Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/914a0e40366ba6c65396a424d64d7eba66a7e5e7.roa
File:                     914a0e40366ba6c65396a424d64d7eba66a7e5e7.roa (raw, json)
Hash identifier:          09MehERFNhe3qsxpEC6CKorM3BT3ba5t66+GbQ6AqAI=
Subject key identifier:   F6:80:1F:8C:A1:69:7A:6D:6D:A0:19:6D:9B:DE:78:0E:9E:42:48:A5
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       0DD51E
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/914a0e40366ba6c65396a424d64d7eba66a7e5e7.roa
Signing time:             Wed 24 Mar 2021 14:34:36 +0000
ROA not before:           Wed 24 Mar 2021 14:34:35 +0000
ROA not after:            Tue 24 Mar 2026 14:34:35 +0000
asID:                     263199
IP address blocks:        190.146.113.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 906526 (0xdd51e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Mar 24 14:34:35 2021 GMT
            Not After : Mar 24 14:34:35 2026 GMT
        Subject: CN=914a0e40366ba6c65396a424d64d7eba66a7e5e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f9:b0:a2:f5:e0:2a:fa:8a:d1:f3:e7:eb:98:
                    3a:5f:44:9c:b8:83:20:24:6c:c7:3b:ed:87:6c:2b:
                    35:67:0f:05:1e:9f:4e:7b:b0:7c:7f:08:61:5b:f0:
                    6c:66:2c:d0:69:35:80:b9:55:a7:84:99:75:96:ae:
                    32:3c:91:4f:59:ce:e8:78:5b:33:7a:fd:e8:dd:ab:
                    a8:2f:93:e0:ef:7e:ae:e9:a6:5c:c3:43:a4:b4:f0:
                    34:7a:a2:27:d4:88:b8:1e:ee:aa:18:79:18:03:47:
                    b3:b6:e0:ee:96:37:36:57:dd:ac:30:87:df:98:17:
                    8d:6b:f0:2a:25:fb:79:d9:b4:dc:b9:88:58:e1:88:
                    d8:e2:5f:9c:b7:ec:f0:15:8c:17:56:39:44:1f:ce:
                    12:1a:a0:92:e4:7a:85:4c:2b:e6:c5:ee:8e:a9:ad:
                    7f:75:eb:0d:b1:be:ff:66:c0:8e:fe:e9:e4:f1:61:
                    6c:49:8f:fb:aa:68:38:79:e0:4b:47:b9:5b:c0:d7:
                    63:39:2c:1b:de:4b:15:dc:e3:68:58:7c:8a:99:7d:
                    3a:82:5c:2a:95:52:a1:de:f9:cc:f7:2a:12:ef:f6:
                    bd:1f:75:87:2a:4d:23:5c:93:12:b3:80:03:8d:90:
                    55:3b:4d:35:42:b6:2e:b2:26:08:e8:32:84:d5:61:
                    78:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:80:1F:8C:A1:69:7A:6D:6D:A0:19:6D:9B:DE:78:0E:9E:42:48:A5
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/914a0e40366ba6c65396a424d64d7eba66a7e5e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.146.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:d2:e8:dc:42:7d:d9:a3:d3:65:93:1b:ca:bc:b5:c6:1b:40:
         90:14:ac:1c:1d:04:44:20:6b:ec:86:67:d1:4e:2d:9c:2f:46:
         97:40:6c:51:62:f3:94:7f:96:55:c6:06:48:74:7e:4f:49:40:
         08:7b:5b:04:ec:05:8d:8b:2a:e1:e7:8c:f3:e3:e3:f5:b5:59:
         0e:f0:9e:66:70:3a:09:1f:af:82:50:6e:c6:98:b3:7c:4f:76:
         8a:f2:69:6a:6a:07:ab:73:40:62:fe:d1:5f:ed:e1:bc:17:de:
         0a:10:2b:f3:34:f2:db:e6:5d:57:fc:a1:e6:8a:24:f0:df:e6:
         f6:88:48:d9:14:cd:36:63:68:c4:0e:21:d5:7a:83:f1:05:cf:
         8d:fe:09:b3:19:70:26:6a:0a:94:d4:b2:74:74:2f:c1:d8:7a:
         9f:45:15:d5:fd:40:7d:09:9c:ff:3f:c6:86:f5:32:c2:f4:9a:
         f0:bf:e3:8b:c0:db:c0:ab:2a:4d:c3:63:f5:8f:47:08:b4:42:
         64:09:02:ba:c1:b2:8f:29:1a:8c:90:37:b3:b0:2c:95:cf:45:
         2d:4d:55:6e:5c:71:73:31:a8:71:4a:cc:78:f6:d7:5d:91:11:
         24:80:90:da:ce:2f:ea:b3:3b:21:86:38:79:9f:ee:df:5f:01:
         17:73:28:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:54 2024 by rpki-client on console-ams.rpki-client.org