Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/ee1555e5f4d9cdcbe1b29d4ce734a18860897de7.roa
File:                     ee1555e5f4d9cdcbe1b29d4ce734a18860897de7.roa (raw, json)
Hash identifier:          sTToaP0gy+4VVwsjlGGmtchBjyAck90oVlZ+9mbt14Q=
Subject key identifier:   F4:8F:4D:42:4F:A6:E2:E5:24:0F:48:F4:2D:5C:E8:83:73:09:E3:3E
Certificate issuer:       /CN=1866c45b21787e12af4deafc085303e786f50b2f
Certificate serial:       2D9121
Authority key identifier: C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/ee1555e5f4d9cdcbe1b29d4ce734a18860897de7.roa
Signing time:             Sun 17 Mar 2024 18:43:37 +0000
ROA not before:           Sun 17 Mar 2024 18:42:19 +0000
ROA not after:            Sat 17 Mar 2029 18:42:19 +0000
asID:                     14080
IP address blocks:        190.158.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2986273 (0x2d9121)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1866c45b21787e12af4deafc085303e786f50b2f
        Validity
            Not Before: Mar 17 18:42:19 2024 GMT
            Not After : Mar 17 18:42:19 2029 GMT
        Subject: CN=ee1555e5f4d9cdcbe1b29d4ce734a18860897de7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:88:2c:aa:42:da:d5:6d:86:b9:51:d6:3d:51:
                    65:c1:1b:8a:30:2f:e1:93:89:6e:01:18:8f:5c:e6:
                    76:27:ab:bb:37:f5:83:0e:dd:0a:6f:5c:84:3f:3b:
                    f4:4f:45:83:f2:be:ad:65:0c:61:41:5d:b8:2c:68:
                    c6:17:6b:53:6b:32:61:01:6e:bb:0a:29:df:a8:98:
                    10:ad:67:23:05:51:80:ef:e8:11:6d:c5:c4:c8:cc:
                    5b:08:ee:2d:f2:05:80:5b:1c:2c:b2:a2:4e:c2:e0:
                    12:ef:41:7f:86:7b:12:6f:f6:df:ce:b5:7a:8d:42:
                    71:d6:68:38:bb:5a:a1:06:5d:ac:de:00:6f:3b:1e:
                    58:11:94:08:fb:21:c7:88:09:24:10:96:b2:d9:6b:
                    7a:59:07:4e:f8:45:4d:d1:46:94:ce:f2:33:6e:00:
                    ff:98:cb:2f:26:62:09:c2:f2:2c:a3:a5:4c:ce:9e:
                    83:b4:4c:77:30:c5:23:fe:24:a1:04:f9:d4:63:da:
                    0c:0c:b6:72:65:2e:ec:e9:d9:ff:14:eb:8d:44:56:
                    5d:18:65:d6:7c:dc:2c:47:c5:b2:85:08:3a:ed:b5:
                    b1:9b:0c:a8:e0:ba:54:80:ad:01:86:7e:5c:f8:b5:
                    e6:32:c0:0a:b1:73:6e:45:0c:94:9e:92:ed:bf:84:
                    ca:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:8F:4D:42:4F:A6:E2:E5:24:0F:48:F4:2D:5C:E8:83:73:09:E3:3E
            X509v3 Authority Key Identifier:
                keyid:C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/ee1555e5f4d9cdcbe1b29d4ce734a18860897de7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/1866c45b21787e12af4deafc085303e786f50b2f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.158.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:90:14:69:4b:ba:4b:fe:dd:c3:3b:f8:3c:51:29:5f:18:59:
         41:3c:86:b4:e2:d1:22:f5:fd:30:90:14:ac:6a:5b:49:ac:5c:
         47:69:2e:c1:f7:01:82:ee:50:21:4f:c8:9c:0a:ac:94:fe:60:
         eb:64:33:07:4e:42:c3:b6:a9:f7:52:32:af:58:30:f0:b9:f7:
         56:68:ca:63:c9:b1:67:03:3e:64:68:80:15:cb:4b:54:38:0c:
         22:66:4a:44:07:8c:ff:7d:9c:07:aa:8c:9e:01:f5:36:da:a7:
         c0:64:e9:62:95:58:fb:05:c3:3d:38:fc:aa:2a:55:b9:75:f4:
         8e:cc:0c:48:35:69:21:3d:8f:6e:99:5b:44:b1:b9:73:d1:43:
         b0:1c:71:d2:65:3b:2a:9e:d4:5b:e3:1e:92:e3:5d:1a:b9:d5:
         ba:7c:59:7f:51:a3:e3:8d:df:17:1b:d7:9b:8e:c0:a5:d7:1e:
         b3:40:ea:1c:16:0c:7d:6d:92:a6:41:3a:b6:f3:ea:ec:e0:cd:
         0a:62:c9:1c:1d:fe:c9:aa:3e:5f:08:c8:a0:50:19:d6:00:ef:
         4b:d2:4a:0c:a2:94:0c:b2:e0:15:98:b6:bf:62:6a:66:77:5a:
         69:ec:fd:db:36:b5:37:f2:af:dd:9c:31:13:c9:ff:82:03:99:
         34:13:87:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:17 2024 by rpki-client on console-fra.rpki-client.org