Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/f5b097290284da38ca3f4f838d7c00166405486e.roa
File:                     f5b097290284da38ca3f4f838d7c00166405486e.roa (raw, json)
Hash identifier:          eUhJlVbRU1N456z+b/Tmw5LLYrGJOG14Gc06idTgqJQ=
Subject key identifier:   AD:BC:90:F2:45:A7:FA:01:5E:55:44:49:5E:53:49:AA:80:AC:10:96
Certificate issuer:       /CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
Certificate serial:       2A89F3
Authority key identifier: FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/f5b097290284da38ca3f4f838d7c00166405486e.roa
Signing time:             Wed 14 Feb 2024 13:40:09 +0000
ROA not before:           Wed 14 Feb 2024 13:39:34 +0000
ROA not after:            Wed 14 Feb 2029 13:39:34 +0000
asID:                     7018
IP address blocks:        190.93.77.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2787827 (0x2a89f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
        Validity
            Not Before: Feb 14 13:39:34 2024 GMT
            Not After : Feb 14 13:39:34 2029 GMT
        Subject: CN=f5b097290284da38ca3f4f838d7c00166405486e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:10:4d:f7:b7:c4:73:d9:b0:dc:1f:e9:03:e2:
                    86:46:ef:5b:69:d4:c9:e2:4b:92:41:38:67:9d:a8:
                    b1:2a:8c:3b:2d:8c:9b:3e:c7:77:37:4d:77:da:ce:
                    38:a2:af:6f:e5:b4:ba:ae:96:25:5b:90:46:dc:17:
                    f5:1c:5d:eb:1c:cc:47:9f:87:ec:49:34:73:da:ea:
                    25:aa:cb:0b:20:54:28:83:7c:fb:68:77:af:42:7f:
                    97:01:9b:94:eb:2b:04:94:d7:52:1a:d3:fa:2b:45:
                    6d:d0:eb:43:6b:2a:f1:ad:92:2c:35:9d:f3:05:99:
                    04:fe:64:22:a0:d2:5d:79:bc:22:76:a4:95:2b:93:
                    8b:c0:e8:cf:2a:d6:74:d4:0f:6e:ad:80:61:2d:05:
                    93:ac:64:07:81:4c:0b:2c:c9:54:2d:c5:d5:4e:a6:
                    c6:78:f2:28:fb:5b:2a:3f:d5:a4:1f:9c:ee:df:33:
                    b9:db:7a:00:43:43:cb:6d:f4:12:6c:7d:e2:44:08:
                    94:17:4d:a1:ae:ec:b3:a8:72:fa:75:15:b6:ab:cc:
                    76:8c:17:b6:e4:48:4b:56:e2:97:30:6c:80:d2:e9:
                    92:14:0d:cf:74:2a:55:45:c1:f8:c7:d3:e8:40:3f:
                    67:20:30:b1:11:fe:1d:48:c3:d1:b0:02:91:05:a4:
                    72:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:BC:90:F2:45:A7:FA:01:5E:55:44:49:5E:53:49:AA:80:AC:10:96
            X509v3 Authority Key Identifier:
                keyid:FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/f5b097290284da38ca3f4f838d7c00166405486e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:12:63:be:d4:a9:54:bd:62:68:a6:5e:27:7f:75:21:85:b9:
         45:1a:d6:02:02:4d:97:55:ae:9e:80:d8:62:9d:33:39:19:3f:
         c2:7a:85:82:a6:02:86:bf:04:4a:01:bb:b3:71:25:a7:65:a0:
         55:a2:97:3b:ba:ab:09:7a:f0:7c:6b:ec:b2:90:da:6b:ac:3a:
         26:7e:fb:7e:9d:53:45:8b:1b:00:ba:fd:5e:8b:28:0b:dc:73:
         db:4d:3c:01:02:ba:3e:13:d4:b9:55:cc:74:1d:66:ca:dc:93:
         95:51:36:fb:ce:fe:a8:27:c8:10:8d:29:3b:1b:96:da:18:3a:
         1c:ab:2c:f9:25:e5:3a:0d:2a:75:50:61:b0:76:26:1d:bc:7d:
         9e:66:65:86:9a:da:df:a6:1a:f5:c4:0d:2a:55:de:06:cc:11:
         a0:49:63:df:2f:6e:66:a5:44:9a:81:db:44:d8:ed:4d:14:f8:
         b4:11:ad:6e:61:6f:c0:a7:b1:bb:50:d1:16:a4:62:85:a3:55:
         cb:a5:c6:a3:ae:40:e4:2b:d8:d3:c3:0d:97:1f:f7:ef:f7:71:
         2a:a2:ef:da:23:c9:88:71:d5:0d:84:74:c3:f2:e8:f4:bc:d0:
         c4:83:2b:ec:00:e3:74:f7:e8:86:4d:9f:00:01:ce:dd:57:64:
         5b:e9:d2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:30 2024 by rpki-client on console-fra.rpki-client.org