXUmfQY+Cq20uHvtVxkQgGx0=
Subject key identifier:   E8:A3:79:CB:D7:97:7C:B7:43:47:6E:B1:54:C0:DA:91:A7:F7:9F:8D
Certificate issuer:       /CN=e5d85378526621fbd4956efa10478f912f0807db
Certificate serial:       24A7D4
Authority key identifier: 18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/4bc5db9fc5348bf1b0e457e875c082033223c649.roa
Signing time:             Fri 01 Sep 2023 19:31:36 +0000
ROA not before:           Thu 31 Aug 2023 19:30:43 +0000
ROA not after:            Fri 01 Sep 2028 19:30:43 +0000
asID:                     200113
IP address blocks:        190.93.88.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2402260 (0x24a7d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d85378526621fbd4956efa10478f912f0807db
        Validity
            Not Before: Aug 31 19:30:43 2023 GMT
            Not After : Sep  1 19:30:43 2028 GMT
        Subject: CN=4bc5db9fc5348bf1b0e457e875c082033223c649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2a:14:9d:be:8e:e6:a6:ac:a9:17:9f:47:c4:
                    36:b1:44:70:5e:34:88:69:94:6d:5c:fc:c3:68:70:
                    33:8f:ba:7d:e7:b6:07:1f:54:53:f6:f1:08:1c:eb:
                    d6:d3:ad:1c:9b:3e:71:1c:9b:cb:d7:79:d4:92:e7:
                    f7:e7:37:1c:d2:35:ea:d9:9d:37:89:78:b5:a8:f0:
                    8f:ee:d8:8e:b0:70:2c:ae:d2:0b:3d:39:df:30:bd:
                    e8:91:29:5a:4a:69:d1:bf:a3:55:26:1a:79:a0:54:
                    7f:65:89:aa:5a:1f:c3:80:99:94:7c:dd:05:48:a0:
                    09:ac:8c:89:22:ca:bb:69:2a:a3:9d:ca:bc:41:be:
                    31:63:58:7e:18:cd:e2:b9:96:c4:44:37:b2:99:58:
                    bd:79:0a:25:61:1e:97:d3:76:c5:cb:c9:99:1c:bb:
                    47:87:ef:36:89:68:b6:f2:9a:04:ed:42:48:48:24:
                    6c:70:74:2b:fd:ec:a5:35:e3:11:70:1f:7d:35:79:
                    17:7e:5c:0c:f4:f1:1f:7c:db:0b:a7:63:15:3b:31:
                    e1:c6:1f:94:0d:95:41:6f:ea:b7:0f:bd:8a:e1:cb:
                    48:82:50:43:ab:b8:51:8f:83:d5:07:ae:21:bf:80:
                    5f:82:d0:f0:aa:b2:82:2f:4e:99:85:e4:0d:26:0f:
                    2b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A3:79:CB:D7:97:7C:B7:43:47:6E:B1:54:C0:DA:91:A7:F7:9F:8D
            X509v3 Authority Key Identifier:
                keyid:18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/4bc5db9fc5348bf1b0e457e875c082033223c649.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:f2:ce:96:96:f1:86:ce:aa:e4:51:ed:00:28:1c:02:cf:6e:
         cd:2c:18:95:6a:f7:79:7e:a2:c3:d9:93:ef:82:ec:8b:7a:90:
         2b:18:85:28:ba:99:be:55:84:9f:2f:98:c1:b0:b5:d9:17:59:
         9b:6d:09:2c:4e:3d:ba:d8:39:1b:9c:16:76:31:af:42:17:61:
         56:fa:91:2c:d4:5a:e4:7d:8e:5b:01:3f:8f:84:37:2f:b5:e7:
         8e:e8:d8:b6:b2:01:c6:5c:fe:3c:15:27:bf:6e:9f:6c:51:de:
         78:99:92:9e:66:cd:8a:77:6d:41:5c:8e:d2:7e:d9:0b:12:6c:
         85:4a:2b:73:9c:f5:14:1e:3c:bc:8b:27:bc:71:d5:23:12:b8:
         11:92:d2:45:28:1e:23:6d:d2:83:2b:d7:fe:eb:9f:1b:c4:61:
         35:99:ed:4b:ee:a7:94:1d:38:83:65:00:4f:33:54:fc:35:3c:
         f3:36:9b:60:e0:30:11:a8:48:64:fe:af:4c:3e:43:f9:73:47:
         60:70:e4:85:3b:c3:27:0a:d6:41:2a:af:8b:3f:e1:a5:d8:85:
         c9:3b:aa:e4:38:d5:51:28:d7:8c:99:61:20:d3:8f:fd:de:04:
         d7:bd:bf:59:07:72:2c:01:18:5b:07:bb:5e:9f:df:83:05:57:
         d2:d8:86:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 14 18:15:34 2024 by rpki-client on console-ams.rpki-client.org