Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/73314460ac247b8283626aa1f9e0ea5207786306.roa
File:                     73314460ac247b8283626aa1f9e0ea5207786306.roa (raw, json)
Hash identifier:          eVsTY6pVpMUvCdpKy31b2h8vGnnZ/OyO3q7/8nRtY8I=
Subject key identifier:   47:03:AE:FA:51:64:4E:C4:E6:81:67:29:E8:CF:7B:02:6D:AA:EB:88
Certificate issuer:       /CN=e5d85378526621fbd4956efa10478f912f0807db
Certificate serial:       27B60E
Authority key identifier: 18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/73314460ac247b8283626aa1f9e0ea5207786306.roa
Signing time:             Mon 27 Nov 2023 13:42:49 +0000
ROA not before:           Mon 27 Nov 2023 13:42:49 +0000
ROA not after:            Thu 27 Nov 2025 13:42:49 +0000
asID:                     262361
IP address blocks:        190.93.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2602510 (0x27b60e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d85378526621fbd4956efa10478f912f0807db
        Validity
            Not Before: Nov 27 13:42:49 2023 GMT
            Not After : Nov 27 13:42:49 2025 GMT
        Subject: CN=73314460ac247b8283626aa1f9e0ea5207786306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6f:d1:2b:b7:3b:83:90:24:d7:1c:2b:23:7b:
                    b9:32:4c:7c:76:2d:f9:e6:df:f8:ee:89:e3:dc:c1:
                    63:4f:5a:7a:04:e1:69:3a:de:a9:c1:93:0e:a0:11:
                    83:87:fe:f8:56:34:a4:22:8f:13:93:ce:96:15:86:
                    3d:67:31:a4:c7:1f:13:f2:49:c7:f0:9b:bb:b8:53:
                    e7:20:96:82:db:d8:9a:28:30:1b:89:1b:06:81:c1:
                    30:57:a7:79:9a:a6:ec:b4:03:11:d4:cf:1a:34:55:
                    70:f5:0d:21:ff:4c:34:90:0d:d8:4d:96:b0:d0:0e:
                    7c:41:58:88:51:ea:34:87:c1:74:f3:4e:d3:99:59:
                    5a:a3:64:ba:07:37:13:a9:1c:88:63:0a:dd:e5:2d:
                    ff:3a:96:cf:31:c2:ea:21:4d:f9:31:75:23:3d:e5:
                    83:aa:36:af:8b:d0:ba:df:e0:05:46:e7:6a:3e:0d:
                    4b:30:1d:80:5f:0a:10:ed:d6:03:e4:45:a1:23:6a:
                    44:4d:00:e9:9d:f5:01:9b:ca:aa:f1:45:60:71:c2:
                    09:6e:11:c2:47:04:c2:11:77:a2:d1:92:2a:bc:bf:
                    52:f9:1e:f9:8a:a4:f2:8c:ac:a7:dd:f9:6e:a1:46:
                    06:22:b5:57:67:fc:86:9d:80:37:fd:48:1a:e9:f4:
                    13:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:03:AE:FA:51:64:4E:C4:E6:81:67:29:E8:CF:7B:02:6D:AA:EB:88
            X509v3 Authority Key Identifier:
                keyid:18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/73314460ac247b8283626aa1f9e0ea5207786306.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:46:b3:f0:81:12:ec:dd:87:4d:15:bc:ad:c3:56:9b:e8:34:
         36:60:19:e6:e4:f0:93:21:e5:c3:74:a8:67:65:b8:c9:27:bb:
         d3:e2:eb:5c:5c:04:c3:74:95:81:59:73:79:d6:09:b3:35:b4:
         1e:f1:1f:b3:9e:a6:34:89:85:93:c5:df:94:32:92:36:8d:c1:
         2f:e0:66:93:de:bd:f9:70:8b:7c:6a:46:03:35:6a:52:fa:d4:
         38:1d:9b:ed:59:cd:50:be:3d:c6:ea:4b:3e:7d:e0:7c:ba:90:
         97:ac:33:82:6b:ec:db:61:80:20:a6:c5:cc:64:54:49:19:be:
         71:f0:f4:f6:bb:e2:e7:08:00:64:de:b8:be:02:0b:c3:06:b6:
         be:ff:3a:f6:37:a3:43:10:88:32:ca:69:90:39:7e:43:2a:fd:
         ae:19:58:a2:d7:04:87:4a:cf:e4:2c:90:4a:b2:1d:cf:aa:6b:
         ba:48:a2:43:bf:7e:47:79:d3:36:2b:c2:18:dd:d2:58:e2:f8:
         30:0e:79:ee:3f:54:8e:3e:47:42:bb:bf:39:d3:6b:e1:bc:0e:
         80:19:dc:f9:fa:70:23:5d:ce:3f:1e:35:ee:5b:14:b8:19:46:
         0b:d4:d8:7f:4f:e5:4c:a6:6f:bc:f5:26:9c:42:c9:6f:99:1c:
         e5:09:ab:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 14 18:15:34 2024 by rpki-client on console-ams.rpki-client.org