Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/53b9e52a61fbcb4a14f99f0ad48bb654efb0a804.roa
File:                     53b9e52a61fbcb4a14f99f0ad48bb654efb0a804.roa (raw, json)
Hash identifier:          gzG3yr83h+7pEz7wt/pUbLpJQp2D4ZixlGlftBu5vUU=
Subject key identifier:   E0:5E:44:14:42:DA:FE:B3:29:49:3E:FE:F1:79:B9:6D:B1:72:C9:6B
Certificate issuer:       /CN=e5d85378526621fbd4956efa10478f912f0807db
Certificate serial:       288E80
Authority key identifier: 18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/53b9e52a61fbcb4a14f99f0ad48bb654efb0a804.roa
Signing time:             Fri 22 Dec 2023 13:28:23 +0000
ROA not before:           Fri 22 Dec 2023 13:28:22 +0000
ROA not after:            Mon 22 Dec 2025 13:28:22 +0000
asID:                     7029
IP address blocks:        190.93.79.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2657920 (0x288e80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d85378526621fbd4956efa10478f912f0807db
        Validity
            Not Before: Dec 22 13:28:22 2023 GMT
            Not After : Dec 22 13:28:22 2025 GMT
        Subject: CN=53b9e52a61fbcb4a14f99f0ad48bb654efb0a804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f4:98:d7:93:af:b2:6d:8c:05:2f:96:d2:13:
                    fa:f1:b2:57:60:15:19:fd:d3:0e:9c:c2:d6:c7:47:
                    e2:4f:c8:b5:59:81:71:13:77:bb:19:ff:93:f6:70:
                    25:83:f9:fc:cd:bd:86:3b:23:a5:cc:93:86:1f:2a:
                    d0:53:51:fc:7c:49:f5:42:aa:a0:7f:c4:8b:f3:d6:
                    7f:5d:fa:63:4c:9b:6a:a2:2f:69:05:23:3e:76:fe:
                    44:aa:9f:15:51:d0:d1:67:58:43:a4:d8:19:78:1e:
                    46:69:4a:fe:98:cf:6c:e8:76:59:aa:fe:30:c4:22:
                    c0:63:3b:69:21:16:5f:8b:40:ca:62:76:e3:6d:78:
                    03:8d:17:17:d7:db:c6:78:ac:b3:a6:23:0a:bc:00:
                    0a:40:d9:4e:29:7d:9f:e4:04:ec:1f:96:5e:7e:30:
                    ac:5a:dc:2e:b3:57:f2:e3:15:d3:d4:db:49:bf:48:
                    91:0e:36:67:5e:48:e4:54:f8:56:84:3f:1f:df:c1:
                    3d:53:c2:af:05:df:32:fb:74:a3:6f:33:a0:5c:0f:
                    3b:10:ee:cd:3d:72:8e:7b:36:21:1f:82:6f:a1:39:
                    f1:92:de:e3:77:aa:68:18:4b:a2:28:6a:6c:13:c0:
                    85:80:c2:51:e1:94:91:cd:55:06:a6:05:e4:23:94:
                    48:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:5E:44:14:42:DA:FE:B3:29:49:3E:FE:F1:79:B9:6D:B1:72:C9:6B
            X509v3 Authority Key Identifier:
                keyid:18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/53b9e52a61fbcb4a14f99f0ad48bb654efb0a804.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:63:57:cf:6e:55:dc:ef:3b:ff:b8:a0:4b:f7:60:75:28:2e:
         4d:f3:3a:24:2e:c7:35:4b:eb:6f:72:ff:18:b2:62:7b:2d:ed:
         f6:1f:6b:f7:5d:7f:e3:0d:6d:71:8d:65:e7:d3:f9:fe:9a:ca:
         02:86:71:e7:35:d4:be:f7:b2:08:42:fe:73:b1:bb:0f:39:d6:
         c4:94:03:d5:31:fd:c0:54:ec:27:1f:8f:e2:5a:39:6b:64:e2:
         e4:68:9d:12:6c:0e:a9:01:a9:d4:a0:4d:ef:25:b5:e8:d7:f9:
         4c:b2:45:da:a9:ee:df:53:c1:14:5b:c6:77:a1:88:87:e7:8a:
         53:19:c7:3f:82:95:95:ac:be:a5:e4:54:aa:0b:72:b4:b1:c9:
         cd:9f:4b:52:0a:84:e3:1d:f6:1a:bc:25:45:3c:b7:c2:23:12:
         b0:d0:c2:7c:3f:55:bb:16:e5:01:e5:c4:cd:92:f3:36:fa:69:
         d2:34:33:04:64:53:9f:0a:e4:03:56:c0:dc:f1:2c:89:db:cb:
         8c:3e:86:08:6d:8c:87:bd:65:b7:26:1f:3f:c4:a5:85:83:03:
         da:2a:00:c8:93:ea:db:8c:d9:1f:89:3b:37:4a:3d:74:26:ff:
         e9:07:f6:7f:a3:9c:fb:aa:df:b4:96:92:48:3b:17:c9:94:c7:
         91:97:69:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:06 2024 by rpki-client on console-fra.rpki-client.org