Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/382773fb4da5dacbc1f4b640d6f9f20685ce85ae.roa
File:                     382773fb4da5dacbc1f4b640d6f9f20685ce85ae.roa (raw, json)
Hash identifier:          lMPUOGT4mTCiGmFexqjWkMD5Z/OXJ9G5hs4GDESu7ac=
Subject key identifier:   89:52:A0:43:12:D9:AA:C3:62:5E:C7:F7:2B:94:D2:30:92:68:1C:7A
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       1F4C20
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/382773fb4da5dacbc1f4b640d6f9f20685ce85ae.roa
Signing time:             Thu 13 Oct 2022 12:54:58 +0000
ROA not before:           Tue 23 Mar 2021 14:34:35 +0000
ROA not after:            Tue 24 Mar 2026 14:34:35 +0000
asID:                     14080
IP address blocks:        181.56.0.0/13 maxlen: 24
                          190.157.8.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2051104 (0x1f4c20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Mar 23 14:34:35 2021 GMT
            Not After : Mar 24 14:34:35 2026 GMT
        Subject: CN=382773fb4da5dacbc1f4b640d6f9f20685ce85ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f8:4b:4c:dd:50:8a:9b:f5:0d:08:d7:b4:3d:
                    af:75:72:85:4f:34:ba:1c:62:c6:eb:80:92:45:a8:
                    fe:d5:1f:16:79:e5:c5:cd:f9:3b:21:49:de:af:02:
                    2f:ee:d6:55:80:14:38:e0:b0:a6:54:fd:59:91:b2:
                    52:f8:53:35:6e:02:1f:5e:67:88:39:7a:a9:8b:36:
                    d6:00:34:18:db:a2:84:12:9f:ee:29:d7:21:e4:b4:
                    59:c2:00:86:1d:22:45:47:e1:e7:63:53:5e:c7:fd:
                    47:20:bb:a7:0c:f1:a1:fc:b7:e8:5c:b9:b4:d6:63:
                    ad:57:d7:3c:40:5c:8f:a5:c8:c9:9b:a9:83:b9:23:
                    8c:dd:a0:f8:19:93:05:9e:5b:83:9f:00:2c:f4:18:
                    be:54:d2:7e:aa:00:0e:9f:55:95:3c:53:ad:e3:a1:
                    89:0a:a0:45:46:43:1d:aa:9d:fb:aa:bf:69:3d:da:
                    0a:91:26:a7:c1:18:e4:de:1e:af:76:53:9c:95:a0:
                    24:3d:94:33:1a:8b:77:27:af:fa:cb:0a:9b:57:24:
                    5d:a0:e0:e0:26:95:9d:c4:33:9f:de:79:8b:eb:6d:
                    e4:bd:22:5e:f2:cc:a4:0c:f3:e6:fe:1b:cb:4d:cd:
                    b5:35:93:a1:bc:c2:2f:6d:fc:8c:21:1d:93:a7:85:
                    90:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:52:A0:43:12:D9:AA:C3:62:5E:C7:F7:2B:94:D2:30:92:68:1C:7A
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/382773fb4da5dacbc1f4b640d6f9f20685ce85ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.56.0.0/13
                  190.157.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:13:18:e1:ed:d7:79:b6:de:e0:b6:cc:04:a2:2a:19:bc:ec:
         08:cf:c3:04:2c:a1:7e:0e:be:e3:11:32:ec:86:51:f7:2e:cf:
         08:18:f2:b7:f0:bd:a2:53:59:d1:31:51:1b:0f:fd:30:80:64:
         19:b9:9c:c9:5b:28:da:6e:5d:22:9c:f4:e7:2b:d6:0f:38:1d:
         21:c7:d6:e5:fb:dc:c1:89:1f:74:d7:9f:0d:84:b1:a8:83:af:
         60:3c:00:29:8d:dd:c5:6b:99:ad:5f:56:62:55:03:eb:5b:b1:
         1c:a0:a8:9c:eb:e8:17:bd:89:65:95:1b:7e:d3:9d:a2:67:33:
         e4:b3:75:46:23:3f:87:19:fe:58:e7:2a:64:b1:b0:e1:15:1d:
         88:be:7c:93:25:f5:30:5f:bd:8d:76:7d:49:d5:55:52:1f:bc:
         49:33:ed:d5:3a:12:84:3f:d5:57:b9:dd:52:a6:3b:ce:6f:fa:
         c4:6f:75:9a:10:fa:96:45:c7:f6:dd:83:bb:58:79:6a:22:98:
         98:9e:8f:e2:99:4d:1e:79:55:23:54:7a:e4:3a:bf:ab:e6:3e:
         ce:83:cf:ac:91:aa:12:85:c4:1f:57:a1:0b:08:b2:ab:e9:69:
         d0:2b:e7:5b:78:12:81:3a:9f:05:a9:8a:6c:6b:36:24:01:31:
         14:2b:f5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 17 19:24:31 2024 by rpki-client on console-ams.rpki-client.org