Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/9442afb778aeec09b9ee199e4a84b0751d9fbc3d.roa
File:                     9442afb778aeec09b9ee199e4a84b0751d9fbc3d.roa (raw, json)
Hash identifier:          ptlTkIOiOtzs0/9PmoHwJ+lcR6c9sEKphYpFNA5QUP8=
Subject key identifier:   6E:CF:AC:4D:20:90:2D:30:AE:75:F0:00:78:3A:44:61:CF:F3:1A:CF
Certificate issuer:       /CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
Certificate serial:       2AB48B
Authority key identifier: FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/9442afb778aeec09b9ee199e4a84b0751d9fbc3d.roa
Signing time:             Wed 14 Feb 2024 13:40:30 +0000
ROA not before:           Wed 14 Feb 2024 13:39:34 +0000
ROA not after:            Wed 14 Feb 2029 13:39:34 +0000
asID:                     135027
IP address blocks:        190.93.90.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2798731 (0x2ab48b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
        Validity
            Not Before: Feb 14 13:39:34 2024 GMT
            Not After : Feb 14 13:39:34 2029 GMT
        Subject: CN=9442afb778aeec09b9ee199e4a84b0751d9fbc3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:87:42:ee:f1:61:94:3e:70:8b:c3:c9:57:a1:
                    8b:cd:6a:8b:4a:04:1a:a2:fe:6d:c1:e2:5f:f8:d6:
                    1b:39:f1:28:8d:9c:e3:c3:81:fd:db:f7:2d:cb:76:
                    30:a5:f8:05:f7:b4:d6:ec:2e:c4:3e:b5:14:7c:c5:
                    69:8b:a1:28:28:b7:49:03:88:e6:cb:71:69:6b:d8:
                    dc:08:d3:1b:3a:1f:74:e2:84:65:6b:15:b3:c5:c2:
                    cc:c7:31:a6:3a:19:b7:36:f4:2c:8f:11:82:66:1d:
                    fd:23:96:1b:7a:10:37:4f:e9:d8:8e:5e:ed:c7:ff:
                    f7:7d:04:d9:24:f2:6e:9e:b9:51:35:c7:9b:9b:4d:
                    2c:d4:16:41:27:db:97:4b:31:c7:41:28:50:a7:77:
                    25:e4:69:2e:b1:6d:2c:31:9d:39:20:4e:cd:c9:96:
                    7b:93:5c:20:f2:79:70:e7:ac:dc:43:79:19:f4:8a:
                    c3:5c:50:1a:bc:56:e4:27:a6:dd:3b:68:57:f1:76:
                    7c:c6:2c:c6:a0:05:88:f5:fc:47:83:bd:72:13:6e:
                    df:0f:88:23:21:6f:3d:18:04:17:2f:b2:40:c4:e3:
                    a5:65:a9:01:37:60:72:45:b3:f9:b3:0a:0e:6c:89:
                    76:7b:43:f1:f6:24:e0:ab:a6:c7:43:16:d0:4c:17:
                    80:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:CF:AC:4D:20:90:2D:30:AE:75:F0:00:78:3A:44:61:CF:F3:1A:CF
            X509v3 Authority Key Identifier:
                keyid:FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/9442afb778aeec09b9ee199e4a84b0751d9fbc3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:ec:56:05:fb:dd:18:4b:cc:01:7b:4f:97:10:08:c3:9d:53:
         2d:bb:48:ab:68:fc:42:6c:cf:bf:8e:a4:85:b7:cc:f7:80:35:
         04:2c:50:af:b8:18:d3:56:62:be:d6:84:77:5e:4d:bc:6b:39:
         2b:59:d7:db:5c:48:8f:2d:94:c1:cb:a1:39:90:dc:e0:57:71:
         f2:74:2b:b0:f8:99:4b:6e:f3:06:58:43:fc:fb:91:4a:39:29:
         c2:b0:a2:31:45:4b:69:84:4e:9f:14:9e:7d:f1:b4:3d:bc:fa:
         d9:0d:32:80:49:c8:ed:b3:9d:cc:60:1e:7c:d6:85:d8:42:10:
         16:e0:b0:cc:a9:93:e4:eb:e9:4b:f4:8c:fc:61:dc:e6:55:52:
         a0:4f:45:9a:d0:45:fb:cf:ce:55:e8:d8:18:04:fa:d3:98:a7:
         b4:29:fc:ef:87:41:2c:99:8c:46:56:cd:48:b3:17:77:bc:c0:
         47:2a:89:bf:79:1e:ad:fb:34:9b:ec:ce:53:77:fb:1f:13:a5:
         a7:08:5f:f1:ab:f7:dd:08:1b:22:80:f6:ec:dc:80:c6:c8:78:
         a8:e0:79:30:96:26:f1:6d:79:96:04:a6:99:75:75:d5:26:56:
         e0:40:26:22:ea:db:be:74:bc:72:b5:27:bb:22:b8:a7:39:c1:
         0b:5c:b2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:30 2024 by rpki-client on console-fra.rpki-client.org