Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/14863BCA38C83823ABCD005637A3E2DDBC6959A557899CE92D58CD65E4567B1C/0/3139302e3231312e3135322e302f32312d3234203d3e203438343635.roa
File:                     3139302e3231312e3135322e302f32312d3234203d3e203438343635.roa (raw, json)
Hash identifier:          d51b+JHb+gqnS/iVfNuyuMM+ysKM8IektShRTDF/9Zs=
Subject key identifier:   1B:BA:8C:6E:4F:0D:90:EB:51:97:CE:C8:32:FC:23:73:D3:0B:26:2A
Certificate issuer:       /CN=501C1D2D606E5EF5408898671C988AE2CDB4066B
Certificate serial:       18C3EFA4C4EEDBDA9D15BA635F1D9770F3F18C1C
Authority key identifier: 50:1C:1D:2D:60:6E:5E:F5:40:88:98:67:1C:98:8A:E2:CD:B4:06:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/501C1D2D606E5EF5408898671C988AE2CDB4066B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/14863BCA38C83823ABCD005637A3E2DDBC6959A557899CE92D58CD65E4567B1C/0/3139302e3231312e3135322e302f32312d3234203d3e203438343635.roa
Signing time:             Sun 07 Jul 2024 10:00:00 +0000
ROA not before:           Sun 07 Jul 2024 09:55:00 +0000
ROA not after:            Sun 06 Jul 2025 10:00:00 +0000
asID:                     48465
IP address blocks:        190.211.152.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:c3:ef:a4:c4:ee:db:da:9d:15:ba:63:5f:1d:97:70:f3:f1:8c:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501C1D2D606E5EF5408898671C988AE2CDB4066B
        Validity
            Not Before: Jul  7 09:55:00 2024 GMT
            Not After : Jul  6 10:00:00 2025 GMT
        Subject: CN=1BBA8C6E4F0D90EB5197CEC832FC2373D30B262A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:eb:74:7c:18:21:2c:99:80:90:0b:26:2a:38:
                    66:7f:24:27:82:05:f1:aa:77:ab:f7:ca:c7:56:4d:
                    54:b0:5e:22:2c:71:6e:98:90:2d:25:ba:ef:2e:80:
                    11:41:ed:9f:e2:1d:a8:01:64:98:57:98:7f:d7:97:
                    a5:e8:4b:9d:6a:33:54:28:67:e1:ad:07:f7:bb:4a:
                    ee:7e:36:91:bd:2c:a5:ad:70:44:97:99:b7:cc:66:
                    49:0c:38:06:35:54:04:24:9e:2c:8a:48:d3:94:76:
                    97:1e:92:7d:b6:3e:25:3c:69:7f:2a:2d:98:5e:d1:
                    f7:f3:8e:23:0e:3d:5d:0a:22:79:b2:93:d4:af:e7:
                    85:26:aa:51:1d:cb:8a:32:6c:4a:49:ca:1d:ca:d1:
                    6e:19:73:51:a7:b6:5a:b2:1d:ce:11:d6:b9:79:9a:
                    31:d6:58:f1:3b:bc:95:bd:25:d7:ba:c9:98:32:4a:
                    38:d4:b2:9a:3e:d8:e7:be:69:17:05:65:64:b9:c1:
                    cf:a6:a4:9d:6e:6d:cf:e5:27:c4:fd:45:61:fe:86:
                    0c:12:0f:fd:e9:02:c4:0c:ac:54:02:72:e7:43:7b:
                    ea:30:7b:bd:69:fd:a6:ba:8b:6d:c4:14:00:92:64:
                    19:42:9c:06:85:5a:c0:17:eb:04:b3:47:7a:d3:31:
                    bb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:BA:8C:6E:4F:0D:90:EB:51:97:CE:C8:32:FC:23:73:D3:0B:26:2A
            X509v3 Authority Key Identifier:
                keyid:50:1C:1D:2D:60:6E:5E:F5:40:88:98:67:1C:98:8A:E2:CD:B4:06:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/14863BCA38C83823ABCD005637A3E2DDBC6959A557899CE92D58CD65E4567B1C/0/501C1D2D606E5EF5408898671C988AE2CDB4066B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/501C1D2D606E5EF5408898671C988AE2CDB4066B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/14863BCA38C83823ABCD005637A3E2DDBC6959A557899CE92D58CD65E4567B1C/0/3139302e3231312e3135322e302f32312d3234203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         92:4e:9a:6a:a7:3c:5d:3e:93:d2:b9:97:3c:67:19:a0:8a:d6:
         6f:c0:ed:80:fc:b2:af:34:30:10:4d:c5:cc:20:e2:2d:dd:47:
         f8:e5:89:81:e0:eb:37:87:06:5c:6f:7f:f3:5c:a5:0d:47:8e:
         26:a9:c2:e5:db:9f:02:40:e5:e6:62:fa:3d:c8:8b:a0:88:90:
         68:de:46:27:50:9b:ca:a3:b0:31:41:e2:38:4d:ff:d2:79:36:
         ce:8b:ed:d3:51:ba:1f:79:30:36:86:fe:03:6d:2c:5e:2c:28:
         73:33:62:8f:e3:60:e5:a8:0a:60:29:06:7c:b8:19:93:12:82:
         0a:63:3e:ec:ea:1f:55:78:7d:40:cf:8a:e4:e3:9b:d6:50:55:
         90:b8:75:63:09:8c:d9:94:27:0d:f8:9e:81:81:66:97:f3:e0:
         cc:c4:62:d7:7c:00:23:63:ae:55:84:db:2b:02:a9:f7:7d:e5:
         4e:b2:dc:6e:dd:05:72:4c:a8:90:b4:fa:97:e9:ca:cb:2a:69:
         74:61:97:3e:5c:76:2f:37:d5:7c:df:d7:ab:f2:a3:21:0a:01:
         7e:b2:c7:c0:5d:9c:66:8c:47:37:30:ee:fd:5d:78:bb:ef:81:
         22:f9:00:76:ce:3c:26:38:17:18:dc:a6:61:7f:1d:18:91:08:
         c7:32:c5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 16 18:30:10 2024 by rpki-client on console-fra.rpki-client.org