Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18f9ef39-7199-4bf7-b2b1-6b30a01b84dc/1a299628be5facafd12ca9fccbb4f9ecf56753a7.roa
File:                     1a299628be5facafd12ca9fccbb4f9ecf56753a7.roa (raw, json)
Hash identifier:          n7DMsnqFShqQq/a6azEDzsG6ET8TeDCWny0VJooWwoA=
Subject key identifier:   AA:27:CB:C4:8A:CB:5F:CF:7E:DB:7D:56:4D:2E:98:95:D1:C8:FA:E8
Certificate issuer:       /CN=e804a389c3b0880219ecf5f7a3c62d96a274b592
Certificate serial:       273DF1
Authority key identifier: 4C:B1:1C:CB:1C:D3:F1:33:59:8C:6A:7C:8B:2A:39:9E:D2:9D:E5:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e804a389c3b0880219ecf5f7a3c62d96a274b592.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18f9ef39-7199-4bf7-b2b1-6b30a01b84dc/1a299628be5facafd12ca9fccbb4f9ecf56753a7.roa
Signing time:             Wed 21 Feb 2024 18:56:03 +0000
ROA not before:           Wed 21 Feb 2024 18:56:03 +0000
ROA not after:            Sat 21 Feb 2026 18:56:03 +0000
asID:                     27889
IP address blocks:        190.76.62.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2571761 (0x273df1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e804a389c3b0880219ecf5f7a3c62d96a274b592
        Validity
            Not Before: Feb 21 18:56:03 2024 GMT
            Not After : Feb 21 18:56:03 2026 GMT
        Subject: CN=1a299628be5facafd12ca9fccbb4f9ecf56753a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:51:a6:55:23:1e:4c:67:12:49:ae:a9:33:2c:
                    a4:2a:9d:4a:7a:73:f7:88:ed:de:a9:4e:70:08:df:
                    e8:f6:11:fe:cd:1b:18:ce:8f:0e:c2:4f:9c:11:3c:
                    57:11:19:a0:74:e7:d1:ad:14:26:43:6d:cb:17:0e:
                    43:3d:35:9f:1b:26:16:2c:26:20:04:d8:0d:60:9c:
                    61:15:79:28:6c:c4:5e:31:62:61:36:dd:91:23:b3:
                    23:b4:5f:a3:54:a7:b9:d3:0c:63:7c:e4:d1:3a:5b:
                    44:be:ea:69:04:b2:42:8b:55:4c:63:79:14:25:ed:
                    cf:27:e9:67:1f:5d:8e:52:86:5a:ed:32:f3:bb:0d:
                    db:43:a8:e8:51:4b:7d:38:94:01:ef:bb:a9:1d:e6:
                    79:5c:3c:03:88:80:63:7d:72:ed:16:0e:37:30:2d:
                    2f:f9:ab:b3:d6:21:34:7b:cd:40:22:05:31:a8:b3:
                    46:64:a8:61:32:c6:3c:0c:4a:b2:e4:4d:5d:e4:71:
                    a0:50:64:2e:40:03:b2:32:19:db:2e:31:1f:53:31:
                    bd:d0:49:ee:c8:39:23:5e:8c:96:7a:ca:48:d4:59:
                    24:3c:0a:41:25:42:16:ec:b4:a4:37:bf:7d:fe:0a:
                    37:37:a7:f1:46:c4:00:41:09:8a:50:53:f2:cb:7c:
                    ed:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:27:CB:C4:8A:CB:5F:CF:7E:DB:7D:56:4D:2E:98:95:D1:C8:FA:E8
            X509v3 Authority Key Identifier:
                keyid:4C:B1:1C:CB:1C:D3:F1:33:59:8C:6A:7C:8B:2A:39:9E:D2:9D:E5:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e804a389c3b0880219ecf5f7a3c62d96a274b592.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18f9ef39-7199-4bf7-b2b1-6b30a01b84dc/1a299628be5facafd12ca9fccbb4f9ecf56753a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18f9ef39-7199-4bf7-b2b1-6b30a01b84dc/e804a389c3b0880219ecf5f7a3c62d96a274b592.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.76.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:67:7e:8d:0a:e9:85:ee:fe:99:32:2d:4c:8c:4e:89:7f:11:
         08:8a:6e:f1:95:bf:5c:c7:6f:b2:d7:6e:95:91:fb:8b:d6:19:
         b2:b4:71:c0:f3:ee:ec:ec:b1:1b:ff:4b:23:dd:c9:95:92:79:
         a8:eb:d4:42:b8:01:5e:78:78:0e:bc:28:5c:0b:59:c9:be:ad:
         33:69:56:d4:e9:a6:d6:61:88:f7:88:c0:6f:ac:15:ab:f7:f0:
         50:65:54:4a:89:8d:86:38:0e:3e:6e:c3:08:09:99:99:b3:61:
         b7:28:dc:10:9f:44:73:ed:2e:bd:be:fa:75:07:a1:99:cc:dd:
         a8:41:cb:62:48:20:96:c1:3d:e8:fe:f1:fd:8c:8c:e5:59:ca:
         7f:79:7c:c9:c7:78:ed:38:74:ab:ce:5b:9d:b3:ac:58:7e:43:
         2c:73:ce:5f:07:66:b7:a7:21:e9:6a:6e:30:7e:d6:5b:ff:6f:
         53:af:ad:64:59:28:60:b4:58:dd:35:5d:15:fb:5a:1f:53:e8:
         70:2f:d6:76:67:6b:9b:4b:22:fc:fc:ac:ea:9c:0f:6a:d6:4f:
         ec:8b:70:d9:01:e6:dc:a7:b8:58:63:8e:13:d0:1d:c8:8f:6a:
         73:58:28:a3:fe:3c:9c:18:60:2b:fb:5b:18:52:f4:f0:f8:9b:
         3e:71:c7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:17 2024 by rpki-client on console-ams.rpki-client.org