Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/d3c03ec0c4bb1327349cec423d32bcd06d814ec8.roa
File:                     d3c03ec0c4bb1327349cec423d32bcd06d814ec8.roa (raw, json)
Hash identifier:          5KRxdWMbXbxBTJJEeskCq+fcBT+iPDHhNr86o9Z5K2A=
Subject key identifier:   FF:CB:5E:1F:7B:47:48:E7:D7:52:44:AE:52:E5:23:86:F8:BD:09:AA
Certificate issuer:       /CN=e5d85378526621fbd4956efa10478f912f0807db
Certificate serial:       26840E
Authority key identifier: 18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/d3c03ec0c4bb1327349cec423d32bcd06d814ec8.roa
Signing time:             Wed 18 Oct 2023 00:05:18 +0000
ROA not before:           Tue 17 Oct 2023 00:05:18 +0000
ROA not after:            Sat 18 Oct 2025 00:05:18 +0000
asID:                     272460
IP address blocks:        190.93.86.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2524174 (0x26840e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d85378526621fbd4956efa10478f912f0807db
        Validity
            Not Before: Oct 17 00:05:18 2023 GMT
            Not After : Oct 18 00:05:18 2025 GMT
        Subject: CN=d3c03ec0c4bb1327349cec423d32bcd06d814ec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:6b:50:10:8f:7c:22:19:d3:44:e0:a6:6b:55:
                    ca:23:b4:90:0f:ba:e3:d2:8a:7f:e8:58:28:f6:5c:
                    9f:83:3e:6d:44:cf:07:40:91:33:f3:0e:e8:5a:41:
                    70:15:2a:1f:99:3b:9f:81:ac:67:ac:18:c8:fa:f0:
                    23:1b:d0:4c:91:e1:6d:9d:60:c5:17:b5:15:31:2e:
                    e0:21:c3:38:13:88:99:62:a6:25:83:80:1d:aa:b1:
                    db:e1:75:74:9d:3b:e5:a9:a6:a5:10:d1:52:67:2b:
                    2e:9d:00:b0:0d:d7:d3:56:61:94:9a:f5:f8:81:c8:
                    37:10:76:25:c0:54:b5:28:ec:a2:2c:26:5c:20:87:
                    e6:78:dc:98:b1:a5:2d:d4:89:49:7e:81:00:3d:ca:
                    83:66:67:bd:c0:15:53:f1:4e:43:26:89:ed:1a:c7:
                    1e:78:68:5a:60:e0:f9:53:70:83:15:0e:80:b8:85:
                    ed:e5:d4:da:f5:ed:8f:34:0c:5d:a3:ec:0f:7d:25:
                    c1:67:1f:cc:8d:37:f3:26:3a:48:9a:bd:76:18:86:
                    af:cc:80:a0:58:2a:d4:5d:97:ad:4b:16:d9:ee:7e:
                    c2:1b:8d:a8:d0:3f:15:76:0a:b5:f9:78:0f:eb:a4:
                    02:ff:f1:f8:ee:8f:95:0b:ba:44:ec:ac:fc:6a:37:
                    89:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:CB:5E:1F:7B:47:48:E7:D7:52:44:AE:52:E5:23:86:F8:BD:09:AA
            X509v3 Authority Key Identifier:
                keyid:18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/d3c03ec0c4bb1327349cec423d32bcd06d814ec8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:84:e4:d1:68:06:54:b9:c1:1e:7c:c5:c3:8e:98:cb:e8:01:
         55:3b:1e:51:7e:d8:0e:6d:78:76:9a:aa:44:29:c5:86:49:e6:
         df:15:f8:03:3a:f7:33:b6:9a:05:b6:eb:40:8d:9a:df:df:f4:
         24:45:17:21:98:4c:3c:d5:53:55:bd:d4:88:49:36:47:29:7f:
         fe:02:76:19:c7:36:89:1d:6a:1c:f4:04:00:c2:39:5a:82:1d:
         4b:a5:98:72:1d:f5:a8:9b:c0:a0:c3:83:18:13:46:8d:c7:c9:
         20:d2:58:a8:48:74:36:97:2b:6e:58:b8:28:42:5a:b7:b3:b1:
         e3:db:58:eb:cb:c8:0c:68:59:99:a5:44:14:6d:ee:9b:ba:c8:
         b9:81:57:f9:4d:85:42:3c:ce:55:ee:5f:28:25:4e:a3:3a:5f:
         1a:94:69:ea:1f:99:1b:ca:ff:2f:a0:47:5e:1b:1c:3c:0f:65:
         e8:3c:d5:b5:31:a4:e7:77:d9:b2:1f:96:75:ea:db:9f:c6:23:
         c2:14:6f:f5:8b:7a:83:cd:c2:9e:66:cd:57:02:44:24:15:09:
         26:35:43:60:2d:2c:5c:ea:50:de:9e:6f:74:55:b0:ac:6a:c2:
         7e:7c:f0:94:39:45:9a:37:e7:e2:8d:d1:80:7b:db:c9:27:6b:
         aa:ba:92:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 14 18:19:14 2024 by rpki-client on console-fra.rpki-client.org