Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d5c07b1f-a5f9-4e03-ab3c-30e993cc1fc7/5b96279dc453eb6825b62446bc41e2074aa09770.roa
File:                     5b96279dc453eb6825b62446bc41e2074aa09770.roa (raw, json)
Hash identifier:          e0rrqjVqYZRRyCl9EsYDGxOLJVLNnrPeFWqT1yCWwM4=
Subject key identifier:   2A:25:C9:6E:8C:D4:D4:B6:1C:82:26:75:24:D2:99:F6:24:29:1F:DA
Certificate issuer:       /CN=5d58b8d1fe1a7ec6f16054c5c8e97d1261a255ed
Certificate serial:       21C44A
Authority key identifier: AA:D3:E4:91:DA:FA:6F:0D:36:21:13:B5:B2:84:C7:CD:C9:4E:A0:04
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d58b8d1fe1a7ec6f16054c5c8e97d1261a255ed.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d5c07b1f-a5f9-4e03-ab3c-30e993cc1fc7/5b96279dc453eb6825b62446bc41e2074aa09770.roa
Signing time:             Thu 22 Jun 2023 15:01:29 +0000
ROA not before:           Wed 21 Jun 2023 15:01:29 +0000
ROA not after:            Sun 22 Jun 2025 15:01:29 +0000
asID:                     27947
IP address blocks:        190.107.68.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2212938 (0x21c44a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d58b8d1fe1a7ec6f16054c5c8e97d1261a255ed
        Validity
            Not Before: Jun 21 15:01:29 2023 GMT
            Not After : Jun 22 15:01:29 2025 GMT
        Subject: CN=5b96279dc453eb6825b62446bc41e2074aa09770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:76:d7:72:cf:84:19:b5:04:7d:59:21:de:89:
                    e8:94:9a:b2:f6:48:60:bb:69:4e:ca:6d:ed:f7:10:
                    e0:d6:a9:0e:d1:00:c0:0a:9d:1c:af:88:5a:2d:1e:
                    ce:0e:3a:81:98:72:82:37:93:58:45:09:01:d1:5c:
                    c9:00:58:5a:59:b4:c0:77:fb:93:c4:88:a2:4e:14:
                    13:e6:7e:70:49:23:1c:77:dd:66:b4:d7:45:04:dd:
                    ed:82:f6:5e:33:19:bc:d8:2a:68:56:39:5f:2e:79:
                    2e:8e:a4:ad:5a:9e:a6:13:2b:31:d7:77:f8:96:2b:
                    ed:ef:c2:7f:08:1f:a1:39:d1:18:e1:78:20:72:c2:
                    96:6c:25:05:68:fc:b6:0e:57:4b:17:97:67:6d:01:
                    ef:39:72:6a:8c:cc:0a:e7:a0:3f:ba:3e:ca:65:af:
                    a0:b8:04:d8:79:01:c2:75:d5:bc:40:40:f8:3e:17:
                    af:7c:3f:7e:8b:d7:c2:cc:dc:94:7d:07:b0:87:b5:
                    25:c6:da:3a:b2:75:63:8f:14:65:ca:08:53:15:77:
                    75:d3:fe:b6:36:a9:1c:b1:ad:63:27:3d:01:b8:aa:
                    a7:14:5a:2f:0e:57:30:8b:88:5b:8b:86:25:9f:c7:
                    3b:16:e2:d8:be:c6:ff:d0:38:09:21:6b:5f:1a:9a:
                    ed:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:25:C9:6E:8C:D4:D4:B6:1C:82:26:75:24:D2:99:F6:24:29:1F:DA
            X509v3 Authority Key Identifier:
                keyid:AA:D3:E4:91:DA:FA:6F:0D:36:21:13:B5:B2:84:C7:CD:C9:4E:A0:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d58b8d1fe1a7ec6f16054c5c8e97d1261a255ed.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d5c07b1f-a5f9-4e03-ab3c-30e993cc1fc7/5b96279dc453eb6825b62446bc41e2074aa09770.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d5c07b1f-a5f9-4e03-ab3c-30e993cc1fc7/5d58b8d1fe1a7ec6f16054c5c8e97d1261a255ed.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:43:cc:f9:14:58:19:67:95:0f:16:4e:91:61:b4:83:57:d3:
         69:74:e1:66:28:d5:cb:e2:be:70:f6:38:3f:98:09:06:92:f4:
         88:5a:00:be:f4:41:de:3b:09:54:07:eb:dc:ac:df:38:96:e4:
         24:c5:fe:b7:00:aa:b0:63:83:07:ff:6a:7d:a0:57:7b:30:a8:
         f2:9d:95:dc:19:97:69:54:82:1b:29:36:c4:c7:a7:41:e0:ae:
         63:39:d7:73:25:5e:8a:fc:1b:77:60:c5:a8:85:40:b1:83:e9:
         94:8c:55:ab:7e:98:9b:29:e1:37:c6:b7:35:8d:78:0b:0f:9a:
         c9:36:e1:06:9c:f8:35:49:d8:18:27:74:03:77:01:b8:fa:40:
         08:c7:1a:3b:44:b2:52:c3:ee:47:98:6f:85:9e:55:46:61:18:
         a7:56:d4:97:50:ab:5b:8c:71:70:0b:14:18:96:58:85:2d:a5:
         c8:8c:61:74:a7:46:27:fd:2f:ae:ec:11:2b:04:b1:56:0f:83:
         80:44:f6:49:ec:80:89:56:35:69:aa:2f:b7:70:4e:3a:83:cb:
         42:e7:42:1e:5c:3d:56:f7:3d:51:be:c8:e3:6a:23:ab:fd:ae:
         77:24:c2:1e:92:a8:5e:12:3f:17:85:dd:57:17:85:3c:08:e1:
         28:80:1a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:08 2024 by rpki-client on console-fra.rpki-client.org