Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/9156f0ccfea5173af8cb6ce4b51fdb025a9373ee.roa
File:                     9156f0ccfea5173af8cb6ce4b51fdb025a9373ee.roa (raw, json)
Hash identifier:          BsuFgpuQXNfnJ+XejeqGIQ3pKCHEek+XKJkFBKFOAko=
Subject key identifier:   ED:7D:38:91:F3:53:25:8E:18:2D:70:FE:20:66:4E:B2:81:AF:22:46
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       278168
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/9156f0ccfea5173af8cb6ce4b51fdb025a9373ee.roa
Signing time:             Fri 25 Aug 2023 08:30:06 +0000
ROA not before:           Thu 24 Aug 2023 08:30:06 +0000
ROA not after:            Sat 23 Aug 2025 08:30:06 +0000
asID:                     14080
IP address blocks:        186.147.0.0/16 maxlen: 24
                          186.80.0.0/16 maxlen: 24
                          186.81.0.0/16 maxlen: 24
                          186.82.0.0/16 maxlen: 24
                          186.83.0.0/16 maxlen: 24
                          181.49.76.0/22 maxlen: 24
                          190.145.228.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2589032 (0x278168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Aug 24 08:30:06 2023 GMT
            Not After : Aug 23 08:30:06 2025 GMT
        Subject: CN=9156f0ccfea5173af8cb6ce4b51fdb025a9373ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:78:e9:fd:9a:f7:84:62:05:12:e9:16:73:49:
                    b8:e2:7e:dc:3f:f1:d4:03:42:e7:50:31:12:ec:a7:
                    a9:6b:3e:69:ed:c3:57:f6:7b:02:3c:07:0f:64:22:
                    8e:70:03:1a:5c:9a:6e:64:4b:61:ec:d0:c6:8c:59:
                    f1:ff:1a:49:03:bf:63:2d:1c:db:b1:88:30:77:54:
                    23:87:60:75:3f:71:db:bf:b0:b7:9a:e6:ef:b2:6e:
                    c3:e3:8e:25:7f:60:a4:fd:48:57:da:fc:bf:9f:fc:
                    5f:4c:ca:f8:a5:a5:20:1d:37:b1:f6:05:aa:79:22:
                    ec:03:9f:68:fb:d2:ad:8e:0b:de:23:65:5b:38:f1:
                    c2:b7:03:76:a9:cd:f8:19:52:95:14:da:fd:44:36:
                    a6:35:11:11:99:df:25:30:ba:90:43:7a:2e:26:08:
                    56:5b:b3:44:bb:1f:e4:4b:d2:55:dd:be:b1:49:b4:
                    85:e8:56:dc:71:fb:0f:04:dd:5e:e2:2d:56:4d:22:
                    8d:b1:b6:14:7e:d3:ed:84:cf:ae:f2:08:32:6f:c8:
                    91:99:18:1c:4b:ec:f0:9a:42:c0:df:97:03:a6:0c:
                    33:d7:a0:05:17:5d:d9:46:15:78:98:7d:d2:be:f5:
                    4c:15:92:a7:d6:da:5d:50:63:83:73:ea:23:03:6c:
                    2e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:7D:38:91:F3:53:25:8E:18:2D:70:FE:20:66:4E:B2:81:AF:22:46
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/9156f0ccfea5173af8cb6ce4b51fdb025a9373ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.49.76.0/22
                  186.80.0.0/14
                  186.147.0.0/16
                  190.145.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:c0:f0:1b:c4:21:1d:fe:f7:fd:c3:f9:79:58:d0:f0:37:a1:
         f4:be:57:e4:49:50:09:67:91:ad:8b:69:8f:6d:b6:e5:76:72:
         c6:68:c3:0a:85:79:a2:9c:16:c6:4c:68:47:b5:4b:9c:d8:ae:
         4e:76:40:92:79:e5:2f:58:80:4a:13:02:12:d6:18:82:fc:82:
         6c:68:db:77:2f:85:11:f0:7c:3f:d2:6e:13:44:7f:58:a1:4b:
         04:94:53:25:b8:0f:a7:c1:41:7f:1b:96:9d:49:ea:52:4e:4d:
         c2:f7:3a:51:68:51:39:dc:35:ad:17:72:45:16:d9:60:9a:02:
         5a:7c:5f:ff:36:b9:c4:3e:b2:5b:9a:3a:4e:c2:5c:13:92:7e:
         cc:5e:f2:5e:6c:b9:2b:31:bc:fb:01:fd:48:bd:ff:d8:59:98:
         07:85:27:fe:2e:c5:bb:15:d5:7f:e8:e3:1c:18:8c:8b:03:ac:
         d1:52:23:da:c0:69:e2:bc:a5:9b:d5:ce:f7:88:fa:e1:c9:35:
         09:54:e9:e3:62:48:ea:72:b1:15:30:f3:d8:21:2e:b1:7a:ed:
         0a:d7:0e:d0:a7:f3:2d:1c:27:05:c2:73:b2:7c:8b:45:cd:07:
         77:93:51:fa:08:6c:07:37:09:cc:a6:54:b3:15:6a:3d:22:a3:
         b5:e8:b0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:54 2024 by rpki-client on console-ams.rpki-client.org