Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/5f7c997adf87ea5ac05144b492c3af1df8ef4f1a.roa
File:                     5f7c997adf87ea5ac05144b492c3af1df8ef4f1a.roa (raw, json)
Hash identifier:          lvOQ1bjf71ErRdXaLzKFbQVWvBxtgH7SaMIFSZK2MTE=
Subject key identifier:   D1:3F:B8:95:34:E0:C4:B0:46:B9:E5:BC:B1:ED:8A:D6:7F:37:FD:11
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       2BE0A3
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/5f7c997adf87ea5ac05144b492c3af1df8ef4f1a.roa
Signing time:             Wed 31 Jan 2024 19:37:46 +0000
ROA not before:           Wed 31 Jan 2024 19:37:46 +0000
ROA not after:            Sat 31 Jan 2026 19:37:46 +0000
asID:                     14080
IP address blocks:        190.158.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2875555 (0x2be0a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Jan 31 19:37:46 2024 GMT
            Not After : Jan 31 19:37:46 2026 GMT
        Subject: CN=5f7c997adf87ea5ac05144b492c3af1df8ef4f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:53:b1:de:3f:1e:5a:1d:cb:b5:6e:7f:d0:cb:
                    89:ff:93:be:5c:65:1f:e0:d6:d1:d9:e4:a1:d7:ef:
                    52:7f:54:ec:59:f7:16:ba:6d:e0:ae:98:41:f6:1e:
                    6a:7b:e8:bf:c2:93:01:33:7c:18:21:48:26:87:dd:
                    99:bd:49:24:c1:23:c9:e8:26:d2:de:54:8e:4c:d8:
                    c8:17:46:5d:56:0e:2f:b5:03:97:9c:90:82:c8:a3:
                    d8:08:d2:fe:d4:64:90:90:d2:d0:f1:9a:9c:20:ad:
                    a3:d4:bd:a9:b5:4c:ab:fd:26:78:23:1f:10:ff:b5:
                    fa:03:ce:f2:ff:47:a3:e0:d3:78:18:36:a4:d7:48:
                    9e:93:d6:82:85:bb:d9:dd:36:b2:16:cf:fe:be:95:
                    2a:27:44:43:70:a2:c8:bf:15:55:e4:d7:ba:7d:6c:
                    41:12:fc:67:f1:21:44:dc:df:e5:fd:e4:47:4a:0a:
                    6e:85:00:93:e0:af:48:cf:92:4a:7c:9c:a3:39:7e:
                    c5:a7:26:39:41:65:76:78:66:c2:e5:84:67:9a:ea:
                    1a:9c:2d:e5:c7:08:fb:1d:24:b9:62:09:2d:97:4f:
                    7a:fe:dc:dd:39:0b:5f:9f:19:f3:d6:5f:23:c8:aa:
                    0f:53:98:9a:5e:71:04:39:89:4e:f2:39:99:57:96:
                    b5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:3F:B8:95:34:E0:C4:B0:46:B9:E5:BC:B1:ED:8A:D6:7F:37:FD:11
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/5f7c997adf87ea5ac05144b492c3af1df8ef4f1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.158.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0f:8b:b6:3a:b9:d8:81:ee:36:a7:6a:6d:b0:96:20:ac:80:17:
         ec:b0:05:fc:ab:33:f0:78:14:23:56:83:88:2a:05:75:d4:53:
         c1:34:ba:93:d1:8a:c6:db:d0:1e:93:b1:7e:33:6b:b2:8d:ba:
         f6:bb:39:24:1b:aa:d5:ed:f9:e9:35:91:36:c2:b1:2c:ce:71:
         cd:e1:e2:65:e4:89:33:0f:81:dd:50:eb:4f:24:92:3a:18:af:
         61:f9:75:3d:6b:61:f7:e2:d4:63:21:d1:ab:c7:b8:30:28:dc:
         c4:fb:96:0b:e3:6e:43:7d:c6:bb:ce:04:19:f8:49:52:f9:21:
         a0:76:1a:eb:af:c2:f8:85:8c:7f:8a:a0:07:b5:fb:3c:c2:28:
         2f:30:3b:8b:ee:a5:d9:f4:be:04:8c:58:79:f5:1e:ef:b1:2a:
         9e:9e:43:75:bd:91:e8:c0:3f:62:d0:17:1d:c0:cb:e5:74:69:
         15:c7:86:55:28:6b:17:09:dc:80:89:48:fe:51:d0:2c:00:ff:
         aa:c8:a5:28:9f:02:1a:95:a8:db:52:54:19:d7:b9:b0:1c:08:
         3a:d4:8f:b2:d1:39:72:a0:00:39:dc:3c:1c:c9:7f:e5:3f:23:
         8e:2c:44:fd:54:35:ca:42:ca:ce:53:c4:0d:1c:24:a8:55:41:
         2f:6d:4c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 17 19:24:31 2024 by rpki-client on console-ams.rpki-client.org