Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/e4b45a821b6b961cb1942ddbe458159eb9a189bf.roa
File:                     e4b45a821b6b961cb1942ddbe458159eb9a189bf.roa (raw, json)
Hash identifier:          6ocm1zYh/71qs7xrR+aPVw2gtA4unu7AcQKjWacumig=
Subject key identifier:   9E:87:CB:7F:1E:C4:55:23:3F:6A:19:94:D0:2A:52:DD:CA:40:DD:78
Certificate issuer:       /CN=c4935075ec435dbda09406df9fa324ff802f1d14
Certificate serial:       24DAB1
Authority key identifier: 76:83:16:F0:88:5D:BF:BD:21:FF:F5:2D:ED:2B:87:BE:D1:53:D7:ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c4935075ec435dbda09406df9fa324ff802f1d14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/e4b45a821b6b961cb1942ddbe458159eb9a189bf.roa
Signing time:             Tue 17 Oct 2023 20:46:43 +0000
ROA not before:           Mon 16 Oct 2023 20:46:43 +0000
ROA not after:            Fri 17 Oct 2025 20:46:43 +0000
asID:                     23383
IP address blocks:        190.4.19.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2415281 (0x24dab1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4935075ec435dbda09406df9fa324ff802f1d14
        Validity
            Not Before: Oct 16 20:46:43 2023 GMT
            Not After : Oct 17 20:46:43 2025 GMT
        Subject: CN=e4b45a821b6b961cb1942ddbe458159eb9a189bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ab:37:d9:96:01:01:c4:95:f8:71:9c:2e:48:
                    39:55:50:21:4b:38:98:28:dd:0e:54:70:00:f6:9a:
                    9f:b3:7c:c0:0d:6d:82:b0:e5:e2:0c:bf:72:b5:2b:
                    52:d0:48:c5:a4:d7:a3:67:05:ea:2b:3e:5f:10:23:
                    8b:55:d4:08:9b:40:b8:88:1d:d5:b6:90:d6:e3:59:
                    0f:03:a4:ed:4f:2c:51:0c:88:96:71:25:f2:8b:3b:
                    1c:a9:0b:ba:c7:e3:6c:e5:9d:01:c6:d7:83:64:7c:
                    c4:1d:dd:e4:ea:23:bf:14:eb:e1:5d:58:14:6a:77:
                    1a:d8:33:a9:0f:9a:83:53:b5:c3:d4:aa:69:a6:00:
                    38:8e:11:ce:93:a5:c7:9f:c5:ad:c5:dd:31:79:a3:
                    18:8a:54:1e:80:f0:29:96:f3:fe:fe:e1:aa:be:61:
                    f3:9c:41:fb:b9:11:0d:77:f4:53:e2:39:2a:94:7c:
                    94:44:c7:e8:f3:8b:30:68:5a:b7:70:10:6e:ea:f9:
                    2c:9d:d8:5c:5c:4f:e8:ad:ed:65:32:ae:62:f5:24:
                    03:2b:30:84:ac:04:28:1a:17:e8:eb:29:a4:5f:6f:
                    5f:78:5f:ec:b3:1c:4d:c0:80:d2:2f:b0:da:fc:fd:
                    ca:61:38:51:89:40:6b:f2:90:08:8a:01:9d:03:28:
                    66:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:87:CB:7F:1E:C4:55:23:3F:6A:19:94:D0:2A:52:DD:CA:40:DD:78
            X509v3 Authority Key Identifier:
                keyid:76:83:16:F0:88:5D:BF:BD:21:FF:F5:2D:ED:2B:87:BE:D1:53:D7:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c4935075ec435dbda09406df9fa324ff802f1d14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/e4b45a821b6b961cb1942ddbe458159eb9a189bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/c4935075ec435dbda09406df9fa324ff802f1d14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.4.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:c8:75:e8:2a:88:49:90:c4:74:d9:94:67:06:e8:06:ef:08:
         75:cd:98:2a:aa:05:71:61:c1:75:c3:c3:7c:94:6e:48:76:fe:
         08:f1:27:58:54:c9:65:37:44:c9:04:01:72:d8:35:61:56:0e:
         81:9f:2d:1f:be:45:5d:63:42:31:ba:0c:8d:ef:ea:dd:ed:76:
         24:f2:cb:7f:90:cd:39:78:13:80:ca:74:08:07:ad:d8:e3:e3:
         3e:c9:02:8b:36:ec:e3:c6:af:02:33:3a:3f:85:ed:b8:3f:20:
         79:50:37:85:f9:52:a1:04:26:75:63:e4:d9:0a:f4:ea:1d:60:
         ae:d4:9b:3b:dd:d0:69:ad:d6:cd:a8:09:29:bf:57:47:84:66:
         8e:45:ff:cf:58:21:49:7b:84:e2:68:8f:08:05:cd:fe:21:b6:
         9e:3a:72:fc:9b:67:7d:da:43:d5:60:f0:ca:68:d5:04:4b:42:
         a8:eb:c5:3a:84:1b:9c:5d:9f:63:18:d8:9e:9a:84:c4:1f:c8:
         98:be:be:6a:1e:05:0f:34:52:69:9f:7f:b0:d4:f9:21:f0:15:
         c8:d2:48:e3:85:d4:fa:9e:ae:c5:9e:41:a4:84:72:54:04:bd:
         d8:7a:ec:ff:4e:0e:4a:11:36:4a:6e:e1:62:87:db:80:14:8f:
         1c:13:48:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:03 2024 by rpki-client on console-fra.rpki-client.org