Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/194ed5e98a5f6ace17114340de2d3d32c7baa7a6.roa
File:                     194ed5e98a5f6ace17114340de2d3d32c7baa7a6.roa (raw, json)
Hash identifier:          1PQFKYcrcZFv88Rt+3mLsAdF8okBRfY08ynz2T/JAZ4=
Subject key identifier:   2B:8B:7F:D1:49:6F:2D:EF:CC:DD:CC:92:EF:EA:7B:38:5C:9C:76:92
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       2515EA
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/194ed5e98a5f6ace17114340de2d3d32c7baa7a6.roa
Signing time:             Mon 15 May 2023 22:49:41 +0000
ROA not before:           Sun 14 May 2023 22:49:40 +0000
ROA not after:            Thu 15 May 2025 22:49:40 +0000
asID:                     14080
IP address blocks:        190.158.211.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2430442 (0x2515ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: May 14 22:49:40 2023 GMT
            Not After : May 15 22:49:40 2025 GMT
        Subject: CN=194ed5e98a5f6ace17114340de2d3d32c7baa7a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:68:f1:8c:eb:f0:6f:a4:a1:2a:30:42:6b:51:
                    98:fc:50:01:0e:12:21:3b:5c:ae:d9:b6:da:f8:fd:
                    f5:8e:55:4f:1d:9f:2f:30:ee:42:cf:60:d0:1f:54:
                    14:5c:f2:6e:ee:f3:32:aa:68:94:65:57:86:de:f8:
                    81:b8:c1:4d:74:80:d0:99:0c:32:e6:d6:6e:c1:2f:
                    e2:ff:de:b5:40:04:bc:f4:2b:e1:54:98:8b:8b:45:
                    2e:50:1a:10:50:0a:c5:b5:50:5e:0f:62:9c:22:37:
                    55:64:0f:66:ad:0f:90:67:6e:77:31:ac:cc:89:91:
                    6e:77:a3:51:92:4b:f9:0c:b8:99:cb:24:a1:b2:e5:
                    34:20:ed:1c:93:2d:14:16:0d:f6:e8:e0:00:f6:34:
                    9b:19:d9:91:b3:a4:2c:e0:2a:29:9a:3e:45:59:a8:
                    ee:b0:ee:33:97:70:58:ad:b9:9f:31:58:2b:d1:91:
                    86:1d:af:62:d0:d1:a2:f8:6f:af:99:b4:ff:62:d2:
                    96:f6:22:cd:6f:12:7c:2a:d0:a5:71:66:b6:d4:dd:
                    b0:66:47:62:f5:31:70:1d:f3:6f:34:b7:3a:bb:0c:
                    e5:1b:bc:ee:6e:1b:ab:ab:e0:ce:e6:aa:f6:f6:d3:
                    cc:22:3b:50:77:47:a1:b1:75:9a:c6:da:bc:75:bb:
                    5b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:8B:7F:D1:49:6F:2D:EF:CC:DD:CC:92:EF:EA:7B:38:5C:9C:76:92
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/194ed5e98a5f6ace17114340de2d3d32c7baa7a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.158.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:5b:6c:37:27:03:29:e4:50:5e:27:21:2b:06:d3:fa:95:c8:
         af:05:58:21:3c:ca:27:7c:31:41:8e:a9:64:96:aa:d9:2d:3d:
         ab:86:04:3b:bf:c4:3e:1b:96:64:cc:a1:23:66:bb:17:35:96:
         a9:e2:e9:d8:8c:bd:fd:ad:dd:36:5d:86:a1:d2:b5:10:9a:e9:
         60:b2:39:38:2c:c3:a9:6e:00:0f:c6:1a:08:78:41:fc:c5:36:
         a0:fa:bf:32:93:a3:3a:64:78:e7:ad:0f:c1:1b:96:b8:35:4b:
         b4:70:cd:e2:8c:77:1f:10:5e:89:d4:cb:2f:c9:37:68:02:0a:
         84:10:46:6d:c5:f1:37:54:ec:13:63:ff:78:86:c2:13:91:7e:
         c4:b8:ad:7d:d7:56:6c:09:bd:cc:fb:c3:79:1a:e4:25:23:dc:
         40:98:39:f6:2c:db:ea:f7:ba:c5:e9:89:67:e2:8e:ef:d1:3a:
         3b:d8:4f:2d:f8:a7:2f:79:92:3c:71:8d:c3:75:5f:18:a5:85:
         da:06:c5:9d:9e:cc:2b:90:c8:de:65:b3:56:9f:63:6d:90:97:
         77:f5:63:bb:7e:c5:ff:bb:ee:4f:f6:f5:c5:20:e7:dc:7a:43:
         57:d5:15:a3:5b:1d:71:ce:ad:f0:ab:b8:03:ed:a1:04:e5:ac:
         26:18:27:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 17 19:15:18 2024 by rpki-client on console-fra.rpki-client.org