Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/acd4e0bf2284c7572a242acbc3e5950e02d049fc.roa
File:                     acd4e0bf2284c7572a242acbc3e5950e02d049fc.roa (raw, json)
Hash identifier:          nrR2apARWstMVWMM0S5wcexI5W5+2kaBoBQDi1Bbsn0=
Subject key identifier:   63:30:C9:C0:68:8F:5D:91:8C:C3:33:C9:85:5E:8E:C3:8E:84:73:32
Certificate issuer:       /CN=1866c45b21787e12af4deafc085303e786f50b2f
Certificate serial:       2DEDFC
Authority key identifier: C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/acd4e0bf2284c7572a242acbc3e5950e02d049fc.roa
Signing time:             Sun 17 Mar 2024 18:45:26 +0000
ROA not before:           Sun 17 Mar 2024 18:42:19 +0000
ROA not after:            Sat 17 Mar 2029 18:42:19 +0000
asID:                     14080
IP address blocks:        190.156.7.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3010044 (0x2dedfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1866c45b21787e12af4deafc085303e786f50b2f
        Validity
            Not Before: Mar 17 18:42:19 2024 GMT
            Not After : Mar 17 18:42:19 2029 GMT
        Subject: CN=acd4e0bf2284c7572a242acbc3e5950e02d049fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:90:05:4c:6a:62:4d:b7:4d:6c:e6:f8:c3:a2:
                    5b:53:94:ef:d2:65:10:da:f3:12:25:3e:cc:94:84:
                    f2:e7:e0:e5:23:93:1f:53:b0:cd:35:b9:79:f6:01:
                    5b:bc:da:09:84:52:56:02:6a:5c:c3:d3:36:1a:71:
                    d5:46:fb:3b:11:4d:8b:ae:18:8f:44:d9:d2:e3:d3:
                    a8:77:5b:68:ef:fb:cd:e9:00:ca:ef:ef:3d:65:63:
                    4a:92:04:ec:b1:40:ff:2f:a6:34:34:0f:f4:fb:60:
                    2e:38:b8:0c:e7:eb:47:a3:0e:ea:23:f2:4f:0c:0a:
                    0a:e9:bf:4c:79:4d:41:ac:17:49:65:91:68:12:24:
                    5f:3c:5c:47:8b:fc:2b:ff:c4:41:90:c1:9b:76:6d:
                    6c:1a:2a:a3:63:81:5c:0d:65:7c:22:15:97:12:14:
                    7f:3c:28:66:ab:0c:fb:02:76:f8:4f:25:a6:22:3f:
                    46:be:40:8a:8a:6d:1f:17:29:3b:ca:39:6c:f1:ad:
                    06:b2:f3:40:03:f5:79:31:ce:2a:17:02:96:06:ac:
                    40:21:31:1f:2b:10:2b:3c:de:3e:ac:86:ca:93:69:
                    d6:87:28:0b:e6:11:8a:8f:52:4c:63:d1:15:30:5a:
                    c3:c5:97:cd:4e:6f:34:e7:33:b4:23:54:1b:8e:68:
                    f6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:30:C9:C0:68:8F:5D:91:8C:C3:33:C9:85:5E:8E:C3:8E:84:73:32
            X509v3 Authority Key Identifier:
                keyid:C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/acd4e0bf2284c7572a242acbc3e5950e02d049fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/1866c45b21787e12af4deafc085303e786f50b2f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.156.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:39:e8:b3:8a:12:0f:43:8c:46:16:64:28:1f:9c:a6:05:00:
         71:c7:ff:df:6b:b9:01:59:30:61:41:3f:32:cf:4d:67:ab:26:
         79:90:7a:c5:a4:ab:2d:ff:f0:26:e8:11:fd:0d:f6:28:af:53:
         9d:91:37:cc:14:a9:a9:1e:01:3b:a9:e4:d0:b9:ac:45:d3:8f:
         b2:35:51:b9:ed:ba:01:80:3c:9e:e8:40:1a:2a:6b:15:e6:33:
         b4:ad:f1:0e:b8:ae:9b:82:49:da:b8:6c:c1:53:eb:de:2d:23:
         9f:f1:25:56:a9:fb:b7:d4:3e:9f:01:19:6d:22:c3:c7:cd:ba:
         f2:2a:32:08:1d:53:09:d4:d7:a7:69:fb:c8:e8:ff:eb:e8:46:
         5c:db:ef:ee:11:7e:67:e9:44:63:cb:84:a8:3a:b8:51:c5:fa:
         04:d5:b6:ac:13:5f:ea:0f:47:fe:6d:0e:39:46:70:5a:06:b0:
         45:27:15:bf:b1:62:e7:45:89:34:a3:6e:8d:a1:eb:7c:9f:79:
         75:b9:25:a0:0b:1e:ad:60:cf:92:92:ae:d0:b6:a1:2c:5e:9f:
         4d:6f:ea:c0:47:67:de:e1:cf:12:5e:72:d6:d0:07:59:dc:67:
         a6:e5:30:cb:aa:1d:9b:01:9b:bc:38:63:52:31:75:4f:15:dc:
         e4:09:8c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:17 2024 by rpki-client on console-fra.rpki-client.org