Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/5e66743e804a8abafcce40fef5bb91ae765a170f.roa
File:                     5e66743e804a8abafcce40fef5bb91ae765a170f.roa (raw, json)
Hash identifier:          7D8Ak5p9U5qVaf2IJGjRqUgfAuXfa1AITtDTFpK2Ft4=
Subject key identifier:   39:2F:53:58:52:42:D3:F4:47:7B:E3:CE:59:4A:96:55:C8:EC:70:CE
Certificate issuer:       /CN=1866c45b21787e12af4deafc085303e786f50b2f
Certificate serial:       2D79EC
Authority key identifier: C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/5e66743e804a8abafcce40fef5bb91ae765a170f.roa
Signing time:             Sun 17 Mar 2024 18:43:18 +0000
ROA not before:           Sun 17 Mar 2024 18:42:19 +0000
ROA not after:            Sat 17 Mar 2029 18:42:19 +0000
asID:                     14080
IP address blocks:        186.82.62.0/23 maxlen: 23
                          190.158.112.0/22 maxlen: 24
                          201.221.164.0/22 maxlen: 24
                          201.216.12.0/22 maxlen: 24
                          190.84.115.0/24 maxlen: 24
                          200.118.96.0/22 maxlen: 24
                          200.118.187.0/24 maxlen: 24
                          200.118.198.0/24 maxlen: 24
                          200.118.194.0/24 maxlen: 24
                          190.157.0.0/16 maxlen: 24
                          181.53.69.0/24 maxlen: 24
                          181.53.70.0/24 maxlen: 24
                          181.53.71.0/24 maxlen: 24
                          181.59.44.0/24 maxlen: 24
                          181.59.45.0/24 maxlen: 24
                          181.59.46.0/24 maxlen: 24
                          181.59.47.0/24 maxlen: 24
                          186.85.10.0/24 maxlen: 24
                          186.85.11.0/24 maxlen: 24
                          186.85.12.0/24 maxlen: 24
                          186.85.13.0/24 maxlen: 24
                          186.85.14.0/24 maxlen: 24
                          186.85.15.0/24 maxlen: 24
                          186.87.68.0/24 maxlen: 24
                          186.87.69.0/24 maxlen: 24
                          186.87.70.0/24 maxlen: 24
                          186.87.71.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2980332 (0x2d79ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1866c45b21787e12af4deafc085303e786f50b2f
        Validity
            Not Before: Mar 17 18:42:19 2024 GMT
            Not After : Mar 17 18:42:19 2029 GMT
        Subject: CN=5e66743e804a8abafcce40fef5bb91ae765a170f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:92:25:46:60:38:c6:9c:8c:c1:fd:d3:1b:16:
                    79:c4:01:85:ca:4f:e3:b2:45:82:08:f5:fa:4e:16:
                    25:dd:be:fb:2e:20:5b:7f:b3:c7:09:ab:92:51:4c:
                    36:e9:f0:22:63:35:1b:ef:d5:27:23:75:f4:b4:0a:
                    b2:c1:1e:54:af:b2:5e:c8:fa:af:23:e6:30:ae:b7:
                    07:88:22:30:a3:d3:dc:68:75:bb:d2:1f:bd:35:16:
                    34:c9:3b:05:46:86:46:11:ac:c5:88:c7:10:02:6e:
                    dd:39:73:c7:87:16:12:c1:e1:42:e0:5a:4c:44:09:
                    bd:7c:cd:d9:67:47:28:e2:8b:53:95:70:58:ac:c8:
                    81:10:42:73:2a:c1:95:0b:e8:f6:37:be:af:83:6b:
                    3c:84:ff:b3:f9:b7:f1:0b:b2:9a:57:f5:44:be:d7:
                    1a:e4:91:ea:7b:00:ed:df:1e:31:5e:8a:73:3f:76:
                    54:a2:b8:1e:dc:cf:a6:f0:66:9a:6b:ce:01:3b:07:
                    ac:9c:ed:66:87:c2:16:2a:12:9b:d9:42:47:47:b6:
                    b2:4a:9e:c6:03:4f:83:ce:55:82:43:f4:f4:05:56:
                    5a:01:25:ed:e7:fe:d9:22:11:21:22:c8:e5:e7:48:
                    7f:1a:2b:e7:9e:b8:40:70:71:2c:31:17:ac:59:3d:
                    69:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:2F:53:58:52:42:D3:F4:47:7B:E3:CE:59:4A:96:55:C8:EC:70:CE
            X509v3 Authority Key Identifier:
                keyid:C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/5e66743e804a8abafcce40fef5bb91ae765a170f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/1866c45b21787e12af4deafc085303e786f50b2f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.53.69.0-181.53.71.255
                  181.59.44.0/22
                  186.82.62.0/23
                  186.85.10.0-186.85.15.255
                  186.87.68.0/22
                  190.84.115.0/24
                  190.157.0.0/16
                  190.158.112.0/22
                  200.118.96.0/22
                  200.118.187.0/24
                  200.118.194.0/24
                  200.118.198.0/24
                  201.216.12.0/22
                  201.221.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:e5:4c:9a:71:4f:79:f4:09:16:54:47:a8:6d:74:ff:57:d2:
         7a:41:3a:f8:cd:00:f6:68:6c:50:c5:c5:86:82:08:ec:95:f5:
         fe:4f:27:d0:60:22:5b:46:5f:93:fb:48:55:b8:c8:ea:dc:1d:
         fa:fb:a7:b1:7d:56:f9:c7:0b:54:27:ec:74:8d:7e:2c:bc:77:
         88:8a:df:ce:3a:7b:f8:53:44:f3:77:df:9f:77:65:05:5d:d8:
         e3:8a:0e:eb:0e:3f:a2:2a:86:5b:ed:7d:fb:e5:8d:71:4e:af:
         cf:95:1a:50:d3:e3:63:d2:5f:3a:21:af:30:b9:b2:53:d0:ef:
         06:0e:2f:e6:10:da:9f:d6:47:09:32:eb:ac:16:5d:e2:5f:3c:
         9a:a7:98:f2:5a:eb:e2:92:bb:16:7e:95:37:a3:f3:82:7e:8a:
         85:f2:52:b9:ec:66:d8:09:8e:01:60:9d:0a:30:89:51:65:70:
         38:40:1d:eb:27:8b:29:82:1a:2a:83:ad:c3:18:27:9f:5a:2f:
         49:fc:1a:c1:24:df:2b:9f:4d:4c:98:06:6e:f0:ff:ed:c7:31:
         8b:76:e4:ee:ba:38:8c:2b:10:77:c6:5c:d1:5c:b4:cd:fe:23:
         6c:01:d0:43:35:31:ea:ad:fb:e5:13:bb:05:79:da:d0:75:cc:
         14:45:5a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:14 2024 by rpki-client on console-ams.rpki-client.org