Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/5efee8cb6d4d30fc678a19546f8583e8d030ed57.roa
File:                     5efee8cb6d4d30fc678a19546f8583e8d030ed57.roa (raw, json)
Hash identifier:          t5PyhMB+gcaxP3QTiSDrZtRwG6RwlGPQNeVsJ5ZowDA=
Subject key identifier:   AE:CE:68:E0:5E:38:DD:E9:18:7C:87:21:EB:04:A4:50:15:6F:AE:56
Certificate issuer:       /CN=e5d85378526621fbd4956efa10478f912f0807db
Certificate serial:       29B2F4
Authority key identifier: 18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/5efee8cb6d4d30fc678a19546f8583e8d030ed57.roa
Signing time:             Thu 01 Feb 2024 13:46:14 +0000
ROA not before:           Thu 01 Feb 2024 13:46:14 +0000
ROA not after:            Sun 01 Feb 2026 13:46:14 +0000
asID:                     7029
IP address blocks:        190.93.71.0/24 maxlen: 24
                          190.93.84.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2732788 (0x29b2f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d85378526621fbd4956efa10478f912f0807db
        Validity
            Not Before: Feb  1 13:46:14 2024 GMT
            Not After : Feb  1 13:46:14 2026 GMT
        Subject: CN=5efee8cb6d4d30fc678a19546f8583e8d030ed57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3e:6a:37:5a:57:6a:58:db:c9:12:c0:42:ab:
                    54:a7:d5:be:fe:fb:83:7a:99:8a:bb:89:18:2b:db:
                    76:51:01:a6:d7:16:f8:b2:78:57:3a:ea:72:66:da:
                    31:f5:3b:98:4d:c6:38:5a:2a:ff:34:29:6c:6f:57:
                    2e:1e:98:b2:23:b1:8a:b1:b9:4b:8a:93:d1:84:b4:
                    2b:82:42:c6:12:18:8f:b5:16:43:6a:56:d2:04:8d:
                    47:8a:1e:62:46:d0:7c:a1:c3:ad:9b:1b:c6:16:70:
                    97:e4:2f:53:00:81:9b:e4:d8:30:4b:3b:af:c4:4d:
                    96:69:4a:d2:7f:20:f9:da:46:3c:b8:ee:ba:5d:d9:
                    ec:48:b7:5e:50:3f:ae:3f:3b:ee:96:21:c9:40:db:
                    70:45:cc:0c:e4:d4:d4:58:96:69:44:e8:f5:63:02:
                    15:af:9e:a9:cf:20:fd:e6:58:94:49:92:f8:46:49:
                    af:18:23:f9:f6:1f:fc:03:33:02:32:ac:ea:1c:5e:
                    d0:24:c0:3a:b2:9d:c5:2d:bf:7b:78:e3:1f:c3:82:
                    98:97:42:66:7a:fb:51:d6:a2:7f:01:4e:06:b3:ed:
                    f1:12:1e:fa:ac:70:a2:45:a3:66:e1:68:82:75:ec:
                    89:d2:c2:91:46:06:ab:e3:c8:71:43:b4:95:96:83:
                    7f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:CE:68:E0:5E:38:DD:E9:18:7C:87:21:EB:04:A4:50:15:6F:AE:56
            X509v3 Authority Key Identifier:
                keyid:18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/5efee8cb6d4d30fc678a19546f8583e8d030ed57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.71.0/24
                  190.93.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:75:3b:4d:2d:94:04:50:44:1a:e7:64:01:3b:0a:3b:3b:e1:
         ca:c4:1e:e6:31:5f:b2:d4:88:08:2e:60:c3:cc:56:73:a1:36:
         39:16:e1:86:23:e2:9e:fd:31:9e:5e:55:b7:f8:b2:98:63:48:
         8c:54:0b:27:11:e8:a5:62:ee:2d:86:04:6c:c8:18:77:88:ee:
         42:6b:88:89:98:81:fa:1e:5f:8c:5b:45:ca:2d:4c:6a:23:d0:
         f3:2c:c5:75:b6:6c:2c:07:b5:60:da:b0:4e:53:54:32:a0:51:
         f5:21:12:72:49:c2:49:84:c3:78:4d:2f:32:5a:ec:0d:fa:ea:
         9d:6e:b5:81:d7:39:1c:03:7d:8d:fb:d4:8c:59:4d:14:e7:61:
         4e:73:26:a4:4b:27:e1:19:ea:79:f9:a4:8b:b2:09:f3:d2:5d:
         5a:29:a9:2f:5e:12:62:58:bd:ab:b8:75:58:9e:92:73:ea:af:
         79:a8:c9:50:8f:7b:2a:f5:9a:e6:3f:9f:8e:98:de:e9:a1:6f:
         5c:f1:50:f1:79:67:e6:e7:ed:87:32:88:c6:8c:f5:93:73:08:
         4d:be:d6:13:36:38:62:4f:21:18:9a:26:09:47:e4:fa:84:d7:
         eb:98:f4:1a:1c:6f:b9:63:af:f8:64:4b:c8:2a:69:12:da:cc:
         d9:10:5a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 14 18:15:34 2024 by rpki-client on console-ams.rpki-client.org