Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/f531ee66969e203ce0d9e7a5d0b9636a831ef828.roa
File:                     f531ee66969e203ce0d9e7a5d0b9636a831ef828.roa (raw, json)
Hash identifier:          3ngJZw7iMGjdL4u5dund8VyehJ4cR0q3FceerGRJzU0=
Subject key identifier:   CE:EA:C5:2C:2B:30:46:3C:C8:92:28:88:E5:6D:B9:22:AE:3B:4C:F1
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       1B4DDD
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/f531ee66969e203ce0d9e7a5d0b9636a831ef828.roa
Signing time:             Thu 19 May 2022 13:37:28 +0000
ROA not before:           Thu 19 May 2022 03:00:00 +0000
ROA not after:            Thu 28 Aug 2042 03:00:00 +0000
asID:                     32787
IP address blocks:        190.145.228.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1789405 (0x1b4ddd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: May 19 03:00:00 2022 GMT
            Not After : Aug 28 03:00:00 2042 GMT
        Subject: CN=f531ee66969e203ce0d9e7a5d0b9636a831ef828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a6:c0:8e:93:e8:7d:87:c0:6a:f6:b6:05:c8:
                    bd:da:b2:f8:49:23:54:45:95:dd:d4:4f:0d:b4:4a:
                    74:2b:3c:57:a9:af:c6:32:e4:e5:07:da:bb:47:71:
                    8b:61:bc:d6:8d:0b:18:83:e6:1a:10:17:d7:68:55:
                    c9:16:28:14:55:5e:5e:3b:f1:7f:da:7a:d7:b0:a4:
                    71:67:43:f5:df:17:81:c1:3d:e9:a9:8c:94:aa:fe:
                    9b:f5:17:9c:12:5b:a3:4b:52:4d:62:af:40:8e:32:
                    f9:e1:44:54:52:c0:a8:f5:93:a0:3b:96:84:f3:49:
                    59:78:f5:08:e2:d2:ce:e3:d8:b9:05:6c:3c:ff:be:
                    12:6d:ec:53:93:e3:fd:0e:2c:1a:12:d0:cc:1b:cc:
                    15:d0:94:71:71:b1:57:00:bc:70:62:3f:36:80:1d:
                    28:9d:e7:1a:98:cf:cc:15:fd:a7:ae:71:ec:18:76:
                    9a:49:3b:a4:13:a2:b4:6c:70:8a:02:60:c7:bd:a1:
                    a6:6e:d4:ff:41:dc:ad:b7:71:77:53:95:91:9d:30:
                    37:9d:4c:53:0f:c7:6e:6b:93:12:0b:43:35:de:03:
                    57:44:a5:98:90:37:46:14:8b:68:12:86:6c:de:aa:
                    ab:5e:f2:80:1e:f2:24:4b:47:97:d6:f5:91:70:6a:
                    b2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:EA:C5:2C:2B:30:46:3C:C8:92:28:88:E5:6D:B9:22:AE:3B:4C:F1
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/f531ee66969e203ce0d9e7a5d0b9636a831ef828.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.145.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:bd:f7:ea:21:ed:0a:6c:d4:a5:d5:6c:7d:6d:03:a1:aa:c1:
         3f:8d:3f:a3:4c:80:40:5c:33:22:08:30:a2:a4:61:6a:25:d6:
         c2:45:3b:54:e1:a7:44:05:c1:45:92:49:1d:ca:26:65:a3:1d:
         dd:d5:1c:34:50:2c:a3:98:3e:2e:a8:6c:9e:b5:9d:e3:43:13:
         2a:e4:c3:1b:72:75:a3:e1:81:68:f1:1c:ca:04:b1:58:5b:fb:
         01:5b:8a:b7:af:f9:2d:f1:dc:f2:3d:ad:6a:e0:ad:2f:00:98:
         1f:45:12:1b:e9:76:48:db:bd:f1:fc:88:6f:5a:54:b5:de:c6:
         93:61:bc:55:86:65:93:d0:76:f0:a7:25:19:85:4b:14:63:fe:
         2e:b0:38:26:7d:61:1d:0c:1f:e4:ae:c3:31:44:64:77:8b:b0:
         a8:28:41:09:81:c5:12:e5:52:36:b0:2a:21:31:33:a1:3b:8f:
         3f:df:80:61:57:f6:47:9f:1f:ec:0c:7c:19:3a:99:9d:36:21:
         5f:d5:a2:c9:53:ad:8b:7c:01:f0:0b:ab:a0:fe:c9:4b:0f:a3:
         66:f5:67:e7:62:5f:c8:b0:2c:07:26:cc:c0:bd:c6:a6:e8:83:
         35:b7:da:e6:6b:61:f1:cb:67:20:51:b9:ac:a8:38:99:14:e4:
         71:83:25:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:55 2024 by rpki-client on console-ams.rpki-client.org