Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/5b290fd9e4a900a3e9384fa3b1646822bd573164.roa
File:                     5b290fd9e4a900a3e9384fa3b1646822bd573164.roa (raw, json)
Hash identifier:          Z/E4fXKWv6SaYu0pyEK9iK0AXSkcoNJ4r6vazsf+07I=
Subject key identifier:   FE:22:42:F6:DA:71:2F:05:69:E0:81:C7:F0:AA:A0:25:62:59:D6:98
Certificate issuer:       /CN=a68aca945e5b4e0fa575bbe03b1af65146ef0b6f
Certificate serial:       207F4B
Authority key identifier: 5C:50:E5:03:69:FD:9F:99:A6:92:F6:88:B9:62:BC:77:AC:8A:A9:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a68aca945e5b4e0fa575bbe03b1af65146ef0b6f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/5b290fd9e4a900a3e9384fa3b1646822bd573164.roa
Signing time:             Fri 12 May 2023 17:03:30 +0000
ROA not before:           Thu 11 May 2023 17:03:30 +0000
ROA not after:            Mon 12 May 2025 17:03:30 +0000
asID:                     14080
IP address blocks:        190.126.0.0/15 maxlen: 24
                          191.156.215.0/24 maxlen: 24
                          190.130.64.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2129739 (0x207f4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a68aca945e5b4e0fa575bbe03b1af65146ef0b6f
        Validity
            Not Before: May 11 17:03:30 2023 GMT
            Not After : May 12 17:03:30 2025 GMT
        Subject: CN=5b290fd9e4a900a3e9384fa3b1646822bd573164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d3:6d:f8:3d:22:af:4e:a9:06:7e:54:6c:cb:
                    25:5e:a1:08:8d:83:ac:7c:39:37:fb:e7:18:6f:6e:
                    f4:b7:87:36:c6:5c:35:36:0d:12:32:2f:03:54:a6:
                    83:e7:18:ec:f6:76:58:6c:80:64:9e:26:dc:06:84:
                    34:da:ae:1b:d7:66:96:7b:84:8e:30:75:58:cd:7f:
                    d3:e4:a3:b4:f4:e1:07:e3:6f:50:9e:10:2d:c3:db:
                    bc:c2:68:93:a0:f1:0d:e3:9e:32:12:98:2e:7f:26:
                    65:46:ca:fb:bc:c7:12:56:89:a0:8a:83:a9:1b:a2:
                    be:98:b8:99:81:8d:bb:92:27:d1:4e:f0:94:aa:04:
                    9e:c8:a0:25:d8:40:14:44:5d:f9:6e:1a:52:ed:70:
                    65:3d:39:d0:50:8e:ba:e8:55:64:72:a9:bb:ef:6a:
                    d4:b5:e2:18:41:ac:fb:8d:00:23:70:91:d7:51:37:
                    07:f7:5b:f0:90:53:c3:21:8d:e7:68:97:e0:62:53:
                    f3:df:9e:31:57:f2:35:4f:12:78:a6:96:a3:34:9a:
                    15:c3:14:7b:bc:45:39:69:a1:53:25:9f:78:bf:11:
                    11:d8:99:40:18:44:1c:7c:71:5b:04:a4:ad:94:96:
                    4d:d3:18:bf:6a:e1:ea:aa:3a:fe:1a:54:83:b5:72:
                    63:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:22:42:F6:DA:71:2F:05:69:E0:81:C7:F0:AA:A0:25:62:59:D6:98
            X509v3 Authority Key Identifier:
                keyid:5C:50:E5:03:69:FD:9F:99:A6:92:F6:88:B9:62:BC:77:AC:8A:A9:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a68aca945e5b4e0fa575bbe03b1af65146ef0b6f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/5b290fd9e4a900a3e9384fa3b1646822bd573164.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/a68aca945e5b4e0fa575bbe03b1af65146ef0b6f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.126.0.0/15
                  190.130.64.0/18
                  191.156.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:98:d4:e6:4c:f1:21:5c:84:e7:78:c3:a0:26:95:a0:97:59:
         9f:bb:13:86:68:b5:c4:0e:4a:ac:5e:2f:ce:d6:82:4c:15:e2:
         f1:8b:2f:f6:62:c0:9d:df:15:54:53:37:61:56:ec:d2:28:79:
         34:8e:9d:f8:e4:99:48:74:b2:da:bd:13:8a:a1:53:33:c9:13:
         ba:7a:59:c2:2e:f8:f7:d7:ce:a1:81:76:6c:4a:ae:ae:8f:01:
         3f:6a:80:e6:62:82:c8:3e:9f:3b:df:f2:cd:10:68:84:d0:e7:
         59:e2:30:f9:97:5a:15:f7:18:8c:10:30:22:03:bb:dc:db:4f:
         54:af:d4:61:2b:ff:f9:50:90:72:88:fc:92:22:7a:ee:65:17:
         ff:8f:0e:d3:ea:2a:a6:be:0b:dc:fa:89:ea:71:04:30:6c:c2:
         2c:e0:10:26:e9:17:43:02:06:44:23:3f:7f:e9:1c:18:67:77:
         38:e6:c6:40:07:45:6e:65:67:26:90:04:7b:d8:33:bf:61:8f:
         8e:f1:9f:2e:33:c4:1e:a4:b8:83:c0:66:36:64:d6:ec:f8:77:
         31:78:c7:3a:52:84:d1:9d:7f:68:49:1a:f0:87:0c:b5:83:ec:
         e2:1a:49:8c:6f:21:b7:66:b6:c1:1b:3c:ef:7e:1c:c8:ee:a8:
         29:aa:fd:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:17 2024 by rpki-client on console-ams.rpki-client.org