Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/f276e6f267541b7afbe4fd88505b9b75e2cf2809.roa
File:                     f276e6f267541b7afbe4fd88505b9b75e2cf2809.roa (raw, json)
Hash identifier:          oOWmOdJO0J7JZ2g9aA69XJy/Y1YCl/ajBtFK4LeMSBc=
Subject key identifier:   CC:6C:38:60:79:C9:B0:C6:96:F8:32:0D:75:6D:C1:5B:58:2F:9E:C6
Certificate issuer:       /CN=1866c45b21787e12af4deafc085303e786f50b2f
Certificate serial:       2DE15C
Authority key identifier: C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/f276e6f267541b7afbe4fd88505b9b75e2cf2809.roa
Signing time:             Sun 17 Mar 2024 18:45:06 +0000
ROA not before:           Sun 17 Mar 2024 18:42:19 +0000
ROA not after:            Sat 17 Mar 2029 18:42:19 +0000
asID:                     14080
IP address blocks:        190.143.35.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3006812 (0x2de15c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1866c45b21787e12af4deafc085303e786f50b2f
        Validity
            Not Before: Mar 17 18:42:19 2024 GMT
            Not After : Mar 17 18:42:19 2029 GMT
        Subject: CN=f276e6f267541b7afbe4fd88505b9b75e2cf2809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:73:7c:57:ba:ce:85:27:3d:28:c0:93:0e:c0:
                    3c:00:fa:d9:7d:86:7e:38:4c:5b:e5:5f:3c:6e:37:
                    a0:06:d1:4e:ae:25:51:68:ba:79:eb:4c:79:c5:44:
                    4e:ff:f1:ae:d9:63:7e:c6:c3:1e:96:44:8d:d4:99:
                    b4:0b:2c:6b:2d:97:51:d3:55:98:59:20:7e:51:9c:
                    a9:aa:ec:df:37:88:9a:6c:28:3d:c4:6a:04:40:84:
                    28:a8:21:03:11:71:3a:d5:6c:ac:6f:db:34:e3:b9:
                    a7:84:88:7f:cc:8a:d0:4e:58:37:9e:6f:e8:88:af:
                    e3:00:66:03:8f:99:c5:bb:fb:eb:c8:48:c1:a5:6b:
                    fa:d9:4e:48:ac:75:b8:55:df:00:5c:0c:7a:7a:13:
                    20:62:37:77:f7:4f:f6:9c:4b:b6:dc:46:02:96:d8:
                    2e:a7:10:b7:7e:e2:02:82:ac:5e:21:66:ef:a9:97:
                    16:34:6c:26:f8:c1:ff:fc:da:7d:6c:b0:c9:5e:96:
                    76:92:66:6f:bd:03:90:b1:4e:53:56:21:92:60:7f:
                    a6:4d:64:64:43:5f:5b:c3:8d:c9:cd:e3:b4:d6:21:
                    57:8e:2c:18:fe:b4:fb:f2:c5:58:cc:62:8d:42:ea:
                    7c:97:a7:f4:7b:15:71:c5:1c:0e:15:d4:6a:66:78:
                    9f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:6C:38:60:79:C9:B0:C6:96:F8:32:0D:75:6D:C1:5B:58:2F:9E:C6
            X509v3 Authority Key Identifier:
                keyid:C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/f276e6f267541b7afbe4fd88505b9b75e2cf2809.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/1866c45b21787e12af4deafc085303e786f50b2f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.143.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:0e:a1:95:8d:d3:73:47:6a:db:77:7b:13:50:08:46:de:b0:
