Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/027192fbe58210da7b21419bf455056a30e68254.roa
File:                     027192fbe58210da7b21419bf455056a30e68254.roa (raw, json)
Hash identifier:          DpTZ0O+TYddh+eKE7zlz4aXvvjhRxWPcNYivicuGi7c=
Subject key identifier:   FE:92:C1:43:6B:23:50:3D:B2:AC:54:71:A9:C3:27:D1:B3:CC:2A:C3
Certificate issuer:       /CN=1866c45b21787e12af4deafc085303e786f50b2f
Certificate serial:       2DD0AE
Authority key identifier: C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/027192fbe58210da7b21419bf455056a30e68254.roa
Signing time:             Sun 17 Mar 2024 18:44:46 +0000
ROA not before:           Sun 17 Mar 2024 18:42:19 +0000
ROA not after:            Sat 17 Mar 2029 18:42:19 +0000
asID:                     14080
IP address blocks:        186.146.251.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3002542 (0x2dd0ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1866c45b21787e12af4deafc085303e786f50b2f
        Validity
            Not Before: Mar 17 18:42:19 2024 GMT
            Not After : Mar 17 18:42:19 2029 GMT
        Subject: CN=027192fbe58210da7b21419bf455056a30e68254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:90:57:bd:39:bc:e4:1a:4a:5b:79:46:cd:c4:
                    38:52:34:ca:f2:7d:3a:74:03:8d:85:3e:f3:27:9a:
                    8e:fe:1e:ba:85:7b:e2:7b:d1:2b:17:35:b1:28:53:
                    84:d0:c6:57:82:a4:cb:61:98:24:f8:7c:94:7d:e6:
                    f2:69:66:3d:02:64:4f:92:54:0a:e1:7e:6f:5c:46:
                    ab:94:ef:27:71:4c:6e:7f:b1:e0:92:0a:6d:b3:9c:
                    8b:e5:f0:2f:4a:0c:bc:8f:e4:e3:2a:62:cb:6b:87:
                    a0:a9:5d:5c:bf:f9:7b:88:aa:f6:e4:bd:67:1a:48:
                    9e:4f:cb:18:08:1f:6a:fe:f8:1a:55:50:ba:19:4c:
                    08:e4:1b:8b:ad:53:28:d3:da:3f:e1:c2:6e:16:d1:
                    f8:9a:d1:4b:2d:61:d1:c8:c7:f1:28:4c:a8:1d:ff:
                    fb:15:ef:fd:3f:c2:e0:34:d8:a0:d9:02:0b:f8:0b:
                    ac:6b:a2:cf:93:32:04:bc:4e:1d:6d:71:db:8f:3e:
                    f8:66:9b:62:f8:40:58:53:91:80:63:ef:f0:ae:0a:
                    a1:3b:e1:41:b5:db:27:1b:be:26:08:39:fe:d5:2c:
                    ae:72:2f:5d:27:f9:69:ff:4f:02:01:60:a7:1f:5b:
                    6e:cc:11:b9:c5:1e:31:3a:0f:77:ff:07:13:2f:1a:
                    c3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:92:C1:43:6B:23:50:3D:B2:AC:54:71:A9:C3:27:D1:B3:CC:2A:C3
            X509v3 Authority Key Identifier:
                keyid:C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/027192fbe58210da7b21419bf455056a30e68254.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/1866c45b21787e12af4deafc085303e786f50b2f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.146.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:8c:31:28:84:18:00:6a:a4:50:38:ce:be:ae:b3:4f:20:f9:
         4d:7b:73:84:c8:e3:37:f1:04:44:e3:2b:5a:d5:af:51:16:5e:
         5c:1b:9b:46:64:6a:a2:0e:27:c0:1f:87:c3:70:11:c2:7d:bc:
         1f:b6:a2:79:a5:76:27:e1:73:42:cb:5c:19:a0:2d:2f:4f:e7:
         67:ab:83:f6:51:a1:4d:62:dc:17:46:17:d2:cd:e5:90:ee:d8:
         33:57:fa:5d:f9:ca:00:be:e9:08:3f:4c:c6:19:15:4a:f0:ec:
         fa:85:e2:51:6e:f6:ed:76:ab:27:b8:8f:97:5b:2c:8c:19:7b:
         37:44:f9:85:57:0a:a2:99:19:1f:d5:7f:a1:ba:8e:20:55:e1:
         22:2b:4d:3a:3a:b4:94:60:ca:62:98:c0:53:12:44:2c:be:98:
         5c:71:3e:e8:f9:87:36:63:90:00:dc:fd:f2:7d:9e:aa:97:57:
         14:6c:73:5b:cc:47:4e:ed:a8:ce:e8:db:5e:00:32:d6:49:85:
         03:9c:b9:7f:f5:c2:23:d4:a4:5d:80:a7:ee:7d:69:fb:39:f3:
         f2:f4:59:de:db:6b:13:cd:7d:22:6a:d0:df:c2:a2:93:7a:05:
         68:64:f7:86:4c:94:45:25:d2:ea:3a:70:3e:ae:18:ac:95:d8:
         6d:07:50:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:14 2024 by rpki-client on console-ams.rpki-client.org