Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/5bab0406a8a5a4450dd9c75f771ecfed4a31e2c0.roa
File:                     5bab0406a8a5a4450dd9c75f771ecfed4a31e2c0.roa (raw, json)
Hash identifier:          XE7W6XtdCQ8FEIzfeOwB5HvgRbm4kwwaTwWJpq8XeDE=
Subject key identifier:   20:A3:E0:75:7F:31:A9:27:B9:B4:A4:65:45:31:B3:54:13:88:A2:53
Certificate issuer:       /CN=1866c45b21787e12af4deafc085303e786f50b2f
Certificate serial:       2DC62C
Authority key identifier: C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/5bab0406a8a5a4450dd9c75f771ecfed4a31e2c0.roa
Signing time:             Sun 17 Mar 2024 18:44:32 +0000
ROA not before:           Sun 17 Mar 2024 18:42:19 +0000
ROA not after:            Sat 17 Mar 2029 18:42:19 +0000
asID:                     14080
IP address blocks:        186.146.249.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2999852 (0x2dc62c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1866c45b21787e12af4deafc085303e786f50b2f
        Validity
            Not Before: Mar 17 18:42:19 2024 GMT
            Not After : Mar 17 18:42:19 2029 GMT
        Subject: CN=5bab0406a8a5a4450dd9c75f771ecfed4a31e2c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c8:4c:2e:45:73:cf:99:18:43:87:21:43:34:
                    4c:18:f8:57:c9:77:9e:fe:4c:4b:c9:37:cc:15:ac:
                    70:7c:2a:26:09:b9:f3:90:df:4e:84:cd:d3:18:23:
                    a5:83:09:f8:61:28:53:cb:33:b3:70:e1:dc:79:19:
                    db:b4:ed:13:9d:c2:f1:06:c8:95:d0:5b:bf:33:c8:
                    19:e5:0d:c0:9b:13:a1:4c:3d:c1:70:99:83:97:b1:
                    c4:5a:9e:4d:95:31:ee:52:2b:a9:e5:71:2f:78:08:
                    38:1a:e4:1a:82:f6:31:1b:c3:af:d4:c1:29:de:ec:
                    6e:33:a6:ab:87:9a:73:82:40:22:b2:1e:8a:95:6a:
                    3c:b0:55:12:5a:b3:60:3a:fd:cd:ed:6e:68:20:c3:
                    f5:66:ad:02:9f:a5:c6:20:27:a6:82:69:4c:f4:e2:
                    96:5e:5b:f1:63:f8:dc:19:54:90:94:45:78:73:0c:
                    66:e4:f7:78:9c:89:d0:95:00:40:74:f2:7c:ab:53:
                    cd:3a:4e:5f:90:06:48:04:67:b0:e8:47:4d:fd:5f:
                    20:d2:02:de:f2:29:e6:89:21:40:40:ac:f8:ef:89:
                    68:78:d2:3b:bf:9d:81:24:a2:dd:45:7c:22:0a:3f:
                    e2:b6:7d:29:c0:21:db:28:6d:57:ea:2d:73:91:f0:
                    f0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:A3:E0:75:7F:31:A9:27:B9:B4:A4:65:45:31:B3:54:13:88:A2:53
            X509v3 Authority Key Identifier:
                keyid:C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/5bab0406a8a5a4450dd9c75f771ecfed4a31e2c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/1866c45b21787e12af4deafc085303e786f50b2f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.146.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:21:5d:73:24:ee:10:f1:41:89:21:74:c1:73:ea:64:0d:b2:
