Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/80ddbb1b265de05d394736f5405c7654df0f5d68.roa
File:                     80ddbb1b265de05d394736f5405c7654df0f5d68.roa (raw, json)
Hash identifier:          4bm9/HEdjR/RScy4mX6iTJrrhgMBmbga44tsI/jQ8M8=
Subject key identifier:   FD:61:F7:9A:63:D8:99:1B:2F:B4:A5:7C:7E:8C:B7:D9:7D:52:33:4C
Certificate issuer:       /CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
Certificate serial:       2A7DCB
Authority key identifier: FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/80ddbb1b265de05d394736f5405c7654df0f5d68.roa
Signing time:             Wed 14 Feb 2024 13:40:02 +0000
ROA not before:           Wed 14 Feb 2024 13:39:34 +0000
ROA not after:            Wed 14 Feb 2029 13:39:34 +0000
asID:                     834
IP address blocks:        190.93.95.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2784715 (0x2a7dcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
        Validity
            Not Before: Feb 14 13:39:34 2024 GMT
            Not After : Feb 14 13:39:34 2029 GMT
        Subject: CN=80ddbb1b265de05d394736f5405c7654df0f5d68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ee:52:42:7c:dd:96:ba:67:89:a7:ba:8e:5b:
                    d5:41:43:92:58:29:88:fb:fe:79:39:df:13:4d:42:
                    2f:55:e8:de:e5:df:10:30:f5:ed:b6:5d:53:b5:83:
                    7b:bc:c5:07:87:db:24:41:19:e1:00:8c:e7:04:62:
                    27:f7:d6:e3:cb:7b:f1:32:b3:85:85:25:f8:fb:bf:
                    6f:d6:06:c7:79:2c:10:7d:81:67:3c:02:56:17:80:
                    bd:c7:6d:b4:11:05:42:d8:94:25:42:44:96:c2:ac:
                    a2:08:7f:19:90:4a:00:a9:75:72:83:2c:62:27:7a:
                    4f:fd:b0:0c:5f:60:10:8d:25:d6:64:8c:8b:0a:11:
                    22:15:eb:f6:d5:ba:ba:67:8b:b5:ba:2d:9b:eb:54:
                    a1:e3:eb:f2:3a:04:5d:bb:ba:86:69:f5:51:eb:ed:
                    53:12:5c:89:57:6c:89:09:0a:71:76:7e:de:01:f6:
                    fe:76:c8:7f:54:0b:8b:08:22:ea:f5:8f:fe:09:79:
                    91:0b:ab:fa:5c:1b:f1:e6:42:93:a8:d3:02:84:e5:
                    5f:c1:7a:af:2f:d4:20:b2:f8:f7:36:1e:ca:72:4a:
                    5f:2d:01:22:30:1a:b6:fc:cf:ed:ae:de:08:a5:33:
                    d6:3b:74:5f:9e:66:ab:a8:7f:9f:66:4f:ad:cd:bb:
                    29:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:61:F7:9A:63:D8:99:1B:2F:B4:A5:7C:7E:8C:B7:D9:7D:52:33:4C
            X509v3 Authority Key Identifier:
                keyid:FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/80ddbb1b265de05d394736f5405c7654df0f5d68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:cc:78:8d:b9:dc:ea:20:5b:4b:2f:94:1b:02:1b:a9:cf:99:
         71:10:2f:67:c1:ee:f5:c0:c0:d0:a6:d8:ad:0e:0b:76:fb:94:
         97:5b:74:08:d7:09:9c:39:83:5c:e0:f3:e4:b7:1e:7b:e4:4e:
         2a:7a:28:ca:b1:11:98:88:4c:72:ba:b8:65:80:a0:a4:08:01:
         2f:7b:9a:21:0d:40:b7:b3:ef:ea:68:e6:c3:a8:41:6c:6f:fd:
         34:84:7e:34:7a:12:fb:99:55:ae:f8:69:1a:9f:d9:64:2a:8a:
         b5:97:bc:ea:c6:97:a9:4a:9a:25:a0:de:23:ba:4a:9e:6e:10:
         c5:b6:c7:5d:91:b1:de:df:a5:42:35:f2:82:54:25:a7:96:4f:
         75:1b:7e:60:e4:bb:7a:42:f7:aa:ca:3c:7b:02:40:87:cd:aa:
         f9:78:3b:0a:0c:f4:e0:b0:c8:58:ff:f2:83:99:48:a2:0f:c1:
         57:d5:dc:e8:d6:b2:16:b7:ca:1d:c8:2a:5c:b0:3f:32:6a:c7:
         8e:69:be:03:1a:00:ce:5d:0c:53:d2:d4:cb:37:a3:c0:03:b7:
         11:d5:72:ff:57:f8:63:e4:e8:5a:5c:17:7c:a8:e6:03:9f:e9:
         2f:d3:15:34:2e:78:3d:2c:b5:13:f8:8c:ad:7a:cc:4d:0a:0e:
         76:78:fa:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:47 2024 by rpki-client on console-ams.rpki-client.org