Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/7e1f4d822ae0869adce2ec8fb7e55d33168014c5.roa
File:                     7e1f4d822ae0869adce2ec8fb7e55d33168014c5.roa (raw, json)
Hash identifier:          aK30fzud4BygbYSgQt8WuQAtpvzs5uTob8gsAJ8+qeY=
Subject key identifier:   68:BB:D1:D1:FB:57:A9:DA:07:46:6A:7B:0B:B7:13:07:0E:5A:D5:5A
Certificate issuer:       /CN=1866c45b21787e12af4deafc085303e786f50b2f
Certificate serial:       2D9FAE
Authority key identifier: C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/7e1f4d822ae0869adce2ec8fb7e55d33168014c5.roa
Signing time:             Sun 17 Mar 2024 18:43:51 +0000
ROA not before:           Sun 17 Mar 2024 18:42:19 +0000
ROA not after:            Sat 17 Mar 2029 18:42:19 +0000
asID:                     14080
IP address blocks:        186.87.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2989998 (0x2d9fae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1866c45b21787e12af4deafc085303e786f50b2f
        Validity
            Not Before: Mar 17 18:42:19 2024 GMT
            Not After : Mar 17 18:42:19 2029 GMT
        Subject: CN=7e1f4d822ae0869adce2ec8fb7e55d33168014c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:70:95:e6:a4:ae:86:95:38:30:4b:a2:d6:f3:
                    02:f5:7d:27:33:90:d2:31:9f:6e:8b:cb:41:4d:c4:
                    95:ac:cd:15:1c:4e:ac:a2:e2:51:cf:a9:98:2f:95:
                    1e:95:35:d4:d2:1d:78:39:3d:44:c9:3d:02:2f:18:
                    d8:eb:3b:78:a9:c1:24:62:8a:f8:25:26:90:17:13:
                    f6:a4:64:92:a7:86:37:62:19:f0:37:49:e6:8e:e1:
                    a5:4d:fc:e9:09:06:a9:36:eb:87:a8:fe:6f:c6:5a:
                    17:0d:11:d1:53:02:18:13:c1:6c:2b:13:3a:11:51:
                    d2:e8:8e:f6:0d:51:8a:69:8d:7b:d4:fc:ce:8f:2d:
                    23:fb:63:4e:63:ef:20:c7:07:6c:e1:88:ed:05:60:
                    58:d9:aa:cc:c7:59:cb:a3:86:68:65:bc:ae:44:a5:
                    14:a6:35:0c:7e:42:f6:b6:2d:85:d2:3b:8b:ae:70:
                    7f:a0:59:d1:b1:73:ce:49:29:e2:88:2d:f3:17:49:
                    2e:f9:f8:46:0d:45:c0:86:c9:08:56:2f:82:90:c0:
                    a5:4e:22:49:13:94:64:83:5c:82:43:21:e2:37:36:
                    47:3d:32:1c:65:a1:12:2b:ea:00:ed:23:22:11:1e:
                    61:1a:13:94:83:1f:9a:2f:9d:b7:80:fb:e0:96:5d:
                    df:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:BB:D1:D1:FB:57:A9:DA:07:46:6A:7B:0B:B7:13:07:0E:5A:D5:5A
            X509v3 Authority Key Identifier:
                keyid:C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/7e1f4d822ae0869adce2ec8fb7e55d33168014c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/1866c45b21787e12af4deafc085303e786f50b2f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.87.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:bc:3d:8b:c8:68:33:8c:a4:d1:34:11:6c:df:1e:88:04:9d:
         0b:50:6f:cf:2f:e6:0e:ff:e3:57:5d:26:92:a8:0d:3d:c4:fa:
         86:dc:66:b6:90:4d:07:13:88:db:65:c7:a7:f2:38:af:86:9d:
         02:b8:ae:89:0f:d4:67:6b:b1:ba:78:9f:3b:38:28:1d:02:a8:
         14:d2:e6:5b:97:3c:a9:f5:0b:fb:ac:7b:51:73:d6:d2:e8:87:
         a6:95:ae:a5:08:43:03:c9:58:2a:bd:91:7a:99:dd:ef:b7:69:
         f2:b9:09:20:1a:b9:5a:a8:70:43:ca:93:e8:1c:cc:fb:75:e1:
         6c:d0:18:46:24:3a:6e:4c:54:9a:a8:a4:ea:30:8b:31:38:06:
         2e:53:1d:e4:55:e3:8f:6e:79:8d:5e:24:52:d1:51:fe:af:c5:
         e7:89:56:8a:36:ae:43:fb:9c:8d:1a:f2:a0:7a:e4:38:87:fd:
         97:98:8d:6b:b9:4e:57:80:f9:4f:6d:64:53:45:64:02:25:d6:
         fb:84:b5:3b:c4:1b:c6:77:0e:57:f9:d2:61:d1:df:7a:3a:af:
         2f:b9:35:12:23:7f:7a:b8:c9:28:c1:f1:3d:08:fe:a5:2c:0e:
         5a:2d:7a:f3:76:d3:aa:27:c5:05:55:19:53:27:68:cd:23:30:
         ac:37:f3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:00 2024 by rpki-client on console-fra.rpki-client.org