Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/5783a5c075ed69e59d85f57385fb17f7cfdc1099.roa
File:                     5783a5c075ed69e59d85f57385fb17f7cfdc1099.roa (raw, json)
Hash identifier:          b+80L7z4VhvFhThk5jPn9qHwodaTwAkVebI9+/W7yHs=
Subject key identifier:   4E:81:C9:EB:EE:96:55:67:78:50:E3:1A:15:02:CF:C5:44:3E:08:40
Certificate issuer:       /CN=1866c45b21787e12af4deafc085303e786f50b2f
Certificate serial:       2DCD99
Authority key identifier: C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/5783a5c075ed69e59d85f57385fb17f7cfdc1099.roa
Signing time:             Sun 17 Mar 2024 18:44:41 +0000
ROA not before:           Sun 17 Mar 2024 18:42:19 +0000
ROA not after:            Sat 17 Mar 2029 18:42:19 +0000
asID:                     14080
IP address blocks:        186.146.250.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3001753 (0x2dcd99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1866c45b21787e12af4deafc085303e786f50b2f
        Validity
            Not Before: Mar 17 18:42:19 2024 GMT
            Not After : Mar 17 18:42:19 2029 GMT
        Subject: CN=5783a5c075ed69e59d85f57385fb17f7cfdc1099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:25:05:76:82:ea:5f:57:ec:5c:41:1b:83:db:
                    95:cc:47:7d:39:87:b5:26:59:e1:43:ac:bc:e9:ab:
                    4f:48:e5:83:b7:a9:29:a1:59:f9:29:15:93:e2:fb:
                    24:67:98:f6:ff:15:4d:45:33:ed:1d:f4:2c:99:a3:
                    5a:ce:5e:b3:e2:53:10:4b:1c:2e:de:cb:a9:00:a3:
                    9a:60:4d:21:bc:b1:3b:76:f1:c1:6b:d9:da:39:f0:
                    83:c4:86:d6:32:2b:63:b6:8e:d8:d6:df:27:9f:74:
                    46:3c:cd:fa:5d:d8:f7:b1:10:f0:bf:32:34:d9:4c:
                    9b:29:2d:03:e0:b2:d1:f8:26:cf:5f:3c:8f:ef:6b:
                    e7:f3:78:83:d8:7a:55:95:d0:e9:d3:6c:a4:30:bc:
                    a1:8b:a6:17:fc:53:5f:3f:62:33:71:1a:8c:02:ad:
                    7b:fa:08:d8:ea:bf:8f:56:49:b3:65:11:08:44:2e:
                    34:f6:1f:a7:66:0b:c1:2b:53:9d:bf:fc:cf:cd:80:
                    c1:f7:89:25:71:3a:c5:61:a4:a8:e9:71:6c:cc:78:
                    5f:68:09:30:6e:51:a7:93:a2:49:04:50:75:98:dd:
                    0a:6f:f8:39:dd:48:81:e7:d2:40:4d:97:b4:1a:d6:
                    d4:64:e0:f2:47:68:b6:8b:53:8b:84:d0:d0:06:e0:
                    85:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:81:C9:EB:EE:96:55:67:78:50:E3:1A:15:02:CF:C5:44:3E:08:40
            X509v3 Authority Key Identifier:
                keyid:C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/5783a5c075ed69e59d85f57385fb17f7cfdc1099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/1866c45b21787e12af4deafc085303e786f50b2f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.146.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:94:b8:8f:0b:5c:18:d6:fb:70:95:eb:ae:48:65:4d:cf:24:
         d8:3b:3b:dd:78:9b:a6:93:04:f9:61:d7:25:11:87:29:e1:ab:
         d2:2b:ce:5d:ca:43:eb:d7:f9:d2:41:08:d3:25:b8:92:73:3d:
         06:f1:3a:24:51:f1:22:2c:06:db:af:50:6a:56:0a:fe:24:b9:
         61:13:15:54:24:33:b2:e6:c7:84:8b:73:e6:f8:7b:43:50:eb:
         b2:a3:d9:f1:77:10:03:ab:73:21:0c:55:e8:8a:47:b7:b9:b9:
         ce:3d:2b:17:f6:d5:1d:39:3d:6a:63:ea:a5:f2:61:0a:c3:2f:
         8a:9f:8a:81:5f:fc:e2:46:67:c8:ac:7a:60:01:12:a8:74:39:
         9a:eb:1c:42:84:bb:66:50:ed:58:61:c7:96:b2:3c:54:d6:ed:
         84:d0:2e:a4:8a:97:15:12:99:5d:63:e0:e4:6c:63:7b:a0:66:
         8b:de:e5:c9:6c:d7:f2:6b:70:94:62:1d:ec:09:e9:fc:71:4a:
         a3:5a:7b:4e:16:85:2e:e2:16:30:a3:9d:4f:0a:ac:76:fe:c3:
         d6:5f:bc:0d:55:de:12:b6:3d:c1:39:e7:9e:8c:8a:73:b0:ec:
         67:73:e0:05:ed:ca:20:04:1d:43:ab:4c:49:d4:e8:72:f8:96:
         1b:ce:0e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:14 2024 by rpki-client on console-ams.rpki-client.org