Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/8df31ccd0435e0f2dbe099ae10536b9179951b85.roa
File:                     8df31ccd0435e0f2dbe099ae10536b9179951b85.roa (raw, json)
Hash identifier:          Zowd2okFd29ziLu8cpVlMDJcUsG2+VXJLg5ZPTSAYKA=
Subject key identifier:   7D:02:CC:D6:F1:59:F6:9F:60:85:3B:E8:BE:F8:D9:C6:19:40:A1:19
Certificate issuer:       /CN=1866c45b21787e12af4deafc085303e786f50b2f
Certificate serial:       2DFDFE
Authority key identifier: C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/8df31ccd0435e0f2dbe099ae10536b9179951b85.roa
Signing time:             Sun 17 Mar 2024 18:45:43 +0000
ROA not before:           Sun 17 Mar 2024 18:42:19 +0000
ROA not after:            Sat 17 Mar 2029 18:42:19 +0000
asID:                     10620
IP address blocks:        190.158.204.0/22 maxlen: 24
                          201.221.172.0/22 maxlen: 24
                          181.57.248.0/23 maxlen: 23
                          181.57.250.0/23 maxlen: 23
                          181.52.218.0/23 maxlen: 23
                          190.145.240.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3014142 (0x2dfdfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1866c45b21787e12af4deafc085303e786f50b2f
        Validity
            Not Before: Mar 17 18:42:19 2024 GMT
            Not After : Mar 17 18:42:19 2029 GMT
        Subject: CN=8df31ccd0435e0f2dbe099ae10536b9179951b85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:6c:00:03:1d:e7:81:9e:f5:0c:7e:fe:26:11:
                    b3:a3:52:29:94:aa:19:7d:e4:73:70:52:eb:f2:f4:
                    02:26:1b:79:9d:b4:9b:70:a9:00:e1:07:da:bb:7e:
                    4b:28:34:a0:c2:94:30:7d:67:f0:69:ef:ed:cb:e9:
                    e4:ad:f3:3a:19:e4:06:4c:97:77:c6:d4:d6:41:25:
                    54:dd:10:a1:bd:d9:22:94:f4:7c:f4:c8:51:09:05:
                    c3:65:ef:08:ae:24:5b:b6:bd:9f:f1:83:12:f0:f3:
                    71:42:9e:3a:ca:19:d3:95:29:c2:f2:ca:a3:89:23:
                    c5:79:ae:2d:9f:e0:ed:89:cf:20:fd:51:1a:16:0f:
                    89:c9:cb:08:2f:8b:5e:b6:44:ac:c0:d2:84:35:82:
                    83:8a:11:f1:51:8d:b3:9f:78:ee:aa:76:25:58:5a:
                    cf:19:63:d9:e7:26:fe:68:89:5a:07:bc:88:54:e0:
                    a9:38:e0:3d:7f:a2:6c:e8:58:00:67:1f:32:86:5d:
                    7c:5c:24:90:06:76:e6:7a:93:ca:b2:f4:99:27:fa:
                    cb:be:ed:f7:4c:2d:cc:63:49:06:11:2b:7f:3d:f3:
                    f0:4d:9c:b5:0f:8b:46:95:55:8a:f4:af:53:1f:a9:
                    74:c7:0b:ce:3c:b3:d5:a0:7a:ac:47:18:6d:1d:4e:
                    86:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:02:CC:D6:F1:59:F6:9F:60:85:3B:E8:BE:F8:D9:C6:19:40:A1:19
            X509v3 Authority Key Identifier:
                keyid:C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/8df31ccd0435e0f2dbe099ae10536b9179951b85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/1866c45b21787e12af4deafc085303e786f50b2f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.52.218.0/23
                  181.57.248.0/22
                  190.145.240.0/22
                  190.158.204.0/22
                  201.221.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:7b:5a:eb:cf:ad:a0:cb:b3:fd:5b:1c:ff:67:72:26:e6:1e:
         87:4b:76:b5:8a:bd:09:1e:66:8c:80:d8:bc:9a:d3:d1:9c:2a:
         25:67:63:b8:1f:ef:58:cf:8b:d7:3c:98:13:79:ce:3f:fb:dd:
         62:1f:ea:dd:e9:18:00:e5:e2:d8:c9:04:b0:10:47:24:9f:ff:
         4c:7e:98:e9:13:f1:89:f0:f2:f7:e8:f7:54:4d:b6:3d:43:cf:
         43:f5:9b:8a:76:41:af:2d:3c:67:de:c4:47:b7:a6:87:47:83:
         77:64:23:9a:5c:e5:53:98:df:9a:00:6e:bf:b2:98:0e:8c:54:
         5b:17:d1:d8:6c:4f:df:f9:db:f1:c9:a0:ee:e3:a4:53:c5:44:
         a5:a7:8f:db:90:e0:8e:d2:b7:95:35:9a:d9:9a:65:21:24:cf:
         39:e8:5a:d5:22:cd:e2:bb:8e:61:29:db:3a:1b:e6:8d:54:14:
         e7:d7:b2:14:95:89:bc:8b:a5:ed:79:de:54:31:07:2c:68:1b:
         3e:fa:a6:43:12:63:f1:ed:47:c9:be:e3:f6:0c:5f:6f:5c:9d:
         37:75:f7:c9:2d:91:da:6f:30:72:e0:b8:9d:45:ed:49:3a:cb:
         01:99:a1:0e:f4:a0:4a:6a:a6:5e:f7:74:4c:29:3e:a6:ee:57:
         8e:17:e8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:00 2024 by rpki-client on console-fra.rpki-client.org