Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/b2408d851429114a3e5795ed9cd5f3d56039bb44.roa
File:                     b2408d851429114a3e5795ed9cd5f3d56039bb44.roa (raw, json)
Hash identifier:          jc3EXbuxK8X/ONuElJ7bUrAQS5dIn1xsym5vcJr8jsw=
Subject key identifier:   77:28:7E:B7:02:D1:28:2A:C9:7D:3E:F9:98:02:4D:29:78:4B:76:F5
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       2A1521
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/b2408d851429114a3e5795ed9cd5f3d56039bb44.roa
Signing time:             Thu 30 Nov 2023 15:39:38 +0000
ROA not before:           Thu 30 Nov 2023 15:39:38 +0000
ROA not after:            Sun 30 Nov 2025 15:39:38 +0000
asID:                     14080
IP address blocks:        190.143.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2757921 (0x2a1521)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Nov 30 15:39:38 2023 GMT
            Not After : Nov 30 15:39:38 2025 GMT
        Subject: CN=b2408d851429114a3e5795ed9cd5f3d56039bb44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:99:d2:1d:08:54:4d:3a:0b:dc:ed:67:2b:ba:
                    86:9e:4e:66:8e:0d:0c:e4:fc:b7:df:34:fb:2d:46:
                    0d:b5:80:1f:a0:e2:0e:f0:80:7c:37:c6:74:70:5f:
                    97:2c:2a:a5:22:92:29:ef:a9:59:39:69:11:e7:f4:
                    f5:cc:22:f7:6d:3e:56:68:f8:58:bd:49:fd:5c:43:
                    c8:6a:16:ae:d0:0f:5b:1c:78:41:01:a9:2f:2a:d8:
                    1d:45:57:80:57:09:ad:b9:7d:8b:2b:f7:97:cd:47:
                    14:ea:5a:d4:2c:89:ef:0f:3f:71:9d:01:26:91:15:
                    04:c5:d1:c3:ef:48:ab:2b:e8:14:a0:d4:33:18:04:
                    d8:99:e2:25:97:de:32:a5:44:6d:87:94:a6:ff:d5:
                    38:f8:71:00:2e:f8:35:b2:8f:f6:e7:83:a2:52:db:
                    76:4e:20:ee:95:7f:74:79:42:da:c8:5b:fc:76:74:
                    bd:5c:01:c3:e0:63:b1:02:58:ac:54:fd:89:65:be:
                    db:ea:93:09:ba:97:bb:1a:2c:2e:97:fa:51:93:ca:
                    6b:06:a3:18:f1:44:02:9d:14:8e:0d:35:85:30:e2:
                    53:5a:3d:08:a9:14:3a:35:f8:59:a2:ba:49:6e:d7:
                    7c:a6:89:33:7b:80:fe:a0:ce:33:21:59:52:44:05:
                    a5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:28:7E:B7:02:D1:28:2A:C9:7D:3E:F9:98:02:4D:29:78:4B:76:F5
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/b2408d851429114a3e5795ed9cd5f3d56039bb44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.143.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:dc:aa:e0:33:7b:d7:76:6a:96:f0:df:cd:ec:55:86:4f:eb:
         86:97:8b:de:8e:1b:34:e5:38:c9:77:ea:c4:99:95:b1:c8:f5:
         27:fd:50:4c:e1:01:d6:ce:1a:0d:ec:5d:ee:88:82:e4:d0:c6:
         af:4e:07:e1:48:3a:fd:44:0f:7d:b5:9f:80:5b:81:c5:1a:30:
         2b:13:19:7a:de:70:91:aa:7d:b0:af:be:75:7b:61:c1:52:a9:
         5e:2c:fe:9d:2b:da:cd:db:83:e9:75:8c:92:67:c4:f1:8a:77:
         d7:8f:62:24:bf:18:ac:c2:90:55:4d:3b:ca:ac:6f:bb:8d:4d:
         31:f3:75:c4:d3:0b:b3:92:23:e8:f8:b6:99:5f:41:3d:fe:cc:
         0a:8d:ec:d7:63:e6:d9:85:20:5d:09:56:45:8b:e2:15:48:d3:
         9a:ad:24:13:75:76:ee:46:bc:eb:ea:f8:0c:e1:9b:0d:4c:63:
         03:be:cf:31:01:49:d6:32:d8:55:8d:18:bd:8b:d1:f8:0b:97:
         11:67:f8:49:b3:7e:04:cf:cb:bc:69:76:0c:79:82:5e:bd:91:
         45:c7:af:2c:4b:cc:4f:1d:a5:b2:99:b4:f4:a0:a1:c2:a5:a1:
         cc:eb:6e:72:63:7d:68:90:a5:2d:68:81:bc:f7:0a:42:ce:0a:
         09:a8:dd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 17 19:24:31 2024 by rpki-client on console-ams.rpki-client.org