Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/d66e22ccf443ad03562e5047c9e6cd59f54c1f40.roa
File:                     d66e22ccf443ad03562e5047c9e6cd59f54c1f40.roa (raw, json)
Hash identifier:          Y1MyxvNwyrJJ246n3g4R22psTi7Efu42Xo6kC9m6uQM=
Subject key identifier:   DE:7C:C6:BD:BC:2E:35:9A:3B:3C:71:56:49:0B:27:02:B5:7C:FE:D1
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       172388
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/d66e22ccf443ad03562e5047c9e6cd59f54c1f40.roa
Signing time:             Mon 10 Jan 2022 23:46:39 +0000
ROA not before:           Mon 12 Apr 2021 03:00:00 +0000
ROA not after:            Wed 12 Apr 2023 03:00:00 +0000
asID:                     14080
IP address blocks:        200.118.190.0/24 maxlen: 24
                          190.85.224.0/20 maxlen: 20
                          190.85.192.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1516424 (0x172388)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Apr 12 03:00:00 2021 GMT
            Not After : Apr 12 03:00:00 2023 GMT
        Subject: CN=d66e22ccf443ad03562e5047c9e6cd59f54c1f40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:13:28:77:d8:d1:37:0e:96:ce:e8:6f:f2:dd:
                    f9:f0:c7:96:5c:cd:8d:88:28:a5:f7:41:c3:db:44:
                    83:84:c1:ec:19:47:4b:cd:9a:75:39:4b:3c:ac:67:
                    6c:c0:36:1a:eb:6e:07:48:e7:49:ce:db:14:0f:39:
                    9f:23:9e:f6:4a:fd:0d:75:0e:5d:32:21:d3:74:d5:
                    93:c4:4c:b2:1d:72:93:01:54:37:82:1b:25:00:f9:
                    3f:d4:59:6a:59:bd:f6:ca:09:a6:2e:1c:00:52:e5:
                    b3:d6:34:57:1c:b1:7f:da:88:70:ba:c6:de:1f:64:
                    7d:b5:0c:1f:0f:34:a2:43:07:9c:f1:8b:b9:20:8a:
                    51:f1:af:51:cb:86:53:2a:b1:e8:f5:d1:d2:b9:04:
                    48:75:ce:99:02:e3:b5:99:84:79:86:a7:25:2e:42:
                    94:4f:20:43:72:ff:b2:f6:29:d7:18:0d:8a:9e:a9:
                    9c:77:c7:c3:c8:78:b4:bf:df:42:3a:92:f7:eb:f2:
                    62:c0:3d:88:22:f2:71:3a:eb:36:c3:5e:0d:bd:09:
                    0d:98:b5:91:8a:6f:ae:b5:41:11:23:f6:e6:7e:a5:
                    38:75:11:50:e2:94:d7:00:4e:43:01:a8:32:94:01:
                    8b:16:f5:e4:49:d6:ec:dd:8c:de:65:15:ec:48:22:
                    d9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:7C:C6:BD:BC:2E:35:9A:3B:3C:71:56:49:0B:27:02:B5:7C:FE:D1
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/d66e22ccf443ad03562e5047c9e6cd59f54c1f40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.85.192.0-190.85.239.255
                  200.118.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:7f:55:89:0c:b7:e3:fa:0d:06:82:4e:df:a4:7f:02:65:73:
         03:5d:9e:40:7f:c7:86:71:e3:e9:27:8c:64:40:7c:51:72:9c:
         26:c6:7e:b5:67:73:15:03:0d:96:b2:49:3f:56:85:f6:06:2a:
         72:b8:c3:0d:58:87:97:ba:b4:da:23:a7:b3:2c:2b:f3:47:a1:
         56:0c:e7:8c:eb:64:c9:39:7e:f4:f7:3e:67:21:dd:cd:13:21:
         d2:74:77:53:f1:01:63:c1:68:3b:55:8f:e7:d4:c6:cd:eb:7e:
         95:78:09:1e:d5:49:f8:9a:ef:3f:93:50:8e:13:b4:09:d4:96:
         85:08:f2:af:09:35:22:cf:80:5a:fb:38:1b:85:a8:d5:da:1a:
         d9:74:b9:15:2a:95:01:16:85:29:bc:f4:93:25:ed:a3:b6:69:
         98:34:24:ff:de:dc:fb:14:fe:98:fb:86:77:32:47:28:2e:d9:
         79:26:d9:81:f2:ff:6b:15:a3:3e:33:37:a6:d0:a5:f1:3a:45:
         18:ec:05:b3:2a:45:f0:d2:02:25:7b:29:60:c7:d5:c1:66:76:
         80:15:d6:a7:95:44:8c:8d:4e:10:87:a8:94:af:e7:0f:06:78:
         ae:43:65:b2:6d:9c:34:da:14:02:c9:f2:55:b4:37:a9:39:ff:
         32:43:a8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:55 2024 by rpki-client on console-ams.rpki-client.org