Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/03e7394808eae000fa0643d1046008eaeeded381.roa
File:                     03e7394808eae000fa0643d1046008eaeeded381.roa (raw, json)
Hash identifier:          Jgwq3GmGaQnXDRzcnTDKedBfURdlEdrveR4FDFpL4kM=
Subject key identifier:   D2:FF:9E:AE:79:21:98:A7:4E:80:01:7C:4A:77:47:0C:EE:28:2C:08
Certificate issuer:       /CN=1866c45b21787e12af4deafc085303e786f50b2f
Certificate serial:       2D6D03
Authority key identifier: C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/03e7394808eae000fa0643d1046008eaeeded381.roa
Signing time:             Sun 17 Mar 2024 18:43:10 +0000
ROA not before:           Sun 17 Mar 2024 18:42:19 +0000
ROA not after:            Sat 17 Mar 2029 18:42:19 +0000
asID:                     14080
IP address blocks:        181.56.0.0/13 maxlen: 24
                          190.157.8.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2977027 (0x2d6d03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1866c45b21787e12af4deafc085303e786f50b2f
        Validity
            Not Before: Mar 17 18:42:19 2024 GMT
            Not After : Mar 17 18:42:19 2029 GMT
        Subject: CN=03e7394808eae000fa0643d1046008eaeeded381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c3:c8:16:a0:d6:e1:33:b5:53:b8:36:8e:57:
                    05:59:c2:5c:75:78:e0:5f:f0:91:ec:b3:5e:00:70:
                    53:4b:04:8d:46:69:56:0a:be:4b:d8:59:df:54:35:
                    64:56:dd:0d:a0:de:dc:10:e3:92:e8:5d:ef:de:93:
                    60:63:33:fc:ab:a0:40:d5:ca:b6:c9:4e:ce:57:b5:
                    ee:81:3e:3f:fc:94:46:fa:f2:26:81:ee:a5:70:7f:
                    e9:24:c3:d6:70:ad:38:73:5a:71:34:ae:9b:16:6f:
                    0b:e5:f2:03:f2:cb:06:d2:a8:70:27:4d:34:a0:3f:
                    ff:af:06:d3:fb:b6:59:e9:cb:d7:1f:a7:80:76:d1:
                    38:2e:d4:2d:cc:52:48:fc:7b:52:df:5b:24:85:7e:
                    ff:e8:5b:8c:74:7f:67:cf:ab:99:1b:e2:31:d0:77:
                    d9:73:0d:de:8c:82:e7:13:bc:4b:de:7f:9c:61:a7:
                    90:eb:a4:fb:fc:65:14:85:82:a9:39:43:ad:5a:97:
                    fc:57:e5:0c:f3:d1:6d:bc:08:b5:cd:f9:44:f5:6e:
                    47:cc:4f:0a:36:f1:8c:2f:a5:6c:2a:7a:cb:8c:ce:
                    59:8c:69:b8:57:b2:21:41:91:29:77:73:cf:2e:8f:
                    fb:00:9b:2d:d1:24:32:07:64:23:35:d6:d1:53:2a:
                    0a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:FF:9E:AE:79:21:98:A7:4E:80:01:7C:4A:77:47:0C:EE:28:2C:08
            X509v3 Authority Key Identifier:
                keyid:C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/03e7394808eae000fa0643d1046008eaeeded381.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/1866c45b21787e12af4deafc085303e786f50b2f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.56.0.0/13
                  190.157.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:c1:d7:6d:b9:e5:27:21:c8:6f:14:7e:0c:49:68:ab:47:83:
         66:4d:61:03:ee:62:d2:25:fe:aa:09:b3:f7:e6:88:01:95:19:
         02:32:09:a0:0a:e5:20:c0:4c:40:c8:70:e2:ae:ba:c7:15:61:
         b7:aa:36:b3:46:37:58:0c:45:8f:5d:b5:47:d3:9a:3b:f9:cb:
         83:7c:53:dc:19:9c:0a:9c:29:17:93:e4:a7:3a:13:44:4f:15:
         7b:21:5e:af:46:a1:e3:3a:04:4c:8a:08:4f:67:53:03:cb:d1:
         94:b4:d5:ed:84:60:85:af:13:c7:fc:c2:7d:99:5d:1b:9b:81:
         b4:2c:c4:dc:14:7c:44:dd:a0:56:91:13:cc:65:55:60:e0:2e:
         bc:92:fc:e1:a4:5e:81:98:94:95:e7:ff:49:6e:c2:eb:f5:74:
         a9:06:e7:dd:e2:e9:88:3e:8c:51:32:21:b7:31:05:1e:1c:63:
         6c:c0:72:71:be:18:9c:8a:7d:3f:fd:4d:49:51:3f:55:4a:01:
         f7:f3:6d:56:24:2e:4d:e3:e3:ee:17:00:da:50:b6:95:a8:97:
         ea:ed:b4:07:68:57:31:80:f7:cc:d4:2e:bd:f9:98:57:63:df:
         08:f4:58:e0:09:1a:09:7b:23:85:09:43:fb:7d:e0:88:66:64:
         da:a9:90:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:14 2024 by rpki-client on console-ams.rpki-client.org