Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/eaf7e98af8f3b0255074e0dc1bd6ca922c535a58.roa
File:                     eaf7e98af8f3b0255074e0dc1bd6ca922c535a58.roa (raw, json)
Hash identifier:          MNo4LLaVpe3j73rlPJXVsm/DAucDa1GZAGBHt5o67mM=
Subject key identifier:   AC:12:36:11:2C:70:A0:59:10:07:84:1C:8C:5E:F7:99:3E:FD:FE:3B
Certificate issuer:       /CN=e5d85378526621fbd4956efa10478f912f0807db
Certificate serial:       270F66
Authority key identifier: 18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/eaf7e98af8f3b0255074e0dc1bd6ca922c535a58.roa
Signing time:             Mon 06 Nov 2023 19:00:32 +0000
ROA not before:           Mon 06 Nov 2023 19:00:32 +0000
ROA not after:            Thu 06 Nov 2025 19:00:32 +0000
asID:                     269070
IP address blocks:        190.93.67.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2559846 (0x270f66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d85378526621fbd4956efa10478f912f0807db
        Validity
            Not Before: Nov  6 19:00:32 2023 GMT
            Not After : Nov  6 19:00:32 2025 GMT
        Subject: CN=eaf7e98af8f3b0255074e0dc1bd6ca922c535a58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4c:e1:78:29:85:e9:82:55:4b:4b:ff:d2:b7:
                    7b:fb:70:a3:a1:4a:70:63:59:f6:35:a6:50:03:9f:
                    6d:d9:e1:f8:21:a1:94:74:ed:ed:69:3a:3d:50:dc:
                    df:a0:d3:d8:0d:4f:45:bb:c7:25:e7:74:78:05:e5:
                    85:59:73:42:f3:12:d0:db:17:f4:c9:fe:b3:64:1c:
                    33:b0:10:a9:25:44:09:22:ad:1d:9a:f2:94:c8:62:
                    ce:ff:b6:e9:9d:d3:86:1a:23:ec:d1:23:b4:13:03:
                    8c:23:dd:08:ac:86:f5:72:b3:74:23:06:54:b9:f2:
                    2d:6d:6b:d3:79:d1:e3:44:e5:fb:12:35:68:81:64:
                    2d:72:a9:9d:cd:fa:14:86:db:b7:7e:ec:60:19:e9:
                    41:3e:0a:6a:e1:bb:1b:a6:b5:b5:14:e3:14:82:21:
                    bc:af:2f:db:af:5f:b6:c3:38:d1:f8:10:8c:7a:ee:
                    a4:4e:3a:4e:db:6f:ee:f6:27:01:80:aa:01:a4:c8:
                    a7:23:11:ec:cc:0d:2e:75:0e:5d:a1:f5:74:a4:ae:
                    16:e2:39:02:70:50:80:e7:19:b7:22:17:cb:36:24:
                    c3:62:7c:6d:07:c6:e8:ff:96:28:ee:75:b7:dd:60:
                    32:2d:02:20:59:28:71:78:bf:f8:d0:58:d4:e2:de:
                    cc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:12:36:11:2C:70:A0:59:10:07:84:1C:8C:5E:F7:99:3E:FD:FE:3B
            X509v3 Authority Key Identifier:
                keyid:18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/eaf7e98af8f3b0255074e0dc1bd6ca922c535a58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:e7:c5:34:bd:e3:b4:3c:c6:64:67:76:9e:8d:cf:82:18:6b:
         4f:6b:7d:5e:2b:f3:72:35:77:8c:54:8d:90:21:69:ad:47:ef:
         75:11:e7:93:b4:c4:fc:e3:73:fd:48:90:a2:93:90:5d:51:0e:
         92:7d:61:09:79:3e:0d:82:3e:9a:e3:2b:bd:35:94:e4:75:10:
         8d:33:a1:06:24:ba:6d:66:0d:dc:6d:89:33:b3:a4:91:3b:c0:
         5b:38:91:9a:24:4a:ad:30:2e:2b:b7:d0:9a:e9:71:4c:04:d9:
         22:2b:0f:bb:a2:47:4a:8b:d9:04:a8:47:2d:e8:d0:3d:ba:50:
         d0:5a:cf:ab:81:5e:ed:cd:de:6b:24:24:75:fd:f9:32:9d:3b:
         af:1c:b9:9c:18:14:a1:f8:b4:0e:a4:ce:eb:cb:1b:24:0c:4b:
         fa:da:72:34:46:84:33:04:c4:d3:46:8e:78:83:68:56:e5:52:
         28:96:e7:45:da:5b:06:cd:1c:ba:b8:80:a9:4f:38:5e:49:ec:
         17:65:ab:8d:6f:78:d6:b5:e3:13:98:ef:3a:5c:17:85:84:60:
         47:35:fa:59:f1:35:17:17:2f:d9:7e:1d:50:f6:18:fe:08:be:
         a1:5b:5f:8d:16:de:9a:f4:d5:a9:70:24:9d:f6:de:e2:ac:ba:
         0a:15:16:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 14 18:19:14 2024 by rpki-client on console-fra.rpki-client.org