Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/75242055fb9ccc18454a444e748042b6743569d9.roa
File:                     75242055fb9ccc18454a444e748042b6743569d9.roa (raw, json)
Hash identifier:          WCMBjhiFaYAjsCW3enoz0BKD09Okiy+ZyaE6cevnUAE=
Subject key identifier:   C8:E7:D3:66:28:01:49:58:B2:4C:7E:C9:FE:DF:E5:02:05:8C:3B:DB
Certificate issuer:       /CN=1866c45b21787e12af4deafc085303e786f50b2f
Certificate serial:       2D33F4
Authority key identifier: C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/75242055fb9ccc18454a444e748042b6743569d9.roa
Signing time:             Sun 17 Mar 2024 18:42:38 +0000
ROA not before:           Sun 17 Mar 2024 18:42:19 +0000
ROA not after:            Sat 17 Mar 2029 18:42:19 +0000
asID:                     14080
IP address blocks:        190.84.224.0/23 maxlen: 23
                          190.84.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2962420 (0x2d33f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1866c45b21787e12af4deafc085303e786f50b2f
        Validity
            Not Before: Mar 17 18:42:19 2024 GMT
            Not After : Mar 17 18:42:19 2029 GMT
        Subject: CN=75242055fb9ccc18454a444e748042b6743569d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6c:70:05:68:20:34:f6:14:fb:d2:ee:9c:11:
                    20:e9:4c:69:09:89:6b:9a:6b:02:4e:93:74:31:f8:
                    c5:cc:11:72:ed:f9:68:5c:63:f7:eb:1a:9a:44:bf:
                    37:db:cc:82:39:ee:1a:b2:6f:cf:e1:a1:aa:2e:c7:
                    55:fb:33:b2:3b:d3:9c:8c:29:05:64:88:11:38:ae:
                    6b:56:ed:00:92:3d:dc:ff:20:7b:a6:b5:22:ba:2f:
                    a2:17:bb:66:df:38:72:1d:98:45:49:e8:43:43:9a:
                    41:c2:55:c1:28:81:aa:22:a8:48:c6:12:02:97:57:
                    8f:81:1c:44:e9:59:8d:32:d2:5a:d7:9d:ab:e3:fe:
                    f9:f2:68:31:1c:99:72:29:b6:f8:ea:25:7b:13:c3:
                    8e:b5:6f:38:25:02:00:f0:7b:cd:1c:fd:25:d7:bb:
                    bb:ae:0b:1a:a6:f0:f9:bc:2f:d4:1a:98:73:58:bf:
                    13:49:6e:12:b6:f8:38:e6:f4:9a:4a:fb:fd:c3:6f:
                    49:aa:24:1d:5c:c6:d7:b9:ed:b7:f9:a5:30:59:83:
                    34:f8:0e:52:73:ce:d6:3b:5b:fb:49:57:3f:b0:a0:
                    56:2f:a6:50:ea:a5:27:32:17:dd:1e:ac:62:b3:70:
                    19:ea:31:c0:3c:2a:6b:32:b8:e0:f8:a8:d5:92:57:
                    be:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E7:D3:66:28:01:49:58:B2:4C:7E:C9:FE:DF:E5:02:05:8C:3B:DB
            X509v3 Authority Key Identifier:
                keyid:C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/75242055fb9ccc18454a444e748042b6743569d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/1866c45b21787e12af4deafc085303e786f50b2f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.84.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         33:5e:5e:e5:37:9f:33:df:89:3f:e0:23:b4:77:8a:81:24:fa:
         c8:6d:63:2d:ff:33:e8:0b:78:e7:d0:a7:95:ec:99:30:cf:96:
         3a:bd:67:c7:56:5d:93:9c:ec:ed:59:90:99:bf:eb:e8:c6:33:
         7e:d5:d7:bc:57:30:fe:e8:fe:5a:03:4b:ab:76:32:57:15:8a:
         c9:f1:f3:fe:8b:46:fe:1c:9b:2f:9a:5b:e9:94:5d:ad:7c:8b:
         f5:36:1e:47:bb:20:45:7c:5d:e7:6b:f3:4c:1a:ab:27:cd:9d:
         47:29:3a:94:af:80:cd:1f:90:b6:81:6e:9d:2f:66:b0:35:ee:
         09:ef:84:18:d3:fc:fc:49:60:95:c3:13:27:51:74:bd:55:5c:
         31:9a:0b:8b:df:48:d5:2e:db:be:6d:d6:ba:ea:ba:0e:12:6a:
         3e:10:40:17:90:67:ad:0a:bb:c3:aa:ad:c9:48:28:13:2b:5e:
         e4:cb:de:10:44:cd:4e:d0:1b:07:3b:b4:3c:42:c0:81:fe:9c:
         d0:7e:74:c6:7b:bc:a6:99:7f:8a:51:b9:0f:06:1c:b7:d8:49:
         4e:db:b1:93:9e:c3:6a:c3:81:5c:33:87:bb:1a:90:97:9b:29:
         d8:15:d6:0d:75:2f:01:11:16:52:9f:2e:cb:bb:cd:a7:02:fa:
         54:67:92:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:00 2024 by rpki-client on console-fra.rpki-client.org