Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/e2ec50d91be1ab3cc64ce1ef1acebe4c3f483b1c.roa
File:                     e2ec50d91be1ab3cc64ce1ef1acebe4c3f483b1c.roa (raw, json)
Hash identifier:          4oKmXtlzyQuT94CV53sbK0hWq4a5VGZMKPRD8Jv+0EQ=
Subject key identifier:   0A:F0:1F:24:1B:B5:25:4E:1A:9B:0B:24:E0:62:F2:B0:1B:D6:25:1F
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       24400E
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/e2ec50d91be1ab3cc64ce1ef1acebe4c3f483b1c.roa
Signing time:             Thu 20 Apr 2023 03:23:30 +0000
ROA not before:           Wed 19 Apr 2023 03:23:30 +0000
ROA not after:            Sun 20 Apr 2025 03:23:30 +0000
asID:                     14080
IP address blocks:        190.158.133.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2375694 (0x24400e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Apr 19 03:23:30 2023 GMT
            Not After : Apr 20 03:23:30 2025 GMT
        Subject: CN=e2ec50d91be1ab3cc64ce1ef1acebe4c3f483b1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:61:69:00:a5:5a:75:71:39:1b:d1:53:a2:4d:
                    40:2e:e2:2d:7e:01:9b:11:e8:fb:47:35:3d:5b:0b:
                    3e:7c:a7:f9:ee:3f:d9:df:86:eb:ba:c7:ad:c9:15:
                    d9:59:b5:bb:91:c1:f9:2c:f9:c9:c4:c5:1d:de:e5:
                    18:9f:a0:e5:9a:97:d5:1e:e1:9c:3a:52:f0:08:05:
                    3e:87:c2:f5:dd:b8:6c:e6:84:42:bf:53:2c:e6:79:
                    e5:49:57:03:ab:29:62:76:f0:b0:b2:cd:be:3e:f4:
                    ce:5b:5d:7d:97:81:59:e3:7a:64:20:11:6b:c8:fa:
                    ae:13:47:03:53:ff:5d:4e:5d:f1:01:0f:96:f0:b4:
                    b9:5a:8a:14:9d:63:8f:72:ea:ed:f7:e4:6a:b0:15:
                    68:1e:ca:51:d4:8d:a1:d9:95:3f:ee:75:83:f3:d5:
                    fc:4e:fa:84:ea:95:da:e6:1e:20:d4:4c:6d:6d:e4:
                    86:cf:de:9b:a9:a1:83:88:53:8c:cf:88:21:eb:58:
                    13:7b:a8:45:44:b1:2f:ee:c1:1d:4d:58:b2:40:1e:
                    8b:44:72:03:e4:39:10:f1:40:fa:68:b9:a4:76:bb:
                    7b:37:12:3a:c4:c9:70:58:5b:eb:93:8e:73:65:45:
                    ca:30:3a:d6:40:de:83:15:3e:45:21:04:bc:3d:f6:
                    e8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F0:1F:24:1B:B5:25:4E:1A:9B:0B:24:E0:62:F2:B0:1B:D6:25:1F
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/e2ec50d91be1ab3cc64ce1ef1acebe4c3f483b1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.158.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:21:da:77:18:e6:15:e3:e1:e0:97:fd:8e:04:6d:b0:32:06:
         58:ef:1f:38:25:3e:59:b6:34:df:5d:1f:8c:74:e7:c8:a6:2d:
         92:b5:07:a1:bb:6c:c0:64:5f:30:c1:bd:93:1e:46:6e:a2:cb:
         ef:16:af:0f:75:10:b4:e8:d9:db:74:3d:4b:4d:76:21:b6:73:
         98:37:ef:05:a6:90:b3:aa:50:31:a9:9d:6d:d5:d4:af:ea:51:
         a9:b9:a3:63:d9:98:ff:75:07:81:0a:b1:22:da:f6:83:60:91:
         65:7c:19:3f:f5:9d:c8:90:db:64:83:63:81:ba:79:96:2b:c1:
         71:9f:7d:f7:6e:50:ce:99:df:d0:67:29:c5:3d:ea:41:40:12:
         05:d3:8b:82:a8:fd:af:4d:75:d4:fc:59:52:2c:d2:21:95:aa:
         6a:d8:b1:4b:fe:cb:38:da:b6:19:cd:ae:3e:06:06:bf:a8:c6:
         50:7b:a5:6b:ec:57:ad:9b:9e:f8:62:e4:ad:c1:0d:2e:2b:19:
         3a:3d:57:fc:a7:c2:95:f9:c3:14:64:51:4b:9f:61:ea:e5:61:
         f8:7c:85:75:63:e3:f0:90:1f:7f:f0:96:72:75:1f:90:3f:be:
         ab:fa:e9:67:95:fe:86:eb:23:df:05:09:56:5f:aa:76:5a:1b:
         59:c4:b1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:17 2024 by rpki-client on console-fra.rpki-client.org