Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/7ca0a9e612cbb0f3bd1f414c7840bda6085ba8c1.roa
File:                     7ca0a9e612cbb0f3bd1f414c7840bda6085ba8c1.roa (raw, json)
Hash identifier:          hOkMH9WCSavMrmk4iA1yFISPYwM0dDp0iHPnpH+S6Q4=
Subject key identifier:   4D:3C:A7:72:3F:26:A5:2F:1E:25:B3:4F:90:FB:5F:D7:80:80:6D:95
Certificate issuer:       /CN=1866c45b21787e12af4deafc085303e786f50b2f
Certificate serial:       2D2B8D
Authority key identifier: C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/7ca0a9e612cbb0f3bd1f414c7840bda6085ba8c1.roa
Signing time:             Sun 17 Mar 2024 18:42:34 +0000
ROA not before:           Sun 17 Mar 2024 18:42:19 +0000
ROA not after:            Sat 17 Mar 2029 18:42:19 +0000
asID:                     19905
IP address blocks:        190.143.127.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2960269 (0x2d2b8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1866c45b21787e12af4deafc085303e786f50b2f
        Validity
            Not Before: Mar 17 18:42:19 2024 GMT
            Not After : Mar 17 18:42:19 2029 GMT
        Subject: CN=7ca0a9e612cbb0f3bd1f414c7840bda6085ba8c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:16:f0:6b:89:f9:e8:31:40:eb:10:dc:7f:ab:
                    4f:f2:c8:b7:86:af:cf:ee:fc:35:32:a4:eb:f9:1e:
                    ca:6b:0a:a3:09:b6:1e:66:cd:c9:47:82:a5:50:46:
                    55:c6:38:b2:8a:fd:9f:94:81:9a:b6:8b:75:54:6d:
                    9f:05:8b:b3:34:fe:dc:26:74:2c:9b:f0:fa:74:3f:
                    d7:7d:53:c5:c9:55:08:a5:90:d1:f7:0a:9d:70:5a:
                    38:24:ac:4e:a3:65:72:e7:f3:5a:49:95:f5:5b:b6:
                    f3:45:29:2c:c6:c0:63:64:46:fa:d4:84:39:10:34:
                    34:6f:ac:e8:67:9d:3a:d8:b5:97:38:4f:84:3d:dc:
                    63:e2:18:b2:6a:06:ec:18:8a:cd:91:d2:98:a4:68:
                    7f:d4:cd:85:f4:e8:9a:35:5c:6e:1f:9d:ab:8a:36:
                    62:85:60:e9:87:ab:57:a8:c7:77:a3:c2:3f:89:30:
                    5e:39:eb:ed:1b:af:52:e7:6b:14:2b:19:4b:3b:1c:
                    48:c8:27:a4:78:60:d8:b9:d0:d6:b8:5e:d6:31:93:
                    a7:77:55:fd:fa:77:52:37:a2:9b:3c:ea:af:ac:0a:
                    10:10:24:75:ac:12:39:2b:e4:79:ef:f8:6b:36:a7:
                    88:47:ac:fd:86:58:ef:c7:7a:aa:40:59:fa:9c:a3:
                    7c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:3C:A7:72:3F:26:A5:2F:1E:25:B3:4F:90:FB:5F:D7:80:80:6D:95
            X509v3 Authority Key Identifier:
                keyid:C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/7ca0a9e612cbb0f3bd1f414c7840bda6085ba8c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/1866c45b21787e12af4deafc085303e786f50b2f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.143.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:7e:5c:9b:e9:58:e3:2e:c9:17:8b:40:5a:c5:9b:53:ed:77:
         14:26:d4:02:bb:80:4e:af:1c:be:40:84:85:bb:7c:b8:6b:9b:
         ed:a3:8d:67:86:9d:98:93:32:47:66:82:c0:42:4f:2e:2e:ad:
         97:b6:dd:7d:8f:48:39:c2:8e:c4:87:9c:af:9e:5e:fc:8c:97:
         24:d3:35:d9:51:be:74:a2:78:49:34:6a:cb:a9:08:6b:f1:d4:
         86:92:13:3f:b5:af:f6:cf:fa:47:3b:38:a6:86:b7:a3:90:e7:
         aa:5e:2c:89:89:12:84:01:5a:e8:eb:5a:2a:65:95:ab:a9:e0:
         98:ba:07:dc:d5:1c:ee:9c:1e:3d:bb:db:8b:7e:d2:ee:eb:7f:
         de:03:bb:c7:7c:32:06:d4:51:e1:f2:73:4c:bb:ef:78:b5:f1:
         4f:21:17:3f:3c:6c:61:0a:5e:53:dd:4d:8e:b6:63:05:53:9f:
         00:aa:db:fd:31:5d:ae:42:3d:b4:11:36:ac:29:17:4e:14:9b:
         60:fe:23:06:da:8a:b0:34:5e:36:01:67:b2:46:c5:2b:cf:d3:
         71:a8:f5:21:2d:51:59:09:a1:e3:3d:ca:c8:54:51:a6:08:d9:
         86:e9:5d:7b:4d:99:9f:52:23:fc:4e:a8:fb:fb:26:9f:4f:fa:
         dc:a2:36:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:00 2024 by rpki-client on console-fra.rpki-client.org