Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/b5f245b676fe29d04f7b2cacbc15e2db4120858f.roa
File:                     b5f245b676fe29d04f7b2cacbc15e2db4120858f.roa (raw, json)
Hash identifier:          nlCVzxXb4eF9qMf4wKca50t6/jPk8CZmy56wIJU/2Ew=
Subject key identifier:   C0:11:D5:82:32:A9:C5:A7:D3:D7:2D:CB:61:29:24:F0:3F:D2:F4:70
Certificate issuer:       /CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
Certificate serial:       2AAEAA
Authority key identifier: FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/b5f245b676fe29d04f7b2cacbc15e2db4120858f.roa
Signing time:             Wed 14 Feb 2024 13:40:27 +0000
ROA not before:           Wed 14 Feb 2024 13:39:34 +0000
ROA not after:            Wed 14 Feb 2029 13:39:34 +0000
asID:                     135027
IP address blocks:        190.93.80.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2797226 (0x2aaeaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
        Validity
            Not Before: Feb 14 13:39:34 2024 GMT
            Not After : Feb 14 13:39:34 2029 GMT
        Subject: CN=b5f245b676fe29d04f7b2cacbc15e2db4120858f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a7:b4:f2:f9:f0:78:ba:fa:ff:bc:4b:18:2f:
                    17:1b:f8:e3:5f:72:c2:80:82:ba:51:c1:af:19:aa:
                    f2:1f:ef:33:d7:7d:02:89:5f:8e:f2:51:8d:13:5e:
                    36:9c:6a:15:49:44:9c:12:53:2e:a1:76:5f:57:98:
                    8b:ee:04:8c:99:1c:76:2a:ae:c1:fb:13:00:1d:7b:
                    fe:6b:ae:61:4d:8f:27:f7:e2:ae:19:d8:51:df:87:
                    e8:9f:a1:a4:32:aa:fe:fb:0a:66:f7:91:be:92:73:
                    32:e6:59:b8:41:d7:c8:71:20:52:3a:8b:82:42:ce:
                    87:62:8f:70:8c:d5:09:b9:58:7f:e4:d5:c7:da:1f:
                    bd:86:a6:21:d6:16:c9:f1:9b:01:03:c5:6a:72:db:
                    84:44:6f:60:18:f0:e5:b0:ab:ec:0c:8d:05:68:8c:
                    d2:62:96:f9:88:04:7f:49:8f:67:53:4e:63:15:16:
                    e0:38:6b:8f:5d:d7:30:eb:04:28:7c:fa:57:e4:df:
                    59:53:41:14:db:77:27:ef:7c:5a:4b:37:18:2a:5f:
                    6f:95:41:7b:2c:12:10:11:c7:a7:0a:c8:d9:59:bb:
                    8b:91:a8:ca:d6:90:5d:ed:1e:e9:53:a3:34:09:19:
                    3d:3c:3c:38:b2:31:ad:da:4e:51:7b:9d:63:bd:6f:
                    b5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:11:D5:82:32:A9:C5:A7:D3:D7:2D:CB:61:29:24:F0:3F:D2:F4:70
            X509v3 Authority Key Identifier:
                keyid:FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/b5f245b676fe29d04f7b2cacbc15e2db4120858f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:45:8a:d4:39:ed:2a:f5:b4:29:22:93:0c:59:08:cd:0e:3f:
         08:4c:8f:05:bf:d1:b7:b8:f1:23:f6:3c:5f:c0:f5:0b:49:df:
         38:78:9b:54:86:55:cd:98:fb:81:8f:5c:fb:3d:25:91:ab:88:
         65:b1:1b:62:38:c5:9d:39:37:e1:b6:95:47:c5:c4:ea:79:dd:
         80:ca:c5:5e:98:2a:b6:64:6a:67:45:84:81:ce:31:91:bc:10:
         71:24:20:bf:3b:d1:50:c9:45:58:9c:6d:30:82:62:84:fc:19:
         35:40:4e:c2:d8:b2:da:a8:93:ff:7a:33:be:cb:e4:8c:17:6e:
         77:d5:42:d8:2d:9b:cf:0a:6a:0d:0f:82:b8:d0:d2:13:54:63:
         0d:ac:bf:3f:ff:a5:a0:aa:f5:6d:2e:64:57:59:05:fa:d5:35:
         c8:c4:1b:25:a9:0d:9a:2a:64:37:71:de:bc:87:61:b1:76:bf:
         7c:fd:2d:97:88:8e:49:05:c1:9e:b8:98:84:8e:fd:91:26:e0:
         9d:ad:94:90:08:f5:4b:e1:c7:b6:35:45:f0:c0:16:60:f5:22:
         42:3c:61:6e:8f:9b:ce:eb:a7:2d:92:8f:a6:b6:1e:e3:5d:01:
         05:ee:15:13:20:7a:23:e7:4f:04:22:c3:c0:f3:54:cf:63:21:
         77:97:37:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:47 2024 by rpki-client on console-ams.rpki-client.org