Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/0b63c626655f0bf940400984efbc484434b5bea9.roa
File:                     0b63c626655f0bf940400984efbc484434b5bea9.roa (raw, json)
Hash identifier:          T1UvzuTd8117zFI+jp4RltOIZxlmrORuP3L4BZTb2EM=
Subject key identifier:   58:A8:C2:00:4E:72:1F:A3:36:67:9A:30:82:55:A0:64:4D:3B:DD:44
Certificate issuer:       /CN=1866c45b21787e12af4deafc085303e786f50b2f
Certificate serial:       2D8315
Authority key identifier: C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/0b63c626655f0bf940400984efbc484434b5bea9.roa
Signing time:             Sun 17 Mar 2024 18:43:28 +0000
ROA not before:           Sun 17 Mar 2024 18:42:19 +0000
ROA not after:            Sat 17 Mar 2029 18:42:19 +0000
asID:                     14080
IP address blocks:        200.118.190.0/24 maxlen: 24
                          190.85.224.0/20 maxlen: 20
                          190.85.192.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2982677 (0x2d8315)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1866c45b21787e12af4deafc085303e786f50b2f
        Validity
            Not Before: Mar 17 18:42:19 2024 GMT
            Not After : Mar 17 18:42:19 2029 GMT
        Subject: CN=0b63c626655f0bf940400984efbc484434b5bea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a1:be:cf:e3:59:b4:ef:36:f3:57:bc:a3:43:
                    07:0e:95:5d:7c:4d:86:79:97:9e:78:7d:44:2f:6a:
                    b7:de:a6:92:50:fb:88:0e:12:22:63:5a:51:ee:5a:
                    64:50:c7:01:60:96:d5:fe:ab:72:aa:c8:3b:a2:81:
                    f4:94:0d:c0:33:41:6c:92:d0:b6:b0:4a:44:d8:3f:
                    fb:aa:c1:cd:99:e5:ad:2f:a9:a0:6b:11:e2:ac:64:
                    f0:a1:25:26:a8:0d:02:95:1b:4c:68:cb:02:88:2d:
                    0a:8a:c5:b3:41:34:24:36:aa:f5:ea:dc:3e:2c:37:
                    89:0f:78:20:e5:f2:69:11:6b:6d:b1:45:99:83:5b:
                    29:32:2d:17:79:6e:64:ed:c3:5a:ee:72:11:c0:37:
                    3f:9b:45:64:1b:51:24:13:c6:8f:98:d1:b2:53:0a:
                    2f:1e:14:2a:9d:f4:1a:3a:33:6c:cc:55:56:f1:43:
                    01:f6:ce:7e:63:be:a1:06:6c:bd:16:a5:59:46:2d:
                    54:f5:99:47:73:37:e4:3b:77:4d:13:95:6f:70:c2:
                    b2:59:3a:ff:58:5c:75:cf:a5:3b:9f:90:f5:7d:4e:
                    cf:dd:ad:b8:8c:9d:9f:d0:cf:8e:2f:2f:d2:4d:ec:
                    b3:34:19:df:53:4b:98:09:1a:73:98:41:ab:a5:49:
                    d6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A8:C2:00:4E:72:1F:A3:36:67:9A:30:82:55:A0:64:4D:3B:DD:44
            X509v3 Authority Key Identifier:
                keyid:C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/0b63c626655f0bf940400984efbc484434b5bea9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/1866c45b21787e12af4deafc085303e786f50b2f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.85.192.0-190.85.239.255
                  200.118.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:b0:7a:61:28:0d:be:ec:7e:31:23:ca:2e:6b:07:05:16:6c:
         2f:41:1a:b8:48:13:ae:2b:16:f2:13:0f:4b:55:88:c3:37:87:
         56:08:70:3b:b5:9f:ff:9c:9f:46:e2:00:25:1d:ec:ea:84:bb:
         7f:54:37:4c:36:12:6d:3e:61:03:c0:32:32:50:c0:c9:68:00:
         d7:52:11:1f:25:d0:11:09:b0:24:28:d3:18:f1:54:91:fd:7a:
         d5:f0:08:e2:1c:25:90:a8:b0:dd:89:c9:be:2e:37:7f:f8:b3:
         65:f7:8f:24:6c:07:4a:a5:6a:26:b4:82:2f:dc:e1:bf:b0:79:
         34:5d:d9:42:4d:5b:e3:ee:1f:99:1b:ec:f1:d1:c7:5a:00:e4:
         28:99:d3:83:d6:71:62:aa:d1:b3:03:4d:56:e9:ae:2d:aa:83:
         ca:8f:c5:8b:c0:af:ec:18:b8:8f:6b:e1:79:d1:8c:7e:0f:50:
         ef:03:bb:ed:6d:8b:4a:46:10:b9:22:7a:08:cd:76:5c:6d:18:
         cc:8e:96:74:9f:8c:ec:44:50:24:ec:60:5b:0b:fe:45:f8:82:
         5d:92:cf:45:fb:42:d4:5a:81:62:73:c4:a3:84:eb:2e:46:69:
         18:67:78:59:ad:bd:5b:05:f8:bd:18:57:be:cf:c8:88:66:37:
         81:0a:df:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:14 2024 by rpki-client on console-ams.rpki-client.org