Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/92155befb6151abfcd4b2977866f95654682aa31.roa
File:                     92155befb6151abfcd4b2977866f95654682aa31.roa (raw, json)
Hash identifier:          7EQTwf5ZIQRXHDMhjKm1MftFbBzB+XMt10hPL8YxSSk=
Subject key identifier:   1C:F9:1F:C6:B1:8D:07:3F:BD:7F:05:DD:BA:2C:B3:8D:08:3D:13:6D
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       24FB8C
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/92155befb6151abfcd4b2977866f95654682aa31.roa
Signing time:             Fri 12 May 2023 19:27:45 +0000
ROA not before:           Thu 11 May 2023 19:27:40 +0000
ROA not after:            Mon 12 May 2025 19:27:40 +0000
asID:                     10620
IP address blocks:        190.144.0.0/14 maxlen: 24
                          186.84.0.0/14 maxlen: 24
                          186.80.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2423692 (0x24fb8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: May 11 19:27:40 2023 GMT
            Not After : May 12 19:27:40 2025 GMT
        Subject: CN=92155befb6151abfcd4b2977866f95654682aa31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4a:e4:7e:d4:74:45:e7:8a:21:c0:fd:cb:09:
                    79:6e:01:29:82:26:7a:01:e8:a3:7f:61:e2:91:bd:
                    e0:28:b8:3f:8e:2c:34:98:5f:60:8d:13:9c:82:26:
                    bc:df:fb:4d:10:f7:19:96:78:c1:15:47:e7:4f:a1:
                    af:67:76:91:62:a8:b1:42:9e:3b:5d:62:d8:68:90:
                    51:47:38:22:a1:c9:ab:8f:6d:78:48:44:f9:6c:7f:
                    e2:29:b2:bc:b0:45:c4:5b:0b:2d:70:a9:2c:85:33:
                    a6:1f:a3:2b:b3:d8:1f:0a:59:c1:a0:db:ea:b8:58:
                    46:5e:d5:1f:b6:a7:ef:af:c8:ac:93:f6:72:a5:1c:
                    f2:27:f9:47:f2:51:ab:9e:1f:26:8c:05:d1:87:dc:
                    0a:2d:7b:c2:f6:cd:6d:a3:c7:b5:0a:b9:5f:8f:b9:
                    02:76:87:d4:d8:9f:03:03:db:dc:c1:99:1c:0c:67:
                    a0:d0:f2:c6:db:44:08:db:b3:fe:b6:d8:7d:00:4c:
                    bc:7e:93:9d:50:86:29:8a:a4:13:d2:c4:23:c5:23:
                    51:95:b4:65:a7:09:f0:b7:1b:5a:0f:03:bf:a1:94:
                    97:45:5d:b0:4b:60:e6:d5:f2:34:ca:9e:74:b6:9f:
                    39:1d:4d:3a:53:15:83:17:08:d8:c8:46:2a:6b:f7:
                    27:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F9:1F:C6:B1:8D:07:3F:BD:7F:05:DD:BA:2C:B3:8D:08:3D:13:6D
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/92155befb6151abfcd4b2977866f95654682aa31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.80.0.0/13
                  190.144.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         30:9e:fd:c0:f5:fd:95:33:e0:ee:19:14:72:2e:a2:5b:cb:a2:
         0a:a6:09:cb:9a:75:9b:a4:5c:dc:48:13:86:44:f7:ea:83:7e:
         cc:fb:8b:cb:13:05:a6:93:64:75:81:b3:bb:2c:9c:40:a4:0e:
         3f:c7:c0:a8:04:48:cb:17:89:29:ea:9b:d2:de:08:f4:f1:24:
         8e:fa:84:05:02:a3:ea:60:a5:d4:06:d4:0c:b2:e2:51:80:af:
         3e:c2:b8:a8:fb:7e:2a:78:0e:12:d6:0a:95:03:7b:99:f9:97:
         22:78:99:74:3a:57:db:d4:4d:14:fc:76:b5:70:19:22:a5:eb:
         42:f8:c5:2a:8d:9d:3f:19:62:9e:55:bd:9b:74:ec:98:71:c3:
         2a:09:f2:3e:f6:3f:b0:77:5a:e1:51:25:3d:f5:76:bc:b3:49:
         49:df:58:98:4f:90:40:b9:57:bb:f0:3b:61:4a:fb:be:ef:a9:
         98:62:b1:1c:9a:69:e5:b1:3e:fe:29:48:47:d9:72:46:9f:31:
         af:2c:e7:f1:5a:30:27:3c:aa:a0:3e:ed:19:65:c9:05:05:e5:
         39:78:f5:cb:7a:70:99:8c:ab:da:03:ab:2f:30:ea:a6:f4:03:
         b5:e6:06:56:ee:87:41:b5:5c:64:1e:4c:68:9c:95:76:3a:a9:
         5f:e7:1f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 17 19:15:18 2024 by rpki-client on console-fra.rpki-client.org