Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/a81c9e6916ab22d0b9f1f08482f9780fba21764a.roa
File:                     a81c9e6916ab22d0b9f1f08482f9780fba21764a.roa (raw, json)
Hash identifier:          6G2QDzXtv16FSjDoQ37QPUkef3sNfUxQwcQkaNSSIGc=
Subject key identifier:   61:CC:2A:1D:69:CF:3B:CD:35:60:7A:84:2A:FC:7C:34:EE:3F:3A:17
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       20C678
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/a81c9e6916ab22d0b9f1f08482f9780fba21764a.roa
Signing time:             Wed 07 Dec 2022 15:35:56 +0000
ROA not before:           Mon 26 Apr 2021 03:00:00 +0000
ROA not after:            Thu 27 Apr 2023 03:00:00 +0000
asID:                     14080
IP address blocks:        190.144.192.0/19 maxlen: 19
                          181.49.224.0/19 maxlen: 29
                          186.85.72.0/22 maxlen: 24
                          200.118.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2147960 (0x20c678)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Apr 26 03:00:00 2021 GMT
            Not After : Apr 27 03:00:00 2023 GMT
        Subject: CN=a81c9e6916ab22d0b9f1f08482f9780fba21764a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:41:aa:27:83:5b:00:47:f6:db:f4:73:0a:1e:
                    d9:a4:da:7e:0a:05:60:42:9e:71:ea:db:96:53:4a:
                    de:42:16:dc:2c:1a:e7:a9:f3:23:8b:b0:65:67:ea:
                    89:13:e1:e3:77:da:df:5d:23:49:1c:98:ce:a4:f8:
                    57:a9:05:4a:4a:3b:1f:f1:ea:30:20:38:65:e3:aa:
                    5e:37:4e:00:03:53:68:a0:69:8c:d1:33:45:6b:20:
                    bc:24:dd:e3:d1:fa:36:0e:30:52:92:e1:86:35:39:
                    b9:91:03:02:23:40:1c:5f:e5:d8:3d:ad:d0:67:3b:
                    7d:48:28:bc:ff:0c:3e:6f:4f:0f:d5:d3:8f:1f:f4:
                    72:2b:1d:10:b8:68:50:30:02:90:85:a8:92:bd:29:
                    1c:18:d0:11:49:f7:05:ce:55:e1:94:58:ec:71:29:
                    d1:98:a9:04:f7:bd:90:46:9a:8d:25:58:bd:55:c9:
                    6e:17:4d:f7:6a:9c:b0:08:fa:5a:30:64:40:e5:8b:
                    1d:99:56:2c:22:d5:01:17:67:10:6c:d0:19:4d:71:
                    c4:7b:c0:4e:f9:93:68:7e:eb:ec:c2:d8:3c:d8:7a:
                    7b:11:f6:a2:0f:21:9b:46:c0:61:ff:9b:2d:9d:be:
                    22:99:db:a7:8b:33:db:72:8a:c3:0e:d7:34:6a:a0:
                    5e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:CC:2A:1D:69:CF:3B:CD:35:60:7A:84:2A:FC:7C:34:EE:3F:3A:17
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/a81c9e6916ab22d0b9f1f08482f9780fba21764a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.49.224.0/19
                  186.85.72.0/22
                  190.144.192.0/19
                  200.118.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         83:af:af:c8:a3:a4:a1:f6:58:21:9b:67:47:f0:d5:32:08:8b:
         96:8f:72:6f:ad:a0:95:42:a4:d5:86:7b:2a:18:58:4f:56:a0:
         5e:3c:46:ae:cd:d5:4b:c3:de:ea:8d:71:79:90:de:2c:a9:81:
         02:78:5a:e1:37:b1:4f:8a:ed:a4:85:a1:3f:f2:e3:d1:0e:26:
         11:06:4a:c1:4a:42:78:10:4c:07:bd:d9:3d:f0:35:c4:f6:f0:
         b8:29:23:10:a4:08:0c:04:bc:49:39:11:3a:56:b7:bc:2d:74:
         36:33:bb:49:b0:ed:8e:cb:46:82:18:4a:2a:34:90:6d:70:39:
         dc:a0:5e:ef:e0:32:83:57:b7:33:2c:ca:83:d8:3e:b1:4e:df:
         47:6a:ac:d2:c7:04:9e:43:32:a3:ce:c8:9a:31:2c:dd:74:db:
         59:95:d4:f1:13:c6:04:6e:4e:0b:0e:77:4a:1c:00:af:3a:4d:
         1c:4d:ac:a4:e1:7e:a9:48:9f:4c:c4:fd:e7:61:38:ae:79:bc:
         b5:a0:ea:a3:b7:5d:c1:43:d3:fc:4d:22:86:91:83:d6:11:19:
         d7:af:43:88:f5:52:28:0c:b3:30:09:b9:67:ab:31:56:1a:59:
         7e:b5:90:6c:9e:5c:6c:91:03:88:f6:de:1e:e3:5f:db:db:7c:
         45:8f:81:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:54 2024 by rpki-client on console-ams.rpki-client.org