Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/b10ee609095344313956908db34dfd9a86326401.roa
File:                     b10ee609095344313956908db34dfd9a86326401.roa (raw, json)
Hash identifier:          c5HTx/HXPmOfobgnIt+vEVgkIUiSoPAN4508iDRe0TA=
Subject key identifier:   5D:B1:AD:B4:A5:9C:D7:97:9C:E1:DD:AE:5A:3E:D1:CC:15:84:10:FA
Certificate issuer:       /CN=1866c45b21787e12af4deafc085303e786f50b2f
Certificate serial:       2E1881
Authority key identifier: C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/b10ee609095344313956908db34dfd9a86326401.roa
Signing time:             Sun 17 Mar 2024 18:46:30 +0000
ROA not before:           Sun 17 Mar 2024 18:42:19 +0000
ROA not after:            Sat 17 Mar 2029 18:42:19 +0000
asID:                     14080
IP address blocks:        190.143.32.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3020929 (0x2e1881)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1866c45b21787e12af4deafc085303e786f50b2f
        Validity
            Not Before: Mar 17 18:42:19 2024 GMT
            Not After : Mar 17 18:42:19 2029 GMT
        Subject: CN=b10ee609095344313956908db34dfd9a86326401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:68:76:f6:91:4f:87:9a:e8:02:2e:d4:b3:74:
                    2a:05:2f:8a:0b:00:09:d4:d6:4c:e5:dc:24:2c:02:
                    a1:83:78:5a:75:4d:03:a7:6f:94:44:7e:4e:e7:21:
                    6c:a6:46:20:92:0e:5b:d3:03:87:b4:d3:41:8e:3b:
                    e6:ec:e0:54:5e:b6:43:aa:ef:0f:89:df:53:ee:65:
                    bf:52:cc:03:42:47:69:0e:43:d6:bf:66:74:b2:a9:
                    20:73:bd:be:a2:65:ca:4e:a1:ad:f0:e7:22:0d:5d:
                    30:0b:a2:2d:85:5b:a2:7c:ed:d1:c4:91:a0:2a:33:
                    38:6a:35:88:ac:ff:a1:3d:7a:0d:e0:b5:53:1d:04:
                    91:f2:45:e6:af:ef:26:75:58:ab:bf:bb:a9:3b:c8:
                    8d:64:66:5c:ae:11:a0:2b:bb:95:41:58:4d:46:a6:
                    b5:2b:43:f7:f8:6a:ea:c6:80:06:c0:f6:10:16:2c:
                    ce:21:8f:ef:82:5a:bd:7b:f1:0c:9e:39:85:70:5e:
                    98:ab:bb:03:c0:77:2d:c3:be:e1:ca:56:ef:10:88:
                    3f:58:31:da:24:1c:f5:75:f3:6c:c0:4f:09:0f:ed:
                    7e:27:8e:4b:2b:47:3a:af:2f:81:04:74:34:19:ec:
                    dc:f1:8a:1a:82:69:08:e1:58:bf:2d:35:36:a6:81:
                    8d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B1:AD:B4:A5:9C:D7:97:9C:E1:DD:AE:5A:3E:D1:CC:15:84:10:FA
            X509v3 Authority Key Identifier:
                keyid:C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/b10ee609095344313956908db34dfd9a86326401.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/1866c45b21787e12af4deafc085303e786f50b2f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.143.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:4b:07:8c:da:23:ac:98:6d:bb:4b:a0:b2:17:33:b0:23:52:
         39:a0:1f:09:9c:a0:fd:40:95:d6:f5:f1:62:d2:1d:a4:8d:48:
         9b:98:8c:fd:33:de:02:85:b7:5f:44:f2:af:32:a7:f8:cc:77:
         b4:06:af:39:dc:21:84:2d:92:45:88:61:1f:0a:4c:af:4e:3b:
         80:1e:71:6c:c0:e5:d3:24:19:4e:de:ed:08:13:2b:b8:53:89:
         fe:d1:2d:dd:e6:f4:d5:d7:50:7a:90:71:a3:f9:25:f4:d0:f5:
         c2:7c:f5:d0:c5:e9:b4:f5:ef:2c:dd:77:48:b3:32:da:65:1c:
         c9:8c:1f:8d:85:ef:44:06:bb:e1:61:3d:17:64:19:33:95:75:
         24:8f:82:c6:d6:4f:2c:8a:63:64:5c:75:e7:57:89:84:b1:c7:
         dd:13:90:49:55:dc:79:36:44:a4:00:f0:a6:36:a0:0b:b9:aa:
         d3:d0:61:f3:8c:ee:73:9a:a1:02:d1:d8:9a:73:94:f2:7e:f1:
         3e:32:6f:60:4d:7a:3f:4b:e3:26:f5:04:36:ff:6c:f1:f1:72:
         0b:4a:65:90:27:7a:ef:ed:5e:a2:71:ce:58:83:fe:f9:7f:b2:
         7d:0a:46:66:41:26:06:98:c2:79:d3:51:89:9e:eb:51:bf:a3:
         84:92:ae:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:00 2024 by rpki-client on console-fra.rpki-client.org