Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/2ee76becc29a81c0e2764764fe3f94af5bcf209e.roa
File:                     2ee76becc29a81c0e2764764fe3f94af5bcf209e.roa (raw, json)
Hash identifier:          Rd1WgtT2fvCjKV/5mlI1LB8E2pWJ810KXpZ15yDJ8ms=
Subject key identifier:   13:7C:E1:3E:72:45:6A:FC:0F:6B:D8:2A:59:52:D3:CF:3C:38:B4:98
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       2412C8
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/2ee76becc29a81c0e2764764fe3f94af5bcf209e.roa
Signing time:             Tue 11 Apr 2023 08:30:00 +0000
ROA not before:           Mon 10 Apr 2023 08:30:00 +0000
ROA not after:            Wed 09 Apr 2025 08:30:00 +0000
asID:                     14080
IP address blocks:        200.118.190.0/24 maxlen: 24
                          190.85.224.0/20 maxlen: 20
                          190.85.192.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2364104 (0x2412c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Apr 10 08:30:00 2023 GMT
            Not After : Apr  9 08:30:00 2025 GMT
        Subject: CN=2ee76becc29a81c0e2764764fe3f94af5bcf209e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:df:f3:70:19:cc:59:bb:6d:1e:23:c2:73:40:
                    2e:a1:42:6f:dd:1f:11:f4:ee:54:44:72:e3:6d:1f:
                    a6:ca:8d:8c:c3:9c:46:a2:77:1b:84:45:84:4f:0c:
                    bc:89:f3:04:ae:82:18:16:f3:82:69:bc:15:ea:9f:
                    f5:35:04:aa:87:7f:2b:ef:fc:e0:05:bb:76:63:1f:
                    ea:36:8c:a9:ae:ee:2b:c9:34:e4:e8:3b:93:4b:c8:
                    16:02:0f:bc:4e:2c:7d:26:ba:88:e8:d3:66:c0:b3:
                    7d:99:d4:95:3f:c0:14:61:57:6a:0f:bf:c0:5d:9e:
                    5e:0c:61:67:77:37:37:39:62:9b:c4:98:87:ac:17:
                    0d:62:a6:c8:ef:22:61:52:a9:f4:5e:a1:91:e3:59:
                    65:bf:e6:3e:4c:c4:82:0d:9b:6a:98:d8:5e:e0:45:
                    d9:f9:1b:c5:82:5e:a8:2c:e6:db:d6:8e:82:71:e4:
                    66:e5:eb:99:d5:fd:b7:65:bf:3b:7c:ff:21:4b:a2:
                    57:3b:ed:4f:1d:33:a6:f0:ae:16:dc:ea:ba:df:21:
                    ff:1e:59:24:32:55:0d:3d:55:c4:ee:ff:0f:e8:5c:
                    0c:32:df:28:48:77:50:ad:0a:df:d2:46:f9:3a:23:
                    b8:13:08:aa:06:f0:e6:5b:90:89:ee:34:9d:84:40:
                    8e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:7C:E1:3E:72:45:6A:FC:0F:6B:D8:2A:59:52:D3:CF:3C:38:B4:98
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/2ee76becc29a81c0e2764764fe3f94af5bcf209e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.85.192.0-190.85.239.255
                  200.118.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:0b:02:74:d0:e7:4b:23:e5:17:1d:80:3d:d8:9b:ce:32:bd:
         47:56:ac:9c:1d:5a:c9:22:75:4d:8f:c1:d0:1e:f3:1d:a3:1a:
         40:e3:44:db:17:11:86:28:10:3b:b0:e8:38:78:ce:4d:bb:68:
         59:1f:69:a9:ff:fc:3e:b0:30:06:3e:db:1c:d2:c3:b1:d2:d8:
         ad:5d:1c:6c:57:0b:d5:dd:21:bc:30:cf:d5:9c:ed:ea:59:d1:
         c8:81:a6:ba:27:d7:02:69:16:d0:f6:02:c2:78:50:7a:4c:59:
         01:44:35:46:8e:37:8e:19:c5:b9:f8:e6:6d:52:b3:45:ae:b2:
         95:2c:de:94:24:ec:d2:0d:32:86:3d:eb:15:f1:33:99:85:12:
         2d:90:4d:e4:b6:fc:19:2e:0e:c8:49:8d:83:e8:20:92:0e:60:
         ed:28:5f:17:05:ea:07:3f:a4:95:9f:ec:e3:4a:a0:13:36:a7:
         bc:bb:4e:ee:6e:d1:bf:e4:ab:94:33:5f:a1:16:bf:29:52:87:
         54:a1:76:d4:82:f9:b6:e5:d0:fe:4e:e1:43:f3:8d:a6:4f:4b:
         4d:f6:77:ce:3f:9d:78:f9:e9:eb:d5:8c:77:ed:9d:65:df:7f:
         19:f2:03:14:49:9e:35:0e:c2:be:5f:15:4f:87:36:08:da:de:
         ab:79:6e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 17 19:24:31 2024 by rpki-client on console-ams.rpki-client.org