Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/a5e4ca010c178a4e01a33e4e3c145e13ddcefb55.roa
File:                     a5e4ca010c178a4e01a33e4e3c145e13ddcefb55.roa (raw, json)
Hash identifier:          PFDhly4MejHYWS5BUt+nZbWVq2sFOd4RJptfPpDfbOA=
Subject key identifier:   F8:92:EF:3F:61:B5:15:79:FD:F9:1A:91:3D:DF:A3:69:DE:37:D6:D7
Certificate issuer:       /CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
Certificate serial:       2A41FE
Authority key identifier: FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/a5e4ca010c178a4e01a33e4e3c145e13ddcefb55.roa
Signing time:             Wed 14 Feb 2024 13:39:37 +0000
ROA not before:           Wed 14 Feb 2024 13:39:34 +0000
ROA not after:            Wed 14 Feb 2029 13:39:34 +0000
asID:                     5065
IP address blocks:        190.93.65.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2769406 (0x2a41fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
        Validity
            Not Before: Feb 14 13:39:34 2024 GMT
            Not After : Feb 14 13:39:34 2029 GMT
        Subject: CN=a5e4ca010c178a4e01a33e4e3c145e13ddcefb55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a8:75:b8:7d:d9:9d:ea:09:ee:a5:2c:ae:0d:
                    c1:a1:16:07:c7:ff:61:b9:5c:47:91:14:de:a8:83:
                    d2:c5:8e:99:98:8e:e8:1b:d5:f8:60:60:bb:22:fd:
                    56:1a:bd:35:74:2d:0a:67:c5:0b:74:20:09:fe:65:
                    ae:9f:39:aa:23:fe:e2:b6:03:eb:73:f1:c2:17:94:
                    9f:64:48:c8:01:13:0b:58:d9:c5:cc:01:ec:da:e3:
                    a3:8a:e4:61:84:59:93:00:a6:f6:3d:b7:7d:a1:2e:
                    57:61:6a:1a:b2:97:a8:01:c1:94:08:05:e4:2f:3e:
                    a1:0c:f5:b5:b9:8c:f7:82:c0:8e:38:f7:67:f5:7a:
                    f5:af:f2:44:57:ea:99:75:68:0d:8a:f8:59:a8:5a:
                    b5:ad:e7:d7:b1:ec:06:08:a8:ab:df:56:1d:25:ef:
                    bf:9e:3a:3c:7a:bd:1a:af:2c:cc:9b:58:2a:fb:80:
                    d5:29:c6:b6:3e:ba:cb:fa:4e:08:6a:7f:7f:f5:ad:
                    f6:14:59:8b:18:7f:76:c6:13:a2:28:f3:88:e5:83:
                    a8:3e:5a:8c:eb:d6:e9:33:ce:4f:56:45:58:54:0a:
                    f6:c2:39:25:88:fd:21:18:68:78:e6:43:c3:28:38:
                    7d:da:24:17:af:8c:60:16:b9:b0:aa:97:23:d2:79:
                    c9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:92:EF:3F:61:B5:15:79:FD:F9:1A:91:3D:DF:A3:69:DE:37:D6:D7
            X509v3 Authority Key Identifier:
                keyid:FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/a5e4ca010c178a4e01a33e4e3c145e13ddcefb55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:16:be:95:1d:d7:f4:7b:03:70:2e:94:35:95:ca:4a:2f:58:
         07:fa:83:9c:5e:dd:c2:35:88:63:79:0d:fa:12:5d:cd:18:ce:
         11:a4:60:a0:d0:9e:ea:96:93:f5:bd:2a:c9:21:8c:f8:50:84:
         5a:97:71:cd:7b:be:8f:4e:15:20:92:db:3e:c8:d4:38:4b:4f:
         dd:7a:5b:97:db:96:67:ea:ce:f6:c5:cd:49:f2:83:c5:6d:a9:
         0b:84:c6:83:a4:ba:8c:9a:ba:54:e6:d2:de:8e:f3:69:e5:cb:
         eb:47:69:27:3c:33:40:fe:98:f2:60:73:91:b0:65:de:d8:a2:
         7a:05:64:92:00:33:b2:61:d3:79:2e:62:0a:3a:0e:aa:76:3a:
         7d:14:43:59:a6:34:b8:e2:34:ce:26:34:ca:89:43:77:be:de:
         39:49:dc:e6:c5:f7:25:4c:46:25:b1:3c:41:c8:0d:4a:23:2b:
         6a:93:29:7f:d7:91:7c:b5:13:a3:ed:d6:e8:e0:22:f3:3c:51:
         f7:66:e8:b1:5b:39:c9:08:1f:dd:f2:fd:e0:dd:1a:db:40:1c:
         3d:8b:f6:e6:c3:8d:9c:32:f8:cb:39:6c:4a:06:7b:91:50:02:
         45:07:93:4f:45:a9:61:0d:30:69:17:e3:0c:f9:ad:1c:d1:f9:
         1b:b9:cc:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:30 2024 by rpki-client on console-fra.rpki-client.org