Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/ea8c674f51dc1bead0df8fc77199dbb4073c0d8c.roa
File:                     ea8c674f51dc1bead0df8fc77199dbb4073c0d8c.roa (raw, json)
Hash identifier:          AAtkXhm/KkbisHiX5frDnUz+aiZAEhn+cWS8ASfnZVk=
Subject key identifier:   A6:21:FC:49:2D:8E:21:FA:78:2E:E2:E5:07:39:8B:9B:F3:1C:D3:4D
Certificate issuer:       /CN=1866c45b21787e12af4deafc085303e786f50b2f
Certificate serial:       2DE95F
Authority key identifier: C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/ea8c674f51dc1bead0df8fc77199dbb4073c0d8c.roa
Signing time:             Sun 17 Mar 2024 18:45:16 +0000
ROA not before:           Sun 17 Mar 2024 18:42:19 +0000
ROA not after:            Sat 17 Mar 2029 18:42:19 +0000
asID:                     14080
IP address blocks:        190.156.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3008863 (0x2de95f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1866c45b21787e12af4deafc085303e786f50b2f
        Validity
            Not Before: Mar 17 18:42:19 2024 GMT
            Not After : Mar 17 18:42:19 2029 GMT
        Subject: CN=ea8c674f51dc1bead0df8fc77199dbb4073c0d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f6:cc:43:77:e2:82:7c:1b:5b:31:6d:2f:a0:
                    10:bf:55:e5:4a:bd:99:f1:f4:ca:bd:68:23:88:1e:
                    39:13:2d:fd:85:c2:29:51:a8:b5:9d:c9:85:1a:45:
                    ee:36:86:ed:b6:98:5a:50:61:9d:1d:23:ec:44:d6:
                    85:46:ed:93:18:58:6d:4b:30:62:33:a4:cb:a7:17:
                    e9:d5:0c:e7:d5:02:84:2d:f5:4a:19:62:78:62:9d:
                    19:8b:c8:20:ae:0f:03:1d:ad:2a:c5:bd:c0:d0:56:
                    d2:6e:f4:4c:9b:98:59:15:fc:7c:60:b4:30:93:ba:
                    97:be:32:cc:3b:77:e0:50:22:9c:59:58:7b:78:b8:
                    5d:23:00:03:1e:8c:de:18:18:2c:89:5c:db:4e:cc:
                    db:09:61:3f:30:87:1b:6f:91:d1:92:c4:d0:f0:27:
                    74:51:3d:5d:4f:cd:98:89:c5:6b:56:9b:22:4d:f3:
                    33:32:31:ea:c2:d4:3f:4f:18:bb:2f:35:a5:dc:df:
                    41:d9:53:f5:52:d2:9a:e5:8c:47:72:87:8b:b5:70:
                    08:31:8d:ab:b4:d5:a1:4d:86:5d:82:d4:82:bc:e5:
                    0e:c7:25:52:63:7d:49:bc:0c:ea:fd:63:b7:70:cb:
                    e9:a5:ac:d4:d4:f1:fc:ef:ab:0c:cd:6b:c6:a7:a2:
                    ca:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:21:FC:49:2D:8E:21:FA:78:2E:E2:E5:07:39:8B:9B:F3:1C:D3:4D
            X509v3 Authority Key Identifier:
                keyid:C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/ea8c674f51dc1bead0df8fc77199dbb4073c0d8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/1866c45b21787e12af4deafc085303e786f50b2f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.156.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:50:53:24:00:97:b3:d5:cd:1a:92:fe:9a:3d:cd:5e:84:ad:
         f0:e2:c3:37:20:ce:d9:ef:48:6c:0a:64:86:2c:8d:db:81:1a:
         22:81:90:13:d7:26:fe:de:d8:1d:cb:94:72:e6:17:e8:5a:09:
         3d:43:c4:89:fc:8c:b7:2b:bc:62:3c:9a:eb:90:b9:de:b8:59:
         4b:3c:8e:1b:78:c9:e1:84:17:0e:30:60:c0:af:fa:83:9a:c6:
         39:93:d2:af:0a:e3:e3:61:50:a9:96:78:8b:8f:27:ec:0c:da:
         0d:50:ff:fa:7a:6c:66:5a:95:b2:dc:0c:96:0f:5f:eb:c3:2b:
         66:f1:4c:d9:ab:32:d7:e3:bc:44:2c:dc:fa:6a:6c:71:45:29:
         8c:04:cf:a7:85:c9:78:be:7a:b2:57:a8:51:e2:d3:ee:95:21:
         d3:80:1c:0b:d2:31:e3:1d:75:c2:23:1e:50:b5:fa:a2:48:47:
         bd:4b:6e:66:09:d1:aa:67:64:eb:3b:0a:fd:e3:b6:9b:91:66:
         2e:70:d3:74:17:01:e8:51:f0:d0:f0:62:2d:79:be:98:2d:1e:
         49:d6:5e:ed:1e:fd:2c:f7:bd:dc:30:42:4d:ce:d0:ad:85:7e:
         5c:c9:53:8d:eb:d4:34:67:08:8e:04:df:30:c1:90:44:d9:4a:
         6d:c3:8d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:00 2024 by rpki-client on console-fra.rpki-client.org