Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/fdc4f2be73d6b17c968f46130f5d99173d97ed27.roa
File:                     fdc4f2be73d6b17c968f46130f5d99173d97ed27.roa (raw, json)
Hash identifier:          v7l/XVpmwUojq2aAWV4/Qisp75Cd4H4pDnxfDgNbB5c=
Subject key identifier:   BD:11:1A:47:C0:67:3F:A9:8B:77:3D:C3:2F:B6:52:C6:2C:AB:AC:05
Certificate issuer:       /CN=1866c45b21787e12af4deafc085303e786f50b2f
Certificate serial:       2D8708
Authority key identifier: C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/fdc4f2be73d6b17c968f46130f5d99173d97ed27.roa
Signing time:             Sun 17 Mar 2024 18:43:31 +0000
ROA not before:           Sun 17 Mar 2024 18:42:19 +0000
ROA not after:            Sat 17 Mar 2029 18:42:19 +0000
asID:                     14080
IP address blocks:        190.158.133.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2983688 (0x2d8708)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1866c45b21787e12af4deafc085303e786f50b2f
        Validity
            Not Before: Mar 17 18:42:19 2024 GMT
            Not After : Mar 17 18:42:19 2029 GMT
        Subject: CN=fdc4f2be73d6b17c968f46130f5d99173d97ed27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8d:17:d1:1a:80:31:f1:a7:85:34:d5:b4:27:
                    51:9b:51:22:32:09:19:80:83:bc:c4:3c:b6:2f:16:
                    d5:44:61:0b:98:84:cc:9f:6c:a1:21:04:d8:f6:10:
                    09:35:98:62:6e:72:00:aa:bc:15:e6:05:a6:a1:ff:
                    0a:ce:d9:18:bb:38:e3:99:d2:74:7c:df:05:d5:0d:
                    bf:02:ae:29:a3:fa:78:9c:c8:d3:9f:b8:c5:b4:84:
                    13:af:04:4b:4f:f7:74:2a:06:ed:fb:82:e6:c8:3b:
                    04:af:fe:25:6e:fe:8d:ff:b6:11:1f:7a:27:5c:9c:
                    f0:6c:1a:a8:5a:12:16:cf:4c:0a:89:e1:db:a2:6f:
                    e8:8c:af:01:60:95:73:28:d7:93:d4:d3:32:63:18:
                    ba:4b:89:f3:ba:4b:71:5d:b0:6b:18:89:05:fb:99:
                    62:9a:c9:ba:4b:8d:5e:a8:09:24:15:31:40:89:91:
                    74:f3:b4:ce:59:e4:6a:48:49:82:fe:d4:9b:1b:2e:
                    02:96:14:10:5b:59:71:bd:c4:69:96:ef:d3:ed:37:
                    fa:7f:bd:db:f5:16:4d:d2:81:27:83:5f:68:30:6a:
                    94:98:51:54:9b:02:ca:15:7e:9d:56:86:30:a0:9b:
                    b6:08:5d:d6:bd:17:14:98:30:dd:19:e1:54:32:7b:
                    aa:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:11:1A:47:C0:67:3F:A9:8B:77:3D:C3:2F:B6:52:C6:2C:AB:AC:05
            X509v3 Authority Key Identifier:
                keyid:C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/fdc4f2be73d6b17c968f46130f5d99173d97ed27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/1866c45b21787e12af4deafc085303e786f50b2f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.158.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:b7:f6:98:90:fb:ef:75:67:e9:65:58:95:5d:2b:11:c6:e6:
         66:94:99:e3:75:92:8b:61:ce:f2:a4:1a:4d:25:f7:f9:db:18:
         5b:fa:11:3c:b7:6f:20:fd:12:ff:d4:86:1e:f0:09:72:ed:85:
         ba:01:27:9b:69:73:c0:2b:45:a7:19:c4:e1:c9:d6:f2:a0:b6:
         74:fd:ec:50:6d:35:bd:c8:5e:9a:8a:04:e4:d9:49:39:38:d3:
         c2:cd:1b:a9:eb:b2:fa:28:bf:9a:1a:9e:3f:50:11:49:8b:a7:
         3e:ef:6a:cc:75:33:e2:a6:bd:01:01:2c:ee:88:29:a2:3b:89:
         3e:4b:75:96:6b:05:f9:71:79:57:05:7e:d5:0a:68:b5:66:6f:
         91:25:06:bf:43:2d:5b:c2:82:d8:73:2f:80:0a:9f:e3:c4:96:
         44:79:95:36:da:99:f3:3f:ce:2d:29:02:57:81:26:48:9e:7f:
         3e:24:cb:6e:81:95:f8:2c:8b:fe:62:d1:21:0f:ef:35:4c:22:
         65:67:e6:69:a3:7b:89:d8:ee:8a:17:6d:ee:1e:3e:19:88:58:
         2b:f5:a0:c6:7b:ba:5b:91:e9:68:87:43:8a:2d:84:65:86:57:
         98:83:cd:3f:7a:ea:f5:ca:68:d7:c8:4d:13:c9:9c:9a:b6:32:
         d2:bb:92:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:00 2024 by rpki-client on console-fra.rpki-client.org