Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/cf96daba815e7e63c21e00c629100449ef5d56e6.roa
File:                     cf96daba815e7e63c21e00c629100449ef5d56e6.roa (raw, json)
Hash identifier:          aIZbfDNFYgvGJZwm8twPrHxOAFCMwYSW8HvhZJXJYBM=
Subject key identifier:   11:24:61:C9:01:57:6D:D2:20:79:8F:C3:C6:0D:BF:5E:5F:2F:5E:9F
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       24F43E
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/cf96daba815e7e63c21e00c629100449ef5d56e6.roa
Signing time:             Fri 12 May 2023 17:54:17 +0000
ROA not before:           Thu 11 May 2023 17:54:17 +0000
ROA not after:            Mon 12 May 2025 17:54:17 +0000
asID:                     14080
IP address blocks:        190.84.224.0/23 maxlen: 23
                          190.84.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2421822 (0x24f43e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: May 11 17:54:17 2023 GMT
            Not After : May 12 17:54:17 2025 GMT
        Subject: CN=cf96daba815e7e63c21e00c629100449ef5d56e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:00:3f:87:f5:db:b8:22:20:e7:d0:e0:1c:bc:
                    b3:52:93:fb:33:12:70:ed:64:10:3d:37:c9:62:b5:
                    de:57:aa:36:7d:c8:ee:bd:4e:7d:7e:6d:24:70:7a:
                    ad:d1:9e:e9:1f:4f:8b:d0:6c:c3:75:e3:75:3f:8f:
                    27:c2:2b:f6:8c:15:f0:84:5c:56:64:e4:a2:4f:ef:
                    22:3a:92:bf:db:27:b7:e0:d9:6f:d1:f0:41:7b:3a:
                    99:25:03:9a:7b:4e:52:7a:8b:21:0f:46:8e:e6:52:
                    75:08:f3:27:b6:dc:85:9a:23:c4:2a:89:81:b5:0d:
                    ca:63:5f:04:e5:18:c7:d4:4f:b0:7d:d8:59:e8:73:
                    95:a2:e9:d4:06:10:23:81:c1:84:18:5c:78:1f:1c:
                    63:17:4e:9b:35:d8:b3:ab:66:af:6c:a1:bb:fa:73:
                    e0:9b:71:75:65:a1:93:b0:41:ea:bc:e1:79:e6:88:
                    19:af:e1:bd:cb:27:0b:84:20:1c:d7:1b:ef:c2:40:
                    a9:13:2c:6b:43:55:cb:4e:ad:c6:05:6d:5d:4a:e4:
                    c5:e3:dc:e4:01:12:c0:e1:b5:3b:28:7b:79:fb:c7:
                    39:f7:11:b7:ba:cb:7a:26:0a:84:d1:d2:75:00:fe:
                    cd:d5:6d:d1:8e:fa:b7:78:a3:38:3e:09:17:57:d4:
                    3c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:24:61:C9:01:57:6D:D2:20:79:8F:C3:C6:0D:BF:5E:5F:2F:5E:9F
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/cf96daba815e7e63c21e00c629100449ef5d56e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.84.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         20:12:fb:ea:cd:3f:0a:19:e9:c2:34:1d:9d:d2:b0:cd:43:1a:
         2a:1f:b7:55:b9:cf:04:d5:92:c9:c9:5e:6b:41:4a:d0:c6:53:
         4c:8c:4a:7d:ac:e4:a3:b1:b6:9a:58:c0:73:bf:3e:b7:75:e0:
         82:78:75:9d:f6:15:44:27:c2:57:15:c8:fb:a5:5b:d5:38:be:
         ef:f8:60:83:57:e1:81:fd:39:00:db:3d:e9:ca:4e:ac:38:e0:
         65:68:0e:a3:16:b8:37:ff:87:c3:4b:72:af:f4:92:05:06:5a:
         09:75:b1:0f:73:6e:1b:cb:04:44:af:e9:bd:44:73:61:5e:36:
         a3:48:77:4a:09:8f:81:25:d5:58:43:32:7e:06:c5:34:e6:cc:
         04:a1:01:12:6e:0c:33:0c:92:25:cf:90:19:f4:5b:c1:0d:88:
         2b:79:39:36:b4:b3:48:87:ea:06:90:56:ae:ad:71:a4:a5:13:
         bc:e5:81:79:f8:f1:cb:0a:bb:17:99:91:56:bc:9f:db:e9:7c:
         c9:3d:12:03:24:81:0c:e2:30:26:ac:43:09:9e:8e:3c:f9:4e:
         7a:0c:06:32:17:bc:48:c9:45:57:df:c8:1c:eb:9c:67:bb:25:
         dd:29:16:7d:81:db:18:eb:57:d1:33:b4:58:5c:c9:fe:15:74:
         f9:26:03:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 17 19:24:31 2024 by rpki-client on console-ams.rpki-client.org