Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/b1e4b3e41c91c9527b2755cca647720cff90eeb6.roa
File:                     b1e4b3e41c91c9527b2755cca647720cff90eeb6.roa (raw, json)
Hash identifier:          9VTCJlnviMDxmrjTsiH0cIiAr/e3jQIwWCefoR9PAHE=
Subject key identifier:   C7:8C:A9:52:18:80:8A:DA:23:3C:AF:7F:85:5B:4B:41:58:C5:D6:3B
Certificate issuer:       /CN=e5d85378526621fbd4956efa10478f912f0807db
Certificate serial:       29DC49
Authority key identifier: 18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/b1e4b3e41c91c9527b2755cca647720cff90eeb6.roa
Signing time:             Mon 05 Feb 2024 11:56:55 +0000
ROA not before:           Mon 05 Feb 2024 11:56:55 +0000
ROA not after:            Thu 05 Feb 2026 11:56:55 +0000
asID:                     834
IP address blocks:        190.93.89.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2743369 (0x29dc49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d85378526621fbd4956efa10478f912f0807db
        Validity
            Not Before: Feb  5 11:56:55 2024 GMT
            Not After : Feb  5 11:56:55 2026 GMT
        Subject: CN=b1e4b3e41c91c9527b2755cca647720cff90eeb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1b:09:ac:70:22:a1:c2:cb:e9:62:0a:c8:23:
                    8f:3b:52:98:68:1a:52:ca:4a:71:4c:5d:5d:9f:7c:
                    1d:63:61:f5:b8:9b:87:05:c3:70:23:8b:87:d4:c7:
                    8d:22:0d:64:7e:76:9c:f2:54:58:45:7d:f9:f5:94:
                    22:67:c0:22:ca:10:f7:2b:08:64:0d:2e:11:83:b0:
                    17:fd:ef:eb:84:97:83:19:2a:0e:4e:f9:0b:f1:16:
                    9c:b2:b4:69:a3:fe:5b:d4:25:91:ce:e9:b6:db:0b:
                    c5:b4:e0:07:50:7f:28:b3:1d:36:e5:b9:fe:d0:5f:
                    d5:10:1e:38:3b:05:41:94:a1:cc:25:e7:f5:00:87:
                    ac:0c:61:09:6f:0e:a0:a9:06:0b:15:57:c9:b1:4d:
                    81:60:85:90:51:d9:de:4d:80:8c:07:f7:36:54:b9:
                    5b:67:3d:22:ae:65:7c:79:95:78:ce:cc:1c:8f:d6:
                    43:c9:95:52:e7:e5:b8:d7:32:62:c9:c0:19:ab:ae:
                    55:11:b5:4b:de:00:71:7c:06:f4:4e:16:7d:7b:78:
                    3a:43:99:cb:87:51:d1:72:35:18:f8:b0:73:91:b5:
                    37:59:dc:bf:58:3e:16:3b:0c:5a:be:94:67:32:e0:
                    84:49:c8:c5:9e:bf:4e:50:9e:88:1b:89:e0:9d:ca:
                    dc:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:8C:A9:52:18:80:8A:DA:23:3C:AF:7F:85:5B:4B:41:58:C5:D6:3B
            X509v3 Authority Key Identifier:
                keyid:18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/b1e4b3e41c91c9527b2755cca647720cff90eeb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:cd:0a:9e:f6:3a:d2:36:1e:62:49:ca:2f:ac:ba:e2:b6:93:
         1d:cb:3d:0f:f7:9c:f8:c1:02:e2:f6:2f:70:8f:ed:bb:9c:43:
         b4:ae:85:8a:b0:56:03:d3:a0:33:ef:09:65:e1:b7:49:ee:37:
         0f:4f:d7:4f:17:74:91:0f:b8:3f:60:91:df:e8:4a:e7:fd:77:
         dc:36:1e:65:a1:3a:5e:46:88:16:84:60:11:f7:3f:ec:ec:66:
         e9:e8:01:01:e3:1f:6f:94:db:05:01:b8:a5:34:66:3a:e0:81:
         ae:49:d5:30:0f:a5:8f:11:07:0d:c6:a2:ba:26:e7:54:82:af:
         9d:d3:68:89:c9:3c:6a:46:01:4b:60:45:14:cb:e1:45:24:b4:
         ea:f6:7f:03:ef:85:ba:e5:a8:4e:f8:a1:a3:30:a6:05:e7:d9:
         1a:65:a6:e7:24:d6:b4:cc:94:76:77:d5:6e:02:f2:22:33:b0:
         a5:aa:bc:ba:36:20:b4:c9:2b:1e:9b:e1:b7:b2:b5:a2:16:32:
         a6:b6:6c:5e:d1:ef:16:68:31:cc:c9:d2:f2:ca:ca:cb:56:36:
         01:ef:35:14:45:a0:06:55:6f:7e:80:2e:e1:c2:e2:e2:15:bc:
         b4:79:64:13:51:44:b3:a6:d7:66:90:60:21:d9:9e:2c:77:50:
         a1:3f:ed:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 14 18:15:34 2024 by rpki-client on console-ams.rpki-client.org