Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/57d92a303d40f01f4a9900e4266c571da4788f6f.roa
File:                     57d92a303d40f01f4a9900e4266c571da4788f6f.roa (raw, json)
Hash identifier:          frMt4lOKmARCIwCg9hyywVKgC8fHrVSw2jTrrD6ctf8=
Subject key identifier:   6F:74:0A:42:08:7E:FD:3F:D7:AE:12:2F:60:4D:3B:EF:CC:D2:75:55
Certificate issuer:       /CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
Certificate serial:       2A5F72
Authority key identifier: FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/57d92a303d40f01f4a9900e4266c571da4788f6f.roa
Signing time:             Wed 14 Feb 2024 13:39:46 +0000
ROA not before:           Wed 14 Feb 2024 13:39:34 +0000
ROA not after:            Wed 14 Feb 2029 13:39:34 +0000
asID:                     200113
IP address blocks:        190.93.88.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2776946 (0x2a5f72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
        Validity
            Not Before: Feb 14 13:39:34 2024 GMT
            Not After : Feb 14 13:39:34 2029 GMT
        Subject: CN=57d92a303d40f01f4a9900e4266c571da4788f6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f6:34:b7:72:37:6f:a4:9c:65:9f:2b:82:f0:
                    67:c0:b9:f0:17:fb:cc:96:3c:41:9c:5f:60:e6:23:
                    d0:49:60:b4:3a:57:a0:bd:c6:02:89:61:89:ff:ed:
                    78:8a:3d:f2:24:27:8a:1b:c2:72:90:60:a6:3d:86:
                    ff:ef:7d:ea:4c:88:d9:87:5a:78:ee:23:80:b4:05:
                    30:3b:b1:e0:da:3d:2f:f6:d4:38:7f:6c:78:a7:bc:
                    60:43:d2:d0:fd:bf:5e:03:32:d3:f0:28:04:0d:ca:
                    54:20:92:7f:b2:c5:3a:0e:68:81:88:68:a1:c1:66:
                    86:cf:7a:a1:73:a4:49:87:9a:1f:17:58:02:5b:af:
                    57:e1:17:3b:a6:b2:39:98:0b:bf:1b:23:87:30:ce:
                    16:79:75:97:ab:15:26:db:1a:8a:51:26:4b:74:85:
                    2c:8d:ba:d9:82:b6:26:e9:09:4e:ac:96:7f:f1:eb:
                    17:b8:61:6c:db:f7:b7:ed:61:0b:4f:99:ee:d9:38:
                    75:23:8f:6e:ff:4e:ef:41:da:b0:f6:17:77:ae:97:
                    54:96:d9:8e:9a:8c:b8:0b:f0:26:ea:30:0b:7f:58:
                    2d:f8:09:2b:a9:1a:7e:95:05:a0:a0:d2:93:b4:94:
                    b4:b9:f7:c7:45:a7:5f:74:93:7a:c0:8f:fb:e0:ec:
                    de:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:74:0A:42:08:7E:FD:3F:D7:AE:12:2F:60:4D:3B:EF:CC:D2:75:55
            X509v3 Authority Key Identifier:
                keyid:FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/57d92a303d40f01f4a9900e4266c571da4788f6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:57:fc:a9:8a:bf:b1:85:a3:de:19:ef:20:4a:b7:8e:97:b3:
         c8:a7:03:4c:68:a6:98:7f:b9:90:6c:2a:62:e6:92:e5:d9:cd:
         5d:1a:d0:d5:14:2b:e6:e0:bb:f7:9c:57:5b:8e:88:17:12:29:
         2f:6c:1e:a2:0d:b4:c5:f1:59:fe:d4:37:8f:a2:09:66:57:89:
         8e:ee:b7:43:65:eb:30:74:3a:bf:c9:8c:3e:c0:40:fd:95:23:
         dd:d2:73:39:de:8b:10:97:20:b1:f4:2c:64:7f:2b:7f:5f:d9:
         11:38:7f:07:a2:d3:8c:11:49:9d:ec:ae:23:f4:8c:7a:1e:06:
         a4:c4:33:bc:3f:70:07:7d:fa:a8:86:c7:63:2e:12:62:c7:94:
         c0:c3:04:43:6a:56:d8:1d:90:55:d3:86:ee:88:3f:95:ad:be:
         30:3e:95:2d:69:75:ff:77:2b:24:7a:84:84:b6:7b:5c:a1:cf:
         99:64:2d:39:05:e3:94:7a:a7:f9:27:50:19:e4:ee:08:3b:df:
         e6:06:10:ae:f4:1c:4c:0c:5b:bf:b7:f9:4a:c8:d9:5a:6e:de:
         f8:e0:9f:b1:44:3a:07:f8:70:0d:1f:d3:8e:b5:cf:aa:03:b7:
         dd:f5:ce:86:88:9f:eb:88:a0:f1:31:bd:b6:46:06:3b:11:6c:
         3a:fa:0e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:30 2024 by rpki-client on console-fra.rpki-client.org