Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/34e5bc8f07b8c1fcfca0874395ae68d0da48da1c.roa
File:                     34e5bc8f07b8c1fcfca0874395ae68d0da48da1c.roa (raw, json)
Hash identifier:          82tZOur3B7w1tRagNxokBMwNqeCSp92P7xA+sfMwpbA=
Subject key identifier:   9E:E9:BE:2F:A4:44:B3:9E:49:CA:7E:22:C8:88:80:09:59:85:8B:56
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       2D0132
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/34e5bc8f07b8c1fcfca0874395ae68d0da48da1c.roa
Signing time:             Sun 17 Mar 2024 08:30:08 +0000
ROA not before:           Sun 17 Mar 2024 08:30:08 +0000
ROA not after:            Tue 17 Mar 2026 08:30:08 +0000
asID:                     14080
IP address blocks:        190.145.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2949426 (0x2d0132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Mar 17 08:30:08 2024 GMT
            Not After : Mar 17 08:30:08 2026 GMT
        Subject: CN=34e5bc8f07b8c1fcfca0874395ae68d0da48da1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fe:8a:76:3a:c9:c2:60:bb:e1:2c:09:a8:6e:
                    b6:79:6c:75:4c:ba:e5:7f:a6:01:f0:64:66:cc:2c:
                    0a:b0:fe:48:42:6c:57:d7:e0:41:9f:a0:30:a8:dc:
                    86:da:a5:c6:3f:f9:0d:c9:b6:f1:f0:8d:8b:d9:43:
                    8c:2a:6c:e9:c3:31:70:2c:bf:a2:46:98:56:2e:55:
                    97:6b:48:fe:57:16:e5:87:c7:f1:0f:fb:76:c6:5e:
                    fd:de:a6:d9:21:c0:f5:eb:7d:45:28:d9:5b:af:32:
                    3c:73:7c:7b:07:6a:fb:4c:86:fd:3d:8a:a0:85:fa:
                    8a:81:10:93:e4:ff:34:e9:08:b6:ae:91:b7:e8:12:
                    0e:5c:74:f4:11:11:38:0a:41:29:9a:72:57:41:bc:
                    24:77:eb:35:e0:17:98:33:73:7f:e8:65:4d:c4:e9:
                    11:4d:10:90:ea:90:6f:77:b7:d3:04:17:76:ed:c0:
                    96:76:33:52:bf:27:e9:fc:73:84:a1:86:52:37:fc:
                    b3:b2:9e:37:9a:83:e6:c6:0f:e6:e5:8b:01:99:c5:
                    3f:60:b7:3a:b4:52:59:76:7b:05:bc:b7:46:4b:47:
                    de:77:3a:22:16:72:3e:ba:be:17:fd:8c:03:a5:7e:
                    ea:33:53:18:e7:85:4b:e7:8e:bd:fd:7d:5d:fb:e3:
                    c8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E9:BE:2F:A4:44:B3:9E:49:CA:7E:22:C8:88:80:09:59:85:8B:56
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/34e5bc8f07b8c1fcfca0874395ae68d0da48da1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.145.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         81:b1:bc:e7:c0:d7:b7:98:0c:70:b4:63:48:0c:2a:f2:5d:54:
         41:7a:ec:fc:1d:38:97:c8:f4:84:c4:c3:09:e7:c5:af:83:08:
         cd:d6:2f:82:3d:ba:77:fd:d6:dd:20:66:10:8e:82:27:b4:ec:
         3f:92:b1:f2:b2:cd:c8:ff:46:89:70:37:c8:f1:7d:9e:24:fd:
         8f:fb:cd:43:2c:45:45:06:29:ff:25:54:5d:49:e2:18:b9:e3:
         a7:9b:d9:10:6c:fb:19:ec:f9:43:0f:1b:2f:65:07:e8:59:53:
         7b:9a:2d:7e:70:be:46:81:1f:95:72:4a:7e:22:6f:45:1d:d9:
         b4:9b:a7:03:29:ec:0a:99:7e:07:e3:18:ac:a5:12:1f:a8:57:
         42:28:a9:c3:e2:50:ab:67:a0:2f:56:43:3f:aa:76:02:de:77:
         2c:d7:97:c6:e8:b9:b9:05:d8:43:5a:3e:77:9d:6b:cf:7a:03:
         61:ba:97:b4:a2:4d:78:a1:ee:16:be:b5:4e:76:31:f2:89:3e:
         d9:21:0a:23:13:b2:cf:05:b4:a9:2f:ce:ef:e4:a1:09:1d:5c:
         90:4a:b7:25:07:5c:a7:97:a7:a6:d7:7a:04:38:7f:f5:b9:f6:
         c2:89:79:bd:90:2c:35:d3:6f:23:70:be:18:9f:18:99:16:02:
         a8:b3:9c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 17 19:15:18 2024 by rpki-client on console-fra.rpki-client.org