Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e28db09ee780f2dec2aadf38e47e68bb7b499904.roa
File:                     e28db09ee780f2dec2aadf38e47e68bb7b499904.roa (raw, json)
Hash identifier:          JRlfhUt7WC9LNKGw+N6qpPpoB55lTJBnAxD7FEF2X6o=
Subject key identifier:   42:47:81:C3:87:A5:F9:E4:44:59:00:3F:2F:AB:3C:AC:18:C1:DC:D0
Certificate issuer:       /CN=e5d85378526621fbd4956efa10478f912f0807db
Certificate serial:       29FDB0
Authority key identifier: 18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e28db09ee780f2dec2aadf38e47e68bb7b499904.roa
Signing time:             Thu 08 Feb 2024 11:05:50 +0000
ROA not before:           Thu 08 Feb 2024 11:05:50 +0000
ROA not after:            Sun 08 Feb 2026 11:05:50 +0000
asID:                     834
IP address blocks:        190.93.87.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2751920 (0x29fdb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d85378526621fbd4956efa10478f912f0807db
        Validity
            Not Before: Feb  8 11:05:50 2024 GMT
            Not After : Feb  8 11:05:50 2026 GMT
        Subject: CN=e28db09ee780f2dec2aadf38e47e68bb7b499904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b8:06:21:6c:c3:bb:8b:4e:53:d8:94:73:f1:
                    f5:81:c3:6c:38:8a:73:28:6e:d0:25:d8:2d:45:cc:
                    80:d2:69:f9:b7:db:48:1a:2c:aa:bf:07:c0:b9:aa:
                    90:1e:e1:b7:d4:48:e0:2d:fe:69:c0:81:50:b3:ad:
                    30:db:1d:5a:29:1f:01:cd:da:88:a4:26:41:dd:0d:
                    0e:e2:4f:5c:a5:a8:6d:59:29:82:92:63:f4:2d:1c:
                    90:2d:d3:b5:0a:c1:11:8f:12:ec:64:8c:6d:79:c2:
                    33:6f:c6:74:f5:fa:83:a2:4a:48:5b:87:0d:c8:3f:
                    a5:1c:8d:fb:42:84:78:f5:e7:0b:61:15:f0:14:11:
                    ca:68:ec:cd:d2:5a:77:39:98:7a:5d:d9:8f:2d:ce:
                    ee:ad:99:e7:c0:51:4b:18:18:ad:91:f6:82:ad:2d:
                    ec:77:0d:cd:b8:b4:18:23:29:be:27:dc:5c:45:fe:
                    ed:0f:87:40:97:0b:ef:2e:9c:43:e1:4c:71:f2:18:
                    9e:6f:58:2a:b6:6a:89:23:eb:1e:7c:95:dd:78:a8:
                    47:c8:aa:7f:69:d8:9a:fd:65:d3:88:90:ad:5a:f7:
                    d9:8a:fa:12:0c:b8:20:e3:7c:66:21:91:53:f0:64:
                    7b:56:14:0f:b9:73:c5:0f:58:8e:27:51:b9:72:61:
                    85:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:47:81:C3:87:A5:F9:E4:44:59:00:3F:2F:AB:3C:AC:18:C1:DC:D0
            X509v3 Authority Key Identifier:
                keyid:18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e28db09ee780f2dec2aadf38e47e68bb7b499904.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:07:e0:2e:bd:4f:ec:35:53:ad:b9:de:0f:93:11:5d:e4:d6:
         a8:ca:25:84:12:11:99:9c:7c:25:ab:25:b5:77:9a:2c:6d:48:
         ce:f2:91:3e:fe:b3:db:f6:f0:32:9c:57:9c:4f:93:fb:ab:c0:
         9f:51:06:c7:b9:c9:99:dd:88:1f:c3:1e:5b:d0:c3:93:12:83:
         72:66:6f:b4:a8:4b:5d:c3:b8:97:89:87:24:99:c4:59:62:cf:
         ef:d1:c3:22:52:f9:dd:06:fc:62:05:e4:64:9a:58:9c:1c:96:
         e6:5c:6d:99:9b:93:c4:5b:da:45:b1:5d:5e:63:57:5e:ee:8a:
         e7:32:10:8a:8a:1e:aa:65:d4:62:bb:29:e8:0a:b9:85:c6:46:
         ee:98:c7:cc:1a:3a:82:67:b3:6c:55:32:6f:0f:43:2b:50:62:
         24:9a:ab:2c:30:81:e1:07:07:27:a3:f1:eb:fe:be:61:c5:20:
         b8:60:a6:38:e6:eb:0d:d7:52:e3:92:6c:28:13:03:d8:73:50:
         8f:06:66:44:00:e8:4f:58:14:6c:d8:2c:3e:b4:8d:a2:83:0e:
         97:72:27:62:bd:87:3c:da:ec:de:ea:11:be:ed:85:62:54:db:
         ba:ed:cb:05:e6:97:fe:e2:2e:ef:2b:5b:b2:d3:fb:ac:4b:df:
         e7:de:7d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 14 18:19:14 2024 by rpki-client on console-fra.rpki-client.org