Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/7733e8386883155e67c2128c061151b119a7cefa.roa
File:                     7733e8386883155e67c2128c061151b119a7cefa.roa (raw, json)
Hash identifier:          GQSNfSeX0nlFoH1F0cxN+5szVUKNhmsNoykY45uYuJQ=
Subject key identifier:   B7:DB:C5:13:FE:96:6B:47:C4:39:57:01:2A:C5:79:7D:E9:F4:56:3A
Certificate issuer:       /CN=1866c45b21787e12af4deafc085303e786f50b2f
Certificate serial:       2D8BBB
Authority key identifier: C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/7733e8386883155e67c2128c061151b119a7cefa.roa
Signing time:             Sun 17 Mar 2024 18:43:34 +0000
ROA not before:           Sun 17 Mar 2024 18:42:19 +0000
ROA not after:            Sat 17 Mar 2029 18:42:19 +0000
asID:                     14080
IP address blocks:        190.158.134.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2984891 (0x2d8bbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1866c45b21787e12af4deafc085303e786f50b2f
        Validity
            Not Before: Mar 17 18:42:19 2024 GMT
            Not After : Mar 17 18:42:19 2029 GMT
        Subject: CN=7733e8386883155e67c2128c061151b119a7cefa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d5:eb:e7:04:82:bc:d6:e7:c4:70:f9:ed:e3:
                    38:f3:a4:0b:2a:86:1d:60:12:2a:d9:80:5c:f3:42:
                    25:69:29:ea:6e:bd:e9:4b:f3:b1:64:85:88:35:1b:
                    69:2e:8c:86:16:99:fd:c4:6c:9b:94:f1:ce:b1:49:
                    bc:5b:61:25:0e:6c:65:66:88:8c:4a:d8:8f:e7:36:
                    3d:ab:f3:31:22:04:34:5a:9c:7f:86:24:0f:07:66:
                    8e:fe:17:e2:34:df:65:96:88:d3:d8:1e:04:31:93:
                    8f:74:e1:bf:26:fd:9a:eb:58:54:2d:91:ff:0a:81:
                    89:5e:f7:a1:92:ce:11:99:92:f9:2f:db:6a:87:9b:
                    59:2a:7b:8a:3b:8a:a5:2e:d7:4d:7c:f2:33:6e:29:
                    bd:be:4d:d3:1c:71:a0:7d:5e:3e:91:87:c5:af:46:
                    c5:25:66:61:ec:85:99:93:2c:f6:7a:34:c9:dd:f7:
                    6e:e3:f8:ea:c6:0f:cd:85:7c:f9:0e:a3:a0:e0:de:
                    fc:32:02:8f:46:20:f3:c5:69:cb:1a:72:88:eb:cf:
                    0c:8a:24:a5:00:d2:09:84:55:12:db:3e:2f:83:84:
                    c2:1e:f1:3e:30:97:cb:cf:1c:eb:f0:c2:13:66:77:
                    68:88:d0:84:32:92:90:de:bb:bd:49:4e:18:18:20:
                    23:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:DB:C5:13:FE:96:6B:47:C4:39:57:01:2A:C5:79:7D:E9:F4:56:3A
            X509v3 Authority Key Identifier:
                keyid:C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/7733e8386883155e67c2128c061151b119a7cefa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/1866c45b21787e12af4deafc085303e786f50b2f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.158.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:ce:9a:65:40:5f:ea:ef:3d:02:66:e1:19:2f:06:24:21:49:
         fc:c8:36:6f:f4:cf:22:60:21:8c:c8:c0:4a:c6:c4:82:07:36:
         2d:fb:af:e5:70:be:76:04:9b:f1:e0:a2:13:fe:11:e2:b7:6b:
         7b:52:b2:58:6b:02:f2:94:d1:ca:1a:10:ff:fb:19:ed:16:45:
         cd:ce:0b:74:57:d8:e1:0f:13:e4:52:4b:e2:40:b7:a5:43:8e:
         a1:ca:17:bb:94:33:b9:e5:e4:d8:b2:ce:c2:09:12:bd:9a:2d:
         fe:72:6c:c4:72:d5:d6:66:af:c6:4d:fa:3a:70:1f:e6:f1:6d:
         ec:1a:41:15:1f:1f:9b:8e:f2:d9:3a:b3:52:61:1a:30:15:c9:
         81:cb:91:84:a4:f6:65:9f:b0:3f:18:10:50:dc:25:af:c4:8a:
         cf:05:6b:b5:42:e1:da:f0:39:ed:db:25:97:b6:7d:52:03:7b:
         88:f1:3c:c7:75:12:f5:b7:47:41:9c:11:37:82:ec:26:6a:c9:
         e3:74:4f:5b:e6:fe:f4:64:e1:47:e8:6d:31:b2:e9:8d:c0:b2:
         9b:9e:27:5d:74:c4:f3:d1:5b:ff:00:84:f0:16:b3:95:5a:b8:
         57:12:19:83:d5:ea:f6:6c:02:07:7d:22:00:c7:8f:98:5c:0e:
         cd:00:75:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:17 2024 by rpki-client on console-fra.rpki-client.org