Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/95e1b46dc932c7f5830afbf602e982819a25b15d.roa
File:                     95e1b46dc932c7f5830afbf602e982819a25b15d.roa (raw, json)
Hash identifier:          zHh0JeJQxQz9wRCCPhR2Y8OyxKccBCW60YOz21P3wzU=
Subject key identifier:   19:39:6A:BE:3F:FF:15:D6:C6:A9:8B:E8:35:12:AC:23:38:AE:83:5E
Certificate issuer:       /CN=d62baf1d43712ef5f3860b21d04e8534536fa164
Certificate serial:       279703
Authority key identifier: 87:E3:56:32:C3:DB:AB:0D:4B:98:DD:5C:12:0E:34:A9:48:38:30:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d62baf1d43712ef5f3860b21d04e8534536fa164.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/95e1b46dc932c7f5830afbf602e982819a25b15d.roa
Signing time:             Fri 09 Feb 2024 19:19:18 +0000
ROA not before:           Fri 09 Feb 2024 19:19:18 +0000
ROA not after:            Mon 09 Feb 2026 19:19:18 +0000
asID:                     22047
IP address blocks:        191.119.0.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2594563 (0x279703)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d62baf1d43712ef5f3860b21d04e8534536fa164
        Validity
            Not Before: Feb  9 19:19:18 2024 GMT
            Not After : Feb  9 19:19:18 2026 GMT
        Subject: CN=95e1b46dc932c7f5830afbf602e982819a25b15d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3f:d2:15:14:e7:e8:7c:a3:1d:af:ee:31:a6:
                    57:b8:1d:8b:5c:3f:f3:eb:5f:76:8c:60:ac:89:4e:
                    55:6a:42:2d:92:ad:1a:df:aa:31:6d:44:8f:77:15:
                    3f:85:4f:94:72:28:53:80:96:c9:c7:fb:85:63:6c:
                    f9:d2:e7:1b:e7:37:1a:71:8f:90:47:61:3a:96:2e:
                    2b:ea:06:83:c1:f0:fb:5e:17:59:76:f8:bc:c0:a0:
                    f5:cc:f9:e5:90:3c:d7:46:0d:1a:a2:df:f5:82:de:
                    8b:be:40:d5:2d:a9:b3:50:c9:ea:b4:0f:62:9a:77:
                    59:e0:0b:c9:a3:a3:5c:cf:de:ac:a2:6e:c8:48:07:
                    a9:77:0c:a0:f9:6f:66:df:34:43:f7:04:3d:07:5f:
                    ab:e6:aa:fa:b6:c2:51:d5:84:40:43:be:2e:cf:22:
                    30:3a:62:ee:1a:26:87:a8:c5:29:b2:46:53:5f:a0:
                    53:7d:ec:df:40:6f:e0:2f:bc:a5:43:95:1c:01:c4:
                    f0:16:3b:d5:2b:18:11:87:0c:ae:05:49:a5:bd:dd:
                    ad:42:33:73:28:26:50:60:d4:10:72:1d:53:b1:ea:
                    70:fc:77:83:3d:64:15:9e:1b:0e:35:e3:36:03:a1:
                    40:e9:09:2a:43:2b:90:ac:d4:dd:81:c2:50:b1:ed:
                    13:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:39:6A:BE:3F:FF:15:D6:C6:A9:8B:E8:35:12:AC:23:38:AE:83:5E
            X509v3 Authority Key Identifier:
                keyid:87:E3:56:32:C3:DB:AB:0D:4B:98:DD:5C:12:0E:34:A9:48:38:30:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d62baf1d43712ef5f3860b21d04e8534536fa164.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/95e1b46dc932c7f5830afbf602e982819a25b15d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/d62baf1d43712ef5f3860b21d04e8534536fa164.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.119.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         02:83:36:57:8d:48:9b:b5:a3:ff:28:82:28:4d:01:44:1a:f6:
         d7:a9:34:b3:b9:bb:7a:d0:4e:73:e0:53:4e:c4:43:31:09:76:
         6a:a4:b7:5f:57:56:f9:ab:9b:67:4b:a6:46:50:ad:57:4a:1f:
         fb:60:1e:ea:6c:87:62:68:97:68:cd:a8:f3:cc:cb:43:67:96:
         1b:65:4c:aa:75:3e:85:a8:21:9c:e4:67:b8:a7:48:80:27:e5:
         59:dc:44:a0:27:aa:db:99:33:4e:72:af:fc:53:3a:ba:3d:32:
         6c:c0:a3:e8:70:57:26:a3:2a:81:ed:2f:b1:68:cd:00:30:bb:
         69:54:88:51:27:04:18:ea:e8:5e:f7:d6:12:f0:d6:e5:ed:ad:
         4b:ee:ce:18:af:07:a7:93:42:98:ce:d9:1c:96:92:ec:48:0a:
         11:e3:84:94:d0:77:03:93:2b:7d:de:ac:96:92:e9:0f:46:43:
         66:6c:68:97:f0:76:a5:37:36:dc:9c:7e:1d:c0:1e:fe:bc:3d:
         26:fd:d5:dd:fc:51:46:a1:d1:15:f7:23:5c:55:a0:df:ec:2a:
         a2:c4:40:6c:e6:e0:ba:19:f5:ae:5a:41:7a:fa:85:a9:a2:67:
         45:52:24:22:b7:68:d7:be:15:78:e8:18:5e:08:70:f4:27:84:
         3b:16:f5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:15 2024 by rpki-client on console-fra.rpki-client.org