Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/4de43255f0e76efa8b5f79cd888757cdde20833a.roa
File:                     4de43255f0e76efa8b5f79cd888757cdde20833a.roa (raw, json)
Hash identifier:          iLHJ+gPITM2rzbEtA9GVExzN5UNZLITS9S7AlpjLesU=
Subject key identifier:   44:D3:A9:3F:5E:0D:34:A9:DD:48:45:59:A5:CE:62:BF:B7:B5:64:52
Certificate issuer:       /CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
Certificate serial:       2A6EFD
Authority key identifier: FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/4de43255f0e76efa8b5f79cd888757cdde20833a.roa
Signing time:             Wed 14 Feb 2024 13:39:54 +0000
ROA not before:           Wed 14 Feb 2024 13:39:34 +0000
ROA not after:            Wed 14 Feb 2029 13:39:34 +0000
asID:                     63375
IP address blocks:        190.93.95.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2780925 (0x2a6efd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
        Validity
            Not Before: Feb 14 13:39:34 2024 GMT
            Not After : Feb 14 13:39:34 2029 GMT
        Subject: CN=4de43255f0e76efa8b5f79cd888757cdde20833a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ac:2d:a0:de:74:89:71:46:f8:cd:99:f0:8f:
                    96:e7:67:90:af:ea:ff:a2:88:2b:bd:a8:f9:37:c1:
                    13:85:51:32:8f:6d:9b:c7:ee:da:90:a4:8b:24:71:
                    dc:0c:67:23:23:1f:77:b1:5e:61:66:b5:6e:a3:26:
                    82:dd:55:74:9a:41:61:50:a8:fb:22:80:cb:11:f4:
                    8b:67:89:4d:29:3b:bb:9e:1b:26:6a:b8:67:cf:f4:
                    b7:6d:56:66:a5:ca:12:55:e2:cc:42:61:7a:50:cd:
                    e5:85:a7:7d:31:ed:f0:89:73:a8:c8:5e:36:a6:b0:
                    50:40:e0:4a:a4:10:f5:72:51:7b:2e:cc:35:7f:25:
                    7d:d6:35:7a:aa:07:52:10:2b:95:8b:b3:d2:75:7e:
                    89:e1:b4:4d:0c:f8:6e:10:89:43:5c:25:d8:7c:1b:
                    fb:45:13:4d:d3:16:70:2e:4a:18:5f:1d:a2:8b:c3:
                    c3:96:6c:40:e0:f0:fb:d1:89:0f:60:e8:07:8d:d6:
                    2a:64:e8:fa:de:6c:0a:f3:0f:9f:07:f0:6e:55:c8:
                    b7:e8:07:01:1b:c8:a4:dd:fd:d6:c2:25:7f:40:dd:
                    37:d1:d5:61:a5:d5:e1:5e:29:ad:78:c1:03:ba:b2:
                    cc:4e:82:a4:69:7a:62:9f:87:c5:f6:26:46:32:7c:
                    9c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D3:A9:3F:5E:0D:34:A9:DD:48:45:59:A5:CE:62:BF:B7:B5:64:52
            X509v3 Authority Key Identifier:
                keyid:FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/4de43255f0e76efa8b5f79cd888757cdde20833a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:cd:9b:e2:df:41:ad:0e:d8:ea:93:c0:ff:89:fd:b8:9e:69:
         52:08:b0:07:6e:61:b4:a9:33:8a:de:04:a5:bc:ef:62:6a:fd:
         92:ce:da:c9:ce:cf:c0:ae:e9:29:2f:18:c7:e0:ec:ca:9b:e0:
         5b:6b:91:65:64:05:e2:0f:b6:a9:fb:54:fd:1d:72:1d:0d:db:
         bc:41:63:8e:c6:7f:97:df:b4:10:cf:c1:e0:47:43:09:db:a2:
         f4:74:06:4d:f6:aa:b1:51:34:ce:e1:52:99:3d:f9:0e:5a:b9:
         45:b4:25:9d:39:0c:06:6a:a2:46:b9:60:71:55:f2:77:37:e7:
         b2:f0:41:f2:4f:08:77:12:fe:60:b4:5a:4a:74:86:f4:c0:78:
         6c:62:4e:bf:f5:52:4e:7f:05:8d:4d:a4:66:da:a8:c7:c9:15:
         af:e5:d2:5a:ae:bd:25:89:d9:e5:90:75:02:70:36:7b:c0:b5:
         f3:df:48:64:a4:ff:3f:58:75:bd:2c:d4:1c:a7:8f:df:13:67:
         7d:0b:67:2c:1a:9f:fb:d6:f2:36:9f:eb:0e:ef:1e:93:1c:f5:
         f8:d1:7e:48:99:ca:8d:76:f0:49:4e:40:94:05:a9:6a:a6:0b:
         c4:46:f4:a1:37:e5:fb:7c:e8:08:35:26:66:d0:b0:1d:a7:e6:
         f4:11:a9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:06 2024 by rpki-client on console-fra.rpki-client.org