Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/77a48a41febf6c019b5c67669dbce831db99db3c.roa
File:                     77a48a41febf6c019b5c67669dbce831db99db3c.roa (raw, json)
Hash identifier:          yoNHhE64RrSj/21a4wvWslK7UfryRFTrSyluUtSrDUU=
Subject key identifier:   A7:73:9F:31:2A:AC:6B:C6:45:F6:79:90:78:C3:15:E9:1E:F1:9E:68
Certificate issuer:       /CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
Certificate serial:       2B2788
Authority key identifier: FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/77a48a41febf6c019b5c67669dbce831db99db3c.roa
Signing time:             Fri 01 Mar 2024 12:32:27 +0000
ROA not before:           Fri 01 Mar 2024 12:32:27 +0000
ROA not after:            Sun 01 Mar 2026 12:32:27 +0000
asID:                     268199
IP address blocks:        190.93.87.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2828168 (0x2b2788)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
        Validity
            Not Before: Mar  1 12:32:27 2024 GMT
            Not After : Mar  1 12:32:27 2026 GMT
        Subject: CN=77a48a41febf6c019b5c67669dbce831db99db3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:15:97:d0:26:4b:38:a6:71:49:4c:4b:46:7e:
                    fd:45:47:69:b6:23:7e:6c:72:f2:be:3d:7d:1c:7c:
                    4f:62:f3:22:2e:17:52:25:e8:15:9e:c0:06:26:93:
                    37:42:29:38:0b:8e:49:4c:bd:7f:c4:87:4f:da:24:
                    07:72:7b:25:70:b9:10:7b:6e:4d:5c:6d:e0:35:e8:
                    e5:76:6d:cc:3c:a3:35:f1:d6:65:47:64:c1:b5:ee:
                    f3:56:88:2b:9b:68:74:99:ed:38:10:c3:c6:15:02:
                    0e:f1:f9:fd:fa:9f:8f:a2:71:95:ec:bb:2f:6d:4f:
                    e8:da:6f:29:ec:f7:13:2a:35:bc:40:f3:f4:d2:17:
                    e9:96:a1:c8:5d:0b:67:33:85:32:5e:e3:67:b1:1f:
                    54:8e:71:9f:d4:19:9b:84:be:86:49:15:97:c7:90:
                    22:ea:bb:95:7e:c4:6b:be:0e:e4:60:e0:2f:be:ff:
                    75:14:4b:3f:b4:a7:c8:11:f8:89:4c:51:31:69:80:
                    b6:6f:00:f9:64:b5:37:5c:ea:fa:09:bc:bc:e4:d7:
                    c3:1f:0c:f5:80:ed:2e:8c:b7:f9:27:6a:07:ef:f6:
                    1a:e6:67:cd:d4:7e:39:24:f3:90:2c:4b:00:f2:92:
                    dc:17:80:5d:a3:96:d2:91:c5:55:23:28:c0:9a:3a:
                    32:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:73:9F:31:2A:AC:6B:C6:45:F6:79:90:78:C3:15:E9:1E:F1:9E:68
            X509v3 Authority Key Identifier:
                keyid:FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/77a48a41febf6c019b5c67669dbce831db99db3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:a8:6f:da:3d:1d:2d:80:1b:cc:5b:97:d3:b5:28:3a:9b:47:
         62:e9:97:12:b7:18:62:98:57:b7:fa:47:ca:33:5d:cf:c7:89:
         f6:5c:a9:1a:a8:24:ee:f0:87:c0:cd:7e:d7:4b:f0:07:13:9a:
         e5:35:11:e2:a6:18:4b:69:38:57:a7:bb:61:b6:9a:85:7e:09:
         cb:ef:6c:5d:29:14:2b:1c:83:47:5a:25:66:67:c3:bc:0b:76:
         46:b0:32:46:a9:08:e5:f4:1d:a6:92:bf:2a:2c:56:dc:65:79:
         50:98:d1:a5:b7:0f:5f:8c:c7:d2:ab:06:e1:35:25:b1:04:e2:
         7e:b7:b1:c9:8f:d6:c6:3c:18:84:de:f0:f3:4c:0d:eb:2c:7a:
         bc:a2:27:6c:42:ab:e5:58:75:8a:74:25:b4:a6:06:ef:16:1a:
         7a:39:85:0b:4b:d7:42:06:50:5c:a5:88:56:8b:21:9c:e2:50:
         b6:4e:1a:4c:5c:0c:2c:c5:c8:c4:52:31:e7:fb:37:7b:d8:d1:
         42:a4:39:76:e7:1d:73:1c:f2:29:b3:49:79:11:ad:df:d4:a0:
         1d:c2:6f:f9:8a:89:6a:d0:3a:b1:f1:a3:75:c9:73:bb:a6:e1:
         10:83:16:6c:d6:76:cd:be:bb:dc:be:0b:f6:cf:60:f0:fc:ad:
         62:3a:13:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:47 2024 by rpki-client on console-ams.rpki-client.org