Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/076ece0fbeec75e2c6d35f906b5e4840d5197ac0.roa
File:                     076ece0fbeec75e2c6d35f906b5e4840d5197ac0.roa (raw, json)
Hash identifier:          zICE6HHJRsGcc//dLR4Gkstw41B2k0DHzdf/RhjKNQg=
Subject key identifier:   5D:59:73:2C:12:CB:A5:4A:7F:B1:1A:46:36:2E:07:F3:9A:3F:6D:D9
Certificate issuer:       /CN=1866c45b21787e12af4deafc085303e786f50b2f
Certificate serial:       2DDC41
Authority key identifier: C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/076ece0fbeec75e2c6d35f906b5e4840d5197ac0.roa
Signing time:             Sun 17 Mar 2024 18:45:01 +0000
ROA not before:           Sun 17 Mar 2024 18:42:19 +0000
ROA not after:            Sat 17 Mar 2029 18:42:19 +0000
asID:                     14080
IP address blocks:        190.143.34.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3005505 (0x2ddc41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1866c45b21787e12af4deafc085303e786f50b2f
        Validity
            Not Before: Mar 17 18:42:19 2024 GMT
            Not After : Mar 17 18:42:19 2029 GMT
        Subject: CN=076ece0fbeec75e2c6d35f906b5e4840d5197ac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ad:89:14:d0:15:ea:4d:e4:96:14:ba:10:36:
                    bb:a4:1c:a8:dc:41:af:69:36:76:e2:29:b5:5d:ca:
                    f3:e1:66:c8:6b:a4:dd:80:e3:21:97:27:b8:ea:76:
                    f2:84:c5:5a:80:09:3c:e2:d7:84:2c:84:31:bf:21:
                    df:c0:34:5f:d9:b0:1b:45:8e:6a:62:7b:de:d6:5b:
                    3c:f0:ba:b1:be:09:70:6a:4b:2a:e9:cc:e0:20:6c:
                    79:6e:85:d8:f0:21:cc:1f:07:15:e2:fc:dd:a1:a6:
                    5b:cc:83:8d:85:73:88:aa:6e:c2:d7:2c:9b:3b:e2:
                    b5:1d:8e:36:ee:d1:4d:9c:80:54:2d:7c:7e:d7:72:
                    cf:6c:e7:27:1b:7f:24:5d:f4:79:cb:0a:2a:cd:5b:
                    23:40:57:67:e7:73:72:8a:92:3a:7a:75:0e:86:2d:
                    b0:65:16:8f:01:b8:d2:11:e7:5f:2d:2b:36:da:ee:
                    e6:7b:9a:77:52:70:d6:e5:2a:35:f3:7f:4e:37:af:
                    10:68:b1:e1:37:f4:54:c6:ac:a8:6c:e3:60:02:6c:
                    a0:f0:ef:03:14:bc:76:33:96:10:e1:ba:4b:7a:09:
                    88:fa:62:d7:81:85:0d:26:96:4b:7a:bd:a1:bf:c0:
                    39:da:8f:ce:74:ec:9d:c0:36:f2:d1:fd:30:55:25:
                    19:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:59:73:2C:12:CB:A5:4A:7F:B1:1A:46:36:2E:07:F3:9A:3F:6D:D9
            X509v3 Authority Key Identifier:
                keyid:C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/076ece0fbeec75e2c6d35f906b5e4840d5197ac0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/1866c45b21787e12af4deafc085303e786f50b2f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.143.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:75:68:37:fe:05:0f:59:89:bf:eb:c7:c2:e4:d8:eb:52:25:
         59:cb:64:96:f8:55:c5:22:dd:fa:40:a0:16:e1:3c:34:70:59:
         1a:b3:a0:0c:6e:0f:26:65:11:7d:85:40:07:10:29:74:b6:ab:
         0e:95:6b:7d:bf:61:d1:4e:b0:01:c8:55:c4:65:6f:a2:3c:64:
         32:66:b1:4a:e3:27:63:5f:89:fb:5c:1f:1b:a7:2f:ad:9a:7c:
         94:09:bd:fc:7d:4d:34:07:e3:08:41:3b:12:b0:64:25:cd:47:
         d1:b8:48:c4:94:be:90:d9:1b:0e:23:01:13:06:d5:10:42:c9:
         ba:53:50:1a:80:bc:db:f4:84:0f:94:1e:d8:72:d7:05:62:0c:
         4d:80:e1:f9:83:6d:28:d4:5e:73:c8:c5:95:96:c0:45:a8:f7:
         be:36:6c:71:b8:90:fe:d8:8c:86:31:4b:2e:06:90:6b:5a:be:
         58:dc:86:e8:25:71:35:67:8f:32:1c:de:ca:9b:42:7b:a4:46:
         ae:8e:f7:a2:53:30:27:78:21:c8:bc:e3:50:bd:9c:f6:5f:c4:
         49:3a:81:d4:92:8d:d1:48:ca:4c:1d:5b:16:aa:66:5d:3c:23:
         27:b7:c9:4e:a2:2d:f8:0d:60:93:d8:97:df:e3:cc:fa:1b:09:
         7c:89:2f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:00 2024 by rpki-client on console-fra.rpki-client.org