         d2:99:6c:eb:f5:18:3d:d1:1b:64:47:87:58:61:5a:3c:c6:fc:
         9b:85:b5:f3:35:59:aa:e7:d8:9e:14:01:4e:e3:f0:0f:be:4f:
         36:77:74:96:53:a8:79:7f:30:dc:2f:7f:98:4b:aa:d5:e0:d2:
         2a:9a:cb:a2:de:2f:1e:13:bc:07:2a:19:e7:92:be:e1:fe:b4:
         04:00:dc:73:ae:da:57:d3:d8:0f:e2:56:72:b8:c7:c5:09:83:
         f7:3a:28:16:2e:97:3e:e5:c7:29:1f:2c:73:cf:a8:22:0e:52:
         7a:20:85:20:34:57:c7:2a:06:04:1b:9b:b7:15:0d:7e:c8:95:
         55:78:96:9f:39:a2:50:40:93:ad:57:89:ec:35:d4:93:47:9d:
         62:dd:72:df:f1:0d:67:85:34:c2:51:2f:c0:9c:1c:39:d5:4b:
         1f:1e:38:dd:69:70:93:94:12:1e:46:fb:0a:0d:5b:82:8e:ae:
         a8:2d:85:3c:e8:b4:2b:71:76:05:24:a9:89:dd:43:f7:e5:bf:
         1f:d9:f0:e6:66:e5:b9:78:62:1e:8f:75:17:66:b0:41:ad:8d:
         01:5d:87:0b:29:06:56:96:c7:d2:fb:78:9e:f6:59:5c:82:5e:
         ab:a3:8b:70
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDLcYsMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE4
NjZjNDViMjE3ODdlMTJhZjRkZWFmYzA4NTMwM2U3ODZmNTBiMmYwHhcNMjQwMzE3
MTg0MjE5WhcNMjkwMzE3MTg0MjE5WjAzMTEwLwYDVQQDEyg1YmFiMDQwNmE4YTVh
NDQ1MGRkOWM3NWY3NzFlY2ZlZDRhMzFlMmMwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqMhMLkVzz5kYQ4chQzRMGPhXyXee/kxLyTfMFaxwfComCbnz
kN9OhM3TGCOlgwn4YShTyzOzcOHceRnbtO0TncLxBsiV0Fu/M8gZ5Q3AmxOhTD3B
cJmDl7HEWp5NlTHuUiup5XEveAg4GuQagvYxG8Ov1MEp3uxuM6arh5pzgkAish6K
lWo8sFUSWrNgOv3N7W5oIMP1Zq0Cn6XGICemgmlM9OKWXlvxY/jcGVSQlEV4cwxm
5Pd4nInQlQBAdPJ8q1PNOk5fkAZIBGew6EdN/V8g0gLe8inmiSFAQKz474loeNI7
v52BJKLdRXwiCj/itn0pwCHbKG1X6i1zkfDw3QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFCCj4HV/MaknubSkZUUxs1QTiKJTMB8GA1UdIwQYMBaAFMLSc6Z8Bh9jCzEo
oEBMvuztIjGIMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTg2NmM0
NWIyMTc4N2UxMmFmNGRlYWZjMDg1MzAzZTc4NmY1MGIyZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDI0MTliOTItZmJiYS00MDRiLWEyMjktZjM4NjVk
NTdhNDZhLzViYWIwNDA2YThhNWE0NDUwZGQ5Yzc1Zjc3MWVjZmVkNGEzMWUyYzAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wMjQxOWI5Mi1mYmJhLTQwNGItYTIyOS1mMzg2
NWQ1N2E0NmEvMTg2NmM0NWIyMTc4N2UxMmFmNGRlYWZjMDg1MzAzZTc4NmY1MGIy
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALqS+TANBgkqhkiG9w0BAQsFAAOCAQEAqiFdcyTuEPFBiSF0
wXPqZA2y0pls6/UYPdEbZEeHWGFaPMb8m4W18zVZqufYnhQBTuPwD75PNnd0llOo
eX8w3C9/mEuq1eDSKprLot4vHhO8ByoZ55K+4f60BADcc67aV9PYD+JWcrjHxQmD
9zooFi6XPuXHKR8sc8+oIg5SeiCFIDRXxyoGBBubtxUNfsiVVXiWnzmiUECTrVeJ
7DXUk0edYt1y3/ENZ4U0wlEvwJwcOdVLHx443Wlwk5QSHkb7Cg1bgo6uqC2FPOi0
K3F2BSSpid1D9+W/H9nw5mbluXhiHo91F2awQa2NAV2HCykGVpbH0vt4nvZZXIJe
q6OLcA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:00 2024 by rpki-client on console-fra.rpki-client.org