         63:29:ae:c3:01:88:00:b4:84:0d:fa:ce:45:6f:8a:4d:e2:e8:
         84:68:28:31:71:87:ab:4d:f9:21:d7:d7:06:12:b8:ef:ac:2e:
         3e:02:2c:6d:4c:44:5f:3b:6a:b6:d9:4e:f8:99:08:56:ad:58:
         69:d8:57:88:0e:d0:04:26:d0:16:d0:b0:36:19:53:af:a1:5e:
         48:de:7d:45:13:b5:c7:28:3d:03:6d:4b:bb:2c:6d:da:4d:43:
         77:ea:a1:52:10:c1:18:93:2f:c0:5d:6a:59:57:80:f8:32:ec:
         5a:ea:be:62:52:66:ae:6f:c2:b2:e7:c0:a8:29:c5:b6:c8:3e:
         58:53:a5:d2:5e:5f:e3:97:54:bb:26:ca:b5:17:70:61:58:fb:
         05:d5:24:15:f1:29:9a:71:63:57:6b:8f:6e:6e:41:08:92:85:
         19:d6:4c:a2:f9:70:6b:55:1f:ca:33:c2:f1:a9:d1:24:a0:c6:
         40:ce:55:9a:c6:e6:4a:cc:e7:2b:df:f7:4c:a4:82:ec:74:57:
         fa:73:f5:dc:d4:62:46:44:cb:a4:e6:ba:6c:bf:b8:b1:8c:1c:
         45:c8:14:b2:62:24:5b:10:3a:be:43:c4:0a:51:7b:76:7f:e7:
         a2:22:81:55
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDLeFcMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE4
NjZjNDViMjE3ODdlMTJhZjRkZWFmYzA4NTMwM2U3ODZmNTBiMmYwHhcNMjQwMzE3
MTg0MjE5WhcNMjkwMzE3MTg0MjE5WjAzMTEwLwYDVQQDEyhmMjc2ZTZmMjY3NTQx
YjdhZmJlNGZkODg1MDViOWI3NWUyY2YyODA5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAn3N8V7rOhSc9KMCTDsA8APrZfYZ+OExb5V88bjegBtFOriVR
aLp560x5xURO//Gu2WN+xsMelkSN1Jm0CyxrLZdR01WYWSB+UZypquzfN4iabCg9
xGoEQIQoqCEDEXE61Wysb9s047mnhIh/zIrQTlg3nm/oiK/jAGYDj5nFu/vryEjB
pWv62U5IrHW4Vd8AXAx6ehMgYjd390/2nEu23EYCltgupxC3fuICgqxeIWbvqZcW
NGwm+MH//Np9bLDJXpZ2kmZvvQOQsU5TViGSYH+mTWRkQ19bw43JzeO01iFXjiwY
/rT78sVYzGKNQup8l6f0exVxxRwOFdRqZnifawIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFMxsOGB5ybDGlvgyDXVtwVtYL57GMB8GA1UdIwQYMBaAFMLSc6Z8Bh9jCzEo
oEBMvuztIjGIMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTg2NmM0
NWIyMTc4N2UxMmFmNGRlYWZjMDg1MzAzZTc4NmY1MGIyZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDI0MTliOTItZmJiYS00MDRiLWEyMjktZjM4NjVk
NTdhNDZhL2YyNzZlNmYyNjc1NDFiN2FmYmU0ZmQ4ODUwNWI5Yjc1ZTJjZjI4MDku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wMjQxOWI5Mi1mYmJhLTQwNGItYTIyOS1mMzg2
NWQ1N2E0NmEvMTg2NmM0NWIyMTc4N2UxMmFmNGRlYWZjMDg1MzAzZTc4NmY1MGIy
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL6PIzANBgkqhkiG9w0BAQsFAAOCAQEATw6hlY3Tc0dq23d7
E1AIRt6wYymuwwGIALSEDfrORW+KTeLohGgoMXGHq035IdfXBhK476wuPgIsbUxE
XztqttlO+JkIVq1YadhXiA7QBCbQFtCwNhlTr6FeSN59RRO1xyg9A21Luyxt2k1D
d+qhUhDBGJMvwF1qWVeA+DLsWuq+YlJmrm/CsufAqCnFtsg+WFOl0l5f45dUuybK
tRdwYVj7BdUkFfEpmnFjV2uPbm5BCJKFGdZMovlwa1UfyjPC8anRJKDGQM5Vmsbm
SsznK9/3TKSC7HRX+nP13NRiRkTLpOa6bL+4sYwcRcgUsmIkWxA6vkPEClF7dn/n
oiKBVQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:14 2024 by rpki-client on console-ams.rpki-client.org