Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/ef82075e0b033459978eda748689ae9a56bc8114.roa
File:                     ef82075e0b033459978eda748689ae9a56bc8114.roa (raw, json)
Hash identifier:          0eFlP1dANdo6vPXXalvGM9YmjPADHZkyQKP/CvwWRfc=
Subject key identifier:   2F:49:22:11:2F:97:2C:97:A8:D6:27:39:7F:C6:B0:D0:53:10:73:F6
Certificate issuer:       /CN=1866c45b21787e12af4deafc085303e786f50b2f
Certificate serial:       2D595D
Authority key identifier: C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/ef82075e0b033459978eda748689ae9a56bc8114.roa
Signing time:             Sun 17 Mar 2024 18:42:55 +0000
ROA not before:           Sun 17 Mar 2024 18:42:19 +0000
ROA not after:            Sat 17 Mar 2029 18:42:19 +0000
asID:                     14080
IP address blocks:        190.158.209.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2971997 (0x2d595d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1866c45b21787e12af4deafc085303e786f50b2f
        Validity
            Not Before: Mar 17 18:42:19 2024 GMT
            Not After : Mar 17 18:42:19 2029 GMT
        Subject: CN=ef82075e0b033459978eda748689ae9a56bc8114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f7:b2:1a:04:77:64:8e:8f:75:15:fc:cf:d0:
                    8e:bc:e1:f1:5c:33:b6:9b:07:72:45:e2:14:13:49:
                    0d:f7:1d:2a:1c:7b:20:2a:d2:dc:be:2b:1f:1f:ee:
                    3b:16:ce:8c:43:f4:3c:2b:52:f2:50:b2:29:c2:04:
                    1a:1b:47:ac:aa:3c:88:eb:13:2e:4c:e0:26:12:77:
                    4d:ab:6d:f7:73:44:a6:fe:26:94:dc:05:d5:62:70:
                    ae:b3:19:fb:0c:ce:04:57:93:74:94:db:2a:34:ff:
                    01:3d:f7:f1:e0:2b:a1:ac:48:56:e1:c9:82:ea:72:
                    ca:48:06:f3:97:89:7a:59:be:60:3f:80:54:70:fb:
                    5a:06:75:55:e7:dc:70:0a:34:b1:aa:84:4d:8e:33:
                    d5:4e:27:21:35:c4:69:1b:23:e8:c3:b2:a6:a6:0b:
                    06:d1:2a:41:b0:9c:09:0b:f6:e2:d0:9d:69:9f:6f:
                    e9:df:54:fa:24:47:b2:cc:21:60:d6:e1:52:b8:dd:
                    ab:87:48:a7:4f:b5:7a:39:bd:fd:2c:77:43:56:32:
                    c0:72:fc:1f:c9:d3:d8:fb:64:fa:95:fd:a6:85:c0:
                    80:c4:9d:5e:a1:92:89:71:d8:54:0d:35:cc:46:89:
                    0f:95:52:3a:2d:6b:ae:5f:62:47:b4:20:6e:e5:d3:
                    0a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:49:22:11:2F:97:2C:97:A8:D6:27:39:7F:C6:B0:D0:53:10:73:F6
            X509v3 Authority Key Identifier:
                keyid:C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/ef82075e0b033459978eda748689ae9a56bc8114.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/1866c45b21787e12af4deafc085303e786f50b2f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.158.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:9f:f3:1c:69:47:5a:cd:0f:a3:e0:dc:12:74:25:42:07:99:
         3e:cd:bc:ce:61:dd:af:33:ac:b1:08:5c:04:f3:70:a1:4b:04:
         2d:28:3a:98:97:d5:a1:9d:4f:87:7d:90:59:84:d9:e2:4a:e1:
         33:43:bb:de:b7:1d:1f:b4:14:2f:66:a6:a9:22:54:f1:98:b3:
         f3:6e:8e:81:bf:f2:d9:54:fc:6b:b7:35:af:5e:10:17:71:bb:
         94:11:10:f2:ee:0b:17:b3:9e:26:b7:c8:c8:91:92:ab:4b:42:
         7c:21:96:0b:91:93:85:22:e6:41:04:05:13:4c:1e:f4:00:bc:
         72:f3:f8:af:95:43:c4:fe:87:37:1e:86:6a:2d:ae:44:ae:5b:
         e8:11:f2:e7:a7:76:0b:57:b6:da:4f:7f:0f:dd:f6:f3:cc:20:
         7d:09:62:98:a8:c3:68:fa:c7:ad:27:15:b4:ec:ea:b4:0a:b0:
         e4:a4:00:99:99:80:49:d0:f7:4f:21:f3:1c:1c:79:c4:d4:f2:
         dd:f1:42:25:c6:86:da:de:20:6a:fd:5f:0b:61:4c:f4:09:1c:
         b9:8a:05:f5:74:28:7f:d8:67:b5:f5:1a:7f:af:54:bd:60:24:
         35:8c:dc:7f:15:bc:b8:8e:b2:83:aa:71:73:ac:a2:a2:78:e4:
         75:19:37:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:00 2024 by rpki-client on console-fra.rpki-client.org