Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/665776dba62151a098aaf1095c1afe3be74e4666.roa
File:                     665776dba62151a098aaf1095c1afe3be74e4666.roa (raw, json)
Hash identifier:          jVZPye8fknUf8f1ym5Ih8k8Yz6vViUzI9FuPk88nWf4=
Subject key identifier:   E0:BB:99:59:9A:37:E4:B4:00:C8:AE:B3:3F:3C:DB:A0:88:38:D5:82
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       19D714
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/665776dba62151a098aaf1095c1afe3be74e4666.roa
Signing time:             Wed 30 Mar 2022 14:11:08 +0000
ROA not before:           Wed 30 Mar 2022 03:00:00 +0000
ROA not after:            Sun 30 Mar 2070 03:00:00 +0000
asID:                     27864
IP address blocks:        190.145.252.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1693460 (0x19d714)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Mar 30 03:00:00 2022 GMT
            Not After : Mar 30 03:00:00 2070 GMT
        Subject: CN=665776dba62151a098aaf1095c1afe3be74e4666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f2:77:67:ff:27:f5:68:32:ad:48:b4:74:1a:
                    b1:5c:ad:1f:4b:97:eb:69:74:29:4e:cb:c0:27:48:
                    d8:ef:1c:16:54:29:a2:2a:67:2e:c2:6c:4f:e3:8e:
                    85:2c:4b:fe:15:d1:80:d6:4e:74:07:23:c8:b5:ad:
                    07:7d:b1:67:59:7d:33:af:32:19:88:ce:ac:f4:17:
                    09:99:9b:68:16:53:bb:30:70:0c:5c:76:8f:57:c8:
                    9e:9b:e8:5c:ce:c6:c9:f1:87:e1:37:0c:1c:3f:df:
                    1a:7a:3c:6e:bc:61:59:5a:46:39:07:13:81:be:ee:
                    05:79:e3:31:ca:c5:bc:be:9b:0d:da:4e:89:67:fd:
                    96:4b:58:08:f3:0c:de:25:9c:ee:59:8d:ea:5b:dc:
                    cc:82:4a:3e:14:80:2d:a9:d9:ee:c5:5d:9d:18:ed:
                    60:7e:3e:94:44:2e:4e:ca:d2:10:37:51:a5:b7:c7:
                    84:b0:91:d4:cb:90:a0:e8:5b:8c:42:38:00:12:47:
                    05:25:d5:11:da:d6:43:90:db:6e:1d:af:a8:fe:28:
                    0f:59:c7:e9:8c:c7:53:27:75:59:9c:b1:02:2a:28:
                    37:3d:af:59:96:75:19:a6:d2:a9:d9:85:83:f8:06:
                    12:69:a3:54:6f:b1:b9:dc:1f:d9:8e:f0:3a:ca:9b:
                    79:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:BB:99:59:9A:37:E4:B4:00:C8:AE:B3:3F:3C:DB:A0:88:38:D5:82
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/665776dba62151a098aaf1095c1afe3be74e4666.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.145.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:0a:d2:3f:42:57:b3:1e:f7:9b:c8:26:cd:e9:8a:c5:b6:32:
         9a:a9:fd:9f:08:36:ce:f8:89:06:b3:fb:08:49:6e:0d:fe:f0:
         64:1b:38:7c:c4:ce:46:e1:a0:79:a8:9a:c7:62:d2:49:a6:ac:
         83:8e:34:29:be:a7:94:75:62:37:4e:f2:a6:2c:64:9e:50:d4:
         b6:b6:3d:bc:f7:a5:a4:b9:98:cd:c2:c7:cb:50:6c:e3:63:58:
         d8:36:52:31:45:7d:dc:06:43:a0:89:18:10:91:28:ca:e5:33:
         da:67:ef:fe:2e:57:3f:bd:57:cf:50:73:73:b7:b4:2d:8e:f1:
         b7:0f:26:98:4a:02:7d:8c:e4:62:d7:c3:06:80:d1:b7:f8:4f:
         fc:9a:c4:e3:e4:8c:0a:a7:90:3e:19:10:f8:04:92:3d:05:0a:
         f5:d0:9f:49:a5:51:73:83:ae:f7:55:64:00:fd:4c:2d:f5:b1:
         5c:05:4c:4c:4d:17:30:d4:8e:42:ed:cc:cd:1b:bc:ec:2e:e7:
         43:21:92:ef:2b:86:fd:4e:a5:4c:12:dc:69:72:06:a9:a0:3d:
         46:e2:76:cf:7b:73:08:c4:3d:ee:96:a3:72:da:0f:fa:fc:e1:
         b8:7a:b6:29:c9:6c:39:b8:c6:04:52:2a:34:99:e0:09:f4:61:
         a5:37:23:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 17 19:15:18 2024 by rpki-client on console-fra.rpki-client.org