Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/401849fa3df933dd1e5287b7ffa6847a020fc623.roa
File:                     401849fa3df933dd1e5287b7ffa6847a020fc623.roa (raw, json)
Hash identifier:          JPKGA12WRqrHMf+ho0baTC4V3eDMKthAP56Qy7aXAMA=
Subject key identifier:   41:6D:A5:9D:8C:CF:3C:8F:55:1A:87:17:A3:9A:C1:2F:E0:FB:68:51
Certificate issuer:       /CN=1866c45b21787e12af4deafc085303e786f50b2f
Certificate serial:       2DED45
Authority key identifier: C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/401849fa3df933dd1e5287b7ffa6847a020fc623.roa
Signing time:             Sun 17 Mar 2024 18:45:21 +0000
ROA not before:           Sun 17 Mar 2024 18:42:19 +0000
ROA not after:            Sat 17 Mar 2029 18:42:19 +0000
asID:                     14080
IP address blocks:        190.156.6.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3009861 (0x2ded45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1866c45b21787e12af4deafc085303e786f50b2f
        Validity
            Not Before: Mar 17 18:42:19 2024 GMT
            Not After : Mar 17 18:42:19 2029 GMT
        Subject: CN=401849fa3df933dd1e5287b7ffa6847a020fc623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:13:4f:f4:30:12:50:17:58:11:a6:f3:c0:c6:
                    91:50:64:a8:31:42:a5:db:ac:23:71:ce:af:4d:fb:
                    46:c5:59:ac:4c:6a:0a:75:d7:4d:68:91:68:11:a0:
                    8c:aa:82:98:94:0b:f6:bd:71:97:78:e7:f4:f1:3f:
                    58:f3:f3:16:80:7b:5a:49:0d:a4:7f:26:7f:f2:6e:
                    64:66:46:b0:6f:1e:85:ac:16:24:4c:8c:1e:b3:2f:
                    56:dd:10:46:03:5f:f6:ab:3b:f1:9b:c3:b3:5d:eb:
                    de:ed:05:fc:ec:f5:0d:92:17:e1:67:a1:eb:95:5a:
                    ce:24:75:9a:44:22:df:ba:dd:93:89:7e:1d:33:65:
                    57:5f:ee:4b:de:f3:eb:6e:62:88:67:da:47:67:02:
                    05:03:ca:d9:11:6b:2e:c7:8d:b8:55:48:0c:ee:09:
                    f4:73:71:47:5f:a0:ee:7c:d4:f3:e7:dc:01:ce:39:
                    c8:16:62:43:d9:7b:57:c3:62:bf:a8:85:fe:67:62:
                    a2:73:64:04:6d:db:76:53:6c:44:4a:8a:3e:23:b8:
                    da:dd:83:4f:04:29:de:f8:6b:76:d7:34:09:5a:05:
                    a7:84:e4:3b:87:ea:0a:73:95:c0:b3:af:b2:f9:2c:
                    29:03:37:7c:c2:55:8e:ec:5b:70:fd:57:b8:28:d6:
                    1f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:6D:A5:9D:8C:CF:3C:8F:55:1A:87:17:A3:9A:C1:2F:E0:FB:68:51
            X509v3 Authority Key Identifier:
                keyid:C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/401849fa3df933dd1e5287b7ffa6847a020fc623.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/1866c45b21787e12af4deafc085303e786f50b2f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.156.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:17:d5:5b:dd:b2:81:42:ca:0f:bb:f1:ba:c1:4e:2f:c0:0c:
         a0:e4:e0:b0:f3:38:78:b4:22:a2:5f:da:05:e4:fc:ae:c7:bf:
         1b:d7:d6:b8:d3:f6:3a:0a:d3:34:6d:43:e3:28:67:a4:28:3d:
         73:19:1d:4c:47:c5:eb:a7:97:2e:0f:75:59:8a:e2:53:bf:30:
         1a:65:75:ef:ad:36:6d:14:99:bd:f1:4a:c6:9d:69:d0:f3:1f:
         1a:2d:3d:45:38:b1:3c:48:00:bb:60:fb:f6:93:48:42:d3:0a:
         49:ce:69:fd:b5:30:6c:cf:67:fc:99:86:f4:d4:de:66:b5:8d:
         46:76:e6:1f:71:35:78:6b:c0:d9:71:99:91:07:33:a9:f8:7f:
         38:b0:39:19:61:89:82:80:ce:ea:a5:cb:5c:c7:9a:6d:a0:b0:
         d6:49:d7:99:e4:47:48:3f:cd:5e:8d:fe:0c:3d:02:88:0b:0e:
         47:f8:89:a8:33:2d:25:30:fc:14:4b:28:ec:17:75:be:03:b9:
         8a:a5:89:d7:95:c6:2b:df:2a:e3:b5:1f:a9:1f:b1:15:db:b1:
         8d:17:95:43:09:c8:5a:96:1c:07:0e:cd:11:a0:e5:ce:7a:24:
         50:da:db:46:8c:be:d0:77:f7:de:c2:b6:f1:1b:32:b4:56:87:
         04:c0:73:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:14 2024 by rpki-client on console-ams.rpki-client.org