Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/78311c821b38139882a605cd350e82d73a3cc294.roa
File:                     78311c821b38139882a605cd350e82d73a3cc294.roa (raw, json)
Hash identifier:          KZoMOpikOBHqurCrE7dyR3l2HXyhu8Fz5LjVHe86WVE=
Subject key identifier:   7E:AF:FC:64:CA:09:81:ED:3E:EB:69:5C:26:85:A6:35:97:35:68:F0
Certificate issuer:       /CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
Certificate serial:       2A5970
Authority key identifier: FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/78311c821b38139882a605cd350e82d73a3cc294.roa
Signing time:             Wed 14 Feb 2024 13:39:45 +0000
ROA not before:           Wed 14 Feb 2024 13:39:34 +0000
ROA not after:            Wed 14 Feb 2029 13:39:34 +0000
asID:                     200113
IP address blocks:        190.93.85.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2775408 (0x2a5970)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
        Validity
            Not Before: Feb 14 13:39:34 2024 GMT
            Not After : Feb 14 13:39:34 2029 GMT
        Subject: CN=78311c821b38139882a605cd350e82d73a3cc294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ef:aa:97:bb:74:6d:4e:fe:8c:55:c4:f3:97:
                    29:0f:4a:6a:a5:1b:48:a6:8e:87:58:46:74:bf:80:
                    61:35:1d:99:df:4d:b9:f3:65:0b:63:b6:7d:f9:70:
                    91:25:8f:8a:96:c1:78:7b:57:b0:34:ce:7c:06:ea:
                    5c:b7:f8:05:db:6a:6f:b8:53:e6:10:e2:53:70:70:
                    8d:af:8d:72:66:8d:69:45:9c:d3:24:c5:f5:2a:f1:
                    13:08:ca:07:ba:a3:b8:cf:77:dd:0b:0b:ad:02:45:
                    38:03:e1:5f:12:45:43:86:32:4f:fd:d4:15:ff:d4:
                    c6:b0:3b:34:c0:56:f5:ca:9e:70:b1:e5:db:f1:65:
                    5b:a6:d4:0c:33:56:36:5e:16:49:7a:43:49:dc:0d:
                    0a:56:da:8e:c9:51:45:33:7a:fe:6f:0c:e6:60:e0:
                    d0:4c:83:a1:ec:b4:cb:a9:00:29:4c:d4:c5:1a:56:
                    61:f6:d4:87:28:a0:ea:d4:b4:17:93:d0:e4:b7:9c:
                    4a:31:69:f8:2b:9c:bd:84:47:13:21:7d:a9:e7:e5:
                    60:31:8c:0b:5c:84:80:99:05:53:54:fe:5d:30:ec:
                    b0:38:76:8a:15:3f:9e:fa:e1:1b:9d:62:26:34:56:
                    ef:21:71:44:df:64:c1:3e:dc:c5:5b:5e:86:ea:1b:
                    83:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:AF:FC:64:CA:09:81:ED:3E:EB:69:5C:26:85:A6:35:97:35:68:F0
            X509v3 Authority Key Identifier:
                keyid:FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/78311c821b38139882a605cd350e82d73a3cc294.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:3c:c7:ff:18:6e:66:56:00:51:3d:3e:a8:b7:9d:1a:fe:29:
         52:19:fb:1b:cc:12:c9:e2:58:39:44:07:8a:1f:84:ca:f7:80:
         50:71:b8:49:e9:89:0a:88:2f:62:97:91:0a:12:73:80:ac:c6:
         97:2a:00:6a:09:7b:85:77:8c:60:5c:ed:d3:ef:84:54:08:7b:
         aa:f0:43:12:bf:a3:54:cf:12:5b:b5:d3:7b:53:50:45:ab:ab:
         49:75:91:65:a7:46:c3:cf:9b:a5:88:b4:ee:a3:fd:68:b0:2c:
         c7:3a:5c:13:27:2b:91:67:dc:2d:48:ab:54:10:c3:a9:f3:90:
         ee:04:33:ed:ee:78:c3:05:96:31:c4:54:fd:7c:03:e0:35:6d:
         8d:0b:28:23:31:73:d6:e5:f0:5f:e1:1a:1e:f8:7c:74:4b:a8:
         11:b1:ea:4d:60:de:b1:7b:b9:ea:56:c6:5d:b1:f7:c3:2f:6a:
         f3:27:70:4f:5e:23:3c:52:1a:2b:77:89:0e:0e:df:c4:8e:18:
         86:ad:d3:34:17:0b:f3:b5:a9:cd:74:ea:a3:db:fc:f0:ef:f9:
         23:37:4e:65:d1:0c:58:1a:df:5c:65:fb:a2:55:88:77:9c:ea:
         0a:7b:16:99:fb:e5:92:aa:99:7d:d1:ba:96:b9:14:89:3f:42:
         5f:a0:10:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:47 2024 by rpki-client on console-ams.rpki-client.org