Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/d868ff0641ed04ef27a8b0995d0b9b9675bd7654.roa
File:                     d868ff0641ed04ef27a8b0995d0b9b9675bd7654.roa (raw, json)
Hash identifier:          QVmloNm7Uxmgu9/eszPYXn4FRhngPJMmTNAW0WpllnU=
Subject key identifier:   76:9B:64:97:60:72:5B:27:35:B2:57:46:3D:88:1A:81:C5:F8:C5:9A
Certificate issuer:       /CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
Certificate serial:       2A43C8
Authority key identifier: FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/d868ff0641ed04ef27a8b0995d0b9b9675bd7654.roa
Signing time:             Wed 14 Feb 2024 13:39:38 +0000
ROA not before:           Wed 14 Feb 2024 13:39:34 +0000
ROA not after:            Wed 14 Feb 2029 13:39:34 +0000
asID:                     5065
IP address blocks:        190.93.66.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2769864 (0x2a43c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
        Validity
            Not Before: Feb 14 13:39:34 2024 GMT
            Not After : Feb 14 13:39:34 2029 GMT
        Subject: CN=d868ff0641ed04ef27a8b0995d0b9b9675bd7654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2d:0a:30:a4:cb:09:c1:7e:f5:b4:49:61:bb:
                    23:70:88:1a:d6:1b:68:91:67:d1:7a:63:fa:ff:9e:
                    8e:52:72:5d:50:a4:4a:35:96:99:30:41:fd:16:a7:
                    26:f9:00:71:c2:72:64:2e:4f:68:e5:1e:e5:37:56:
                    c1:52:cc:79:90:77:ce:aa:b0:8c:44:7f:67:2a:3f:
                    e5:24:06:01:dd:04:c0:eb:62:9f:a6:d8:01:9b:ff:
                    73:3f:3a:ca:8d:3b:95:f4:32:a0:41:52:95:bb:5c:
                    bf:d3:f1:0f:54:e3:49:d5:67:67:47:7d:9b:05:65:
                    e0:4e:51:f9:17:a3:46:9b:db:9f:56:80:39:70:76:
                    c6:56:33:04:90:37:52:14:57:47:d6:c8:ab:52:7b:
                    a3:df:0d:6b:e1:26:01:56:cc:99:25:95:84:e8:de:
                    63:e7:ca:02:6c:29:05:ac:57:e7:4c:24:7b:fa:f2:
                    87:7f:6d:78:68:7c:72:a3:d1:fc:6b:2d:a0:8f:b3:
                    88:18:6a:2d:65:38:7d:b8:09:d0:c7:3a:c3:12:73:
                    b4:7b:10:8d:f6:9b:94:94:26:ef:c1:dd:4f:1d:37:
                    f2:4c:a3:06:48:7a:2d:04:3d:74:3d:29:31:bc:d9:
                    ac:e2:e0:db:d8:a1:6d:7e:1d:ef:70:d4:8e:65:d8:
                    96:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:9B:64:97:60:72:5B:27:35:B2:57:46:3D:88:1A:81:C5:F8:C5:9A
            X509v3 Authority Key Identifier:
                keyid:FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/d868ff0641ed04ef27a8b0995d0b9b9675bd7654.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:af:08:a1:30:ed:f3:80:75:10:9d:76:ed:64:0a:34:23:c4:
         b2:70:c9:42:c3:99:dc:a6:be:e1:e7:00:05:b1:57:21:5f:86:
         2a:ef:f0:e9:14:24:90:d3:21:48:9e:73:da:1b:ef:b8:6d:d2:
         21:0f:af:e4:f2:c3:fb:73:18:f9:eb:a7:bc:32:da:a3:29:21:
         7f:b6:bd:54:1e:8c:e8:dc:b7:f0:3e:65:67:11:33:79:38:d6:
         45:bc:8f:d2:7e:a0:5e:01:6c:f7:87:60:a5:3d:17:d1:78:6b:
         da:25:48:bf:ce:67:83:39:a2:98:dc:31:55:73:ef:5b:db:2f:
         4b:62:17:5c:9f:dc:e0:5a:7d:72:3b:ed:fb:41:eb:d8:14:d1:
         13:e1:da:8d:e5:32:34:e6:b7:e1:6f:e2:36:93:f1:3e:d5:d9:
         71:bf:b2:71:ed:b7:07:11:af:68:83:f9:2c:f5:e2:fd:cc:a2:
         ed:a6:3d:b3:b3:11:00:96:e6:d0:5f:e9:bd:da:43:6d:2f:7a:
         71:6b:20:9f:d5:b1:05:8e:ea:a1:f7:59:30:98:a0:a5:c4:e4:
         0d:8c:05:e4:18:9f:c3:58:a9:d2:4e:c3:96:bf:0e:5f:6c:87:
         bd:2f:a8:14:b9:cd:8b:1d:2f:b0:99:4e:36:e0:c2:4a:57:c3:
         a0:3c:f1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:47 2024 by rpki-client on console-ams.rpki-client.org