Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c74974e3d0e4e77f81e8648fe3b61174692adbb6.roa
File:                     c74974e3d0e4e77f81e8648fe3b61174692adbb6.roa (raw, json)
Hash identifier:          GQEMmY9Sn5NtJTg2N0HOiet+wZh+qK3Bpler74oKDhQ=
Subject key identifier:   50:3E:65:76:71:CA:D2:4E:02:08:9C:0D:56:B8:3F:BA:9E:A8:BF:E8
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       24F8BE
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c74974e3d0e4e77f81e8648fe3b61174692adbb6.roa
Signing time:             Fri 12 May 2023 19:27:40 +0000
ROA not before:           Thu 11 May 2023 19:27:40 +0000
ROA not after:            Mon 12 May 2025 19:27:40 +0000
asID:                     14080
IP address blocks:        190.144.0.0/14 maxlen: 24
                          186.84.0.0/14 maxlen: 24
                          186.80.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2422974 (0x24f8be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: May 11 19:27:40 2023 GMT
            Not After : May 12 19:27:40 2025 GMT
        Subject: CN=c74974e3d0e4e77f81e8648fe3b61174692adbb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f1:c5:4e:58:eb:c0:82:b3:67:a0:b5:ea:26:
                    da:2c:61:53:70:7d:c9:1e:fe:e0:ee:37:62:fc:9c:
                    31:52:24:13:55:c0:9a:87:ba:be:ba:3b:d4:4a:7b:
                    8e:da:6b:59:ae:73:fd:49:ef:66:51:fb:96:7d:2b:
                    1c:dd:0b:c1:5c:95:14:88:10:34:ec:4b:2c:18:5a:
                    6d:f4:18:99:02:2c:a0:b6:5d:1f:e0:06:aa:50:6b:
                    f6:e7:fa:da:34:b8:47:38:a8:23:a9:14:81:90:72:
                    8a:3c:b8:ba:06:6d:f3:da:f4:d1:c4:bf:64:81:e3:
                    86:90:20:9b:6c:80:0f:c9:c5:e9:b3:03:2a:5e:7e:
                    ff:9c:b4:7c:31:22:62:bf:a3:9f:5c:9a:71:80:d2:
                    ec:79:2e:08:66:26:6e:1b:d6:c4:51:6e:2d:7e:4c:
                    e8:06:c5:26:73:9f:11:c0:be:af:46:47:ba:90:06:
                    71:64:d7:3b:91:17:09:0a:bd:1a:7b:89:51:ca:dc:
                    c6:22:cc:55:a5:a4:7e:95:b7:91:76:32:16:c6:9c:
                    3a:14:f6:09:41:38:1a:ee:50:61:11:47:10:d1:f0:
                    25:5f:eb:25:b1:43:12:20:94:e8:6b:85:b3:55:ee:
                    95:b3:e9:47:e0:5c:b5:dd:4c:3e:d0:a9:ac:de:4f:
                    f0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:3E:65:76:71:CA:D2:4E:02:08:9C:0D:56:B8:3F:BA:9E:A8:BF:E8
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c74974e3d0e4e77f81e8648fe3b61174692adbb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.80.0.0/13
                  190.144.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         39:30:b8:7a:cd:57:87:95:1b:35:e0:c0:3c:c4:42:eb:cb:60:
         d6:26:b8:4b:1e:c3:96:05:b3:83:92:63:98:b5:69:11:4f:d6:
         6f:5f:12:87:71:47:c9:3f:7b:ac:bf:ea:4c:a1:13:fc:df:56:
         ae:7f:cf:63:31:0d:d4:d5:ee:2e:19:cf:91:eb:cf:25:4e:eb:
         bb:ad:ea:52:12:17:3e:ab:1f:0a:a8:e7:e6:8b:ce:d7:a9:51:
         57:e4:29:20:a3:58:5b:af:0d:ce:e6:1d:dc:44:aa:eb:41:6f:
         8a:72:15:24:6e:ba:1b:0e:fd:db:46:30:04:07:ef:a3:c5:87:
         c5:6c:9f:be:a8:fb:f0:cc:bd:15:56:d3:1e:b3:e7:5e:ad:ec:
         e4:80:1c:a2:1a:e6:c6:9a:43:db:5a:b0:71:e1:e6:81:32:f9:
         07:77:bb:c7:25:a4:cb:55:e3:5a:55:97:2c:b8:2f:76:91:b5:
         f0:b5:3b:63:4b:fa:1e:c9:a3:d9:d8:44:5f:24:3b:5f:f1:95:
         32:d2:fa:8a:b1:d4:19:f2:45:16:31:8a:a2:58:7b:d9:73:23:
         28:77:9a:2a:12:91:d0:1d:29:0c:ed:0d:5d:e1:8f:57:32:97:
         f5:dc:1a:40:e9:7b:c9:76:bb:35:08:84:7d:74:8f:83:84:1c:
         a1:4b:f6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:17 2024 by rpki-client on console-fra.rpki-client.org