Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/6540d17339e64afb62f3caa26601cd3b44513d7c.roa
File:                     6540d17339e64afb62f3caa26601cd3b44513d7c.roa (raw, json)
Hash identifier:          VRP/KY2v5efhxl9+8piYSJsc52d4bSegM2DSbn3tq+M=
Subject key identifier:   1F:27:05:ED:2C:94:2D:82:DE:76:D1:0E:AA:D7:01:A3:A6:30:06:40
Certificate issuer:       /CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
Certificate serial:       2C3BFB
Authority key identifier: FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/6540d17339e64afb62f3caa26601cd3b44513d7c.roa
Signing time:             Tue 09 Apr 2024 14:06:44 +0000
ROA not before:           Tue 09 Apr 2024 14:06:44 +0000
ROA not after:            Thu 09 Apr 2026 14:06:44 +0000
asID:                     269070
IP address blocks:        190.93.67.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2898939 (0x2c3bfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
        Validity
            Not Before: Apr  9 14:06:44 2024 GMT
            Not After : Apr  9 14:06:44 2026 GMT
        Subject: CN=6540d17339e64afb62f3caa26601cd3b44513d7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:bb:61:34:fc:5d:6c:39:e2:5e:da:aa:e1:44:
                    4c:4a:55:83:b6:6a:eb:4a:46:cd:d0:ff:4b:73:10:
                    c8:37:5e:17:2d:d8:a8:17:bb:e3:fb:59:e9:50:87:
                    56:37:6d:3e:9f:f7:17:44:15:41:d0:f5:37:e7:19:
                    96:18:72:77:12:7b:47:01:0b:94:13:6a:85:1c:db:
                    ae:8a:75:d1:60:22:9a:ae:b0:e3:fe:35:04:26:43:
                    d7:cc:f2:9f:dd:10:ad:78:4c:9a:dd:03:ff:0a:87:
                    d1:33:8d:bf:54:d2:83:dd:e9:61:03:e3:5f:59:a7:
                    8d:00:9d:c8:df:80:7c:84:86:ce:d3:33:8a:91:44:
                    5b:e6:6b:56:e3:21:44:a6:87:65:81:9b:00:96:50:
                    54:fa:6f:e5:f5:30:69:72:5f:8c:9c:48:db:4c:51:
                    09:25:16:14:1c:08:51:e4:61:af:88:38:8e:96:d2:
                    d2:be:d2:a6:ef:2c:01:5d:c0:fe:1b:95:d7:ed:16:
                    13:56:5d:77:d9:2b:c8:86:ec:83:fe:65:40:24:f9:
                    00:17:1d:d3:01:24:44:72:d1:e4:f8:40:a6:97:92:
                    bd:b3:67:e0:93:66:96:0d:45:36:90:54:5b:42:3c:
                    7d:fb:41:a1:d9:fa:1d:5d:14:45:f1:a3:6f:f5:1c:
                    db:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:27:05:ED:2C:94:2D:82:DE:76:D1:0E:AA:D7:01:A3:A6:30:06:40
            X509v3 Authority Key Identifier:
                keyid:FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/6540d17339e64afb62f3caa26601cd3b44513d7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:20:41:7d:cf:52:10:a2:76:3c:b7:7e:19:7c:55:6d:7d:d3:
         2c:15:3c:f5:77:df:e6:fb:8a:69:5a:f7:25:e1:df:30:0e:44:
         95:f7:63:6f:52:31:f1:33:59:ee:58:7a:03:64:f5:5a:b2:97:
         a9:fc:e7:ec:3d:60:15:d0:48:cd:a3:5e:bc:b4:8b:f9:8d:0d:
         2b:bf:28:99:ed:e5:8c:75:a0:30:9f:bd:f3:d1:e4:d7:7e:1c:
         79:60:51:30:40:bf:3b:e1:94:25:fe:35:96:e8:d3:40:cd:7f:
         d0:85:d7:22:af:64:b3:e9:05:87:b7:a1:29:d8:22:ec:52:39:
         59:6d:21:b9:b6:97:cf:07:27:4f:7c:fc:d4:74:78:bd:07:5b:
         4a:db:f7:4a:7a:2f:91:8f:0e:82:2d:3a:82:1a:5a:ae:45:b6:
         b2:81:1b:47:01:ed:3a:2c:72:f9:b1:38:c5:d9:a5:7b:79:e1:
         d7:31:59:a4:ad:eb:31:e9:fd:e9:67:d7:59:e2:59:5f:b3:2c:
         f5:9d:b0:c8:36:a0:e7:f2:cc:4a:d7:d1:8b:7d:4e:df:ab:73:
         ad:10:f6:51:1a:de:0f:90:46:70:8b:44:df:7e:43:f9:02:26:
         f9:5f:09:e9:8a:dc:da:e1:d1:cb:6a:fa:45:00:91:ee:97:6c:
         05:9c:5d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:30 2024 by rpki-client on console-fra.rpki-client.org