Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e784fed616402d60d2dcf699343afb591c9868c4.roa
File:                     e784fed616402d60d2dcf699343afb591c9868c4.roa (raw, json)
Hash identifier:          x/UweDIW1Ol4J6EY1aYl51AYlYu6wh+ISddCE62+ge4=
Subject key identifier:   88:18:A8:38:76:B3:2C:B5:CB:52:61:9B:44:FB:89:29:A2:9F:A5:3A
Certificate issuer:       /CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
Certificate serial:       2A55A8
Authority key identifier: FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e784fed616402d60d2dcf699343afb591c9868c4.roa
Signing time:             Wed 14 Feb 2024 13:39:44 +0000
ROA not before:           Wed 14 Feb 2024 13:39:34 +0000
ROA not after:            Wed 14 Feb 2029 13:39:34 +0000
asID:                     199487
IP address blocks:        190.93.69.0/24 maxlen: 24
                          190.93.70.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2774440 (0x2a55a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
        Validity
            Not Before: Feb 14 13:39:34 2024 GMT
            Not After : Feb 14 13:39:34 2029 GMT
        Subject: CN=e784fed616402d60d2dcf699343afb591c9868c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:8f:9c:86:7a:c8:cd:67:9b:c1:11:60:4b:63:
                    e7:0b:de:65:f9:e3:e7:86:05:46:3e:eb:be:01:60:
                    1f:ed:54:d3:e9:ee:5c:4f:ce:89:8e:3c:85:91:b5:
                    fe:5a:b5:52:be:d3:29:01:87:dd:3e:72:6d:59:91:
                    54:37:ac:0b:f8:a7:26:e3:52:53:46:cc:86:e5:54:
                    29:7e:3b:2c:98:f0:3f:8c:5e:c4:e7:fd:6f:ea:9d:
                    99:85:6c:76:67:7d:f8:2c:be:e4:ab:b0:2d:03:68:
                    e5:d0:ea:0c:ab:29:17:24:d5:13:9d:eb:42:9c:e4:
                    70:83:42:bf:0e:ef:4a:80:1a:f1:d9:d1:ac:4f:f7:
                    fe:76:66:fe:9b:5f:6c:ee:d0:82:9a:e3:f6:4b:d2:
                    36:21:75:91:09:25:76:d1:da:92:ae:b1:a6:6f:ae:
                    8b:5c:77:cd:3c:ed:14:07:8d:ca:8a:2a:17:52:6a:
                    14:3a:15:55:43:8f:e3:75:f2:bf:ba:23:bf:e3:9b:
                    de:c5:bc:5b:ba:6f:a0:99:62:3c:91:6a:ba:c7:a8:
                    57:ee:46:a0:e9:33:2f:8f:9f:f2:39:5d:6d:53:50:
                    9c:56:2d:8f:bc:43:30:d3:5a:3c:83:7a:20:bc:0d:
                    54:5a:fb:c1:ad:90:46:89:af:da:a2:2d:ee:26:01:
                    6a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:18:A8:38:76:B3:2C:B5:CB:52:61:9B:44:FB:89:29:A2:9F:A5:3A
            X509v3 Authority Key Identifier:
                keyid:FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e784fed616402d60d2dcf699343afb591c9868c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.69.0-190.93.70.255

    Signature Algorithm: sha256WithRSAEncryption
         1a:c6:90:cf:8d:d8:bd:a6:a6:9b:ee:7f:7e:43:48:a9:0b:da:
         06:20:a3:ec:fc:23:06:31:76:47:ee:30:35:fa:e2:11:96:e8:
         83:9d:f5:ca:9a:48:ee:ac:99:41:99:46:9b:9f:95:9e:cb:0b:
         cc:e7:d5:ba:56:35:d5:f1:94:b8:97:20:a8:6d:69:36:31:83:
         73:5b:48:11:08:0b:86:74:8b:3a:5b:83:7c:e4:34:cb:9e:12:
         28:74:87:87:18:65:b4:e8:73:52:4d:18:6a:c4:6c:06:27:40:
         d3:a5:af:20:7d:3f:1b:b1:a7:3b:6c:ed:e2:25:5f:35:3f:a2:
         57:eb:14:31:76:ae:32:e7:a5:e5:33:b3:5e:5d:21:49:93:0d:
         a7:16:66:85:77:a6:f5:93:23:f8:35:0d:f3:e2:8a:1a:29:e1:
         34:2b:6c:52:c2:1b:22:07:bc:38:79:f8:c2:aa:6a:6d:4a:12:
         7e:a8:58:bb:a7:1c:12:29:7a:50:9f:71:50:28:bf:69:0e:f4:
         a8:02:3c:e2:f5:25:2e:0f:30:f2:b5:84:54:01:15:24:49:44:
         f9:b4:c9:20:a9:c7:2d:ce:e6:73:a5:1a:9a:e3:2c:01:dc:7c:
         b4:2f:cf:a5:8c:0a:fd:73:11:4c:cb:1c:63:8c:d8:61:e1:fa:
         68:4a:9a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:47 2024 by rpki-client on console-ams.rpki-client.org