Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18f9ef39-7199-4bf7-b2b1-6b30a01b84dc/5c94cf48207af6164ce3871fc8a1eb9a50e16b44.roa
File:                     5c94cf48207af6164ce3871fc8a1eb9a50e16b44.roa (raw, json)
Hash identifier:          VJxkDS9VG7k3+ud0IpuKIUlJK5NGU17GlB0XpuUSmRY=
Subject key identifier:   69:AC:56:6E:C4:BF:E6:3A:5B:1A:76:0C:4F:3C:2C:4C:D8:A2:17:6A
Certificate issuer:       /CN=e804a389c3b0880219ecf5f7a3c62d96a274b592
Certificate serial:       273076
Authority key identifier: 4C:B1:1C:CB:1C:D3:F1:33:59:8C:6A:7C:8B:2A:39:9E:D2:9D:E5:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e804a389c3b0880219ecf5f7a3c62d96a274b592.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18f9ef39-7199-4bf7-b2b1-6b30a01b84dc/5c94cf48207af6164ce3871fc8a1eb9a50e16b44.roa
Signing time:             Mon 19 Feb 2024 13:55:14 +0000
ROA not before:           Mon 19 Feb 2024 13:55:13 +0000
ROA not after:            Thu 19 Feb 2026 13:55:13 +0000
asID:                     27889
IP address blocks:        190.76.127.0/24 maxlen: 24
                          190.76.240.0/24 maxlen: 24
                          190.76.244.0/24 maxlen: 24
                          190.76.248.0/24 maxlen: 24
                          190.76.251.0/24 maxlen: 24
                          190.76.252.0/24 maxlen: 24
                          190.76.63.0/24 maxlen: 24
                          190.76.192.0/20 maxlen: 21
                          190.76.208.0/20 maxlen: 20
                          190.76.224.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2568310 (0x273076)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e804a389c3b0880219ecf5f7a3c62d96a274b592
        Validity
            Not Before: Feb 19 13:55:13 2024 GMT
            Not After : Feb 19 13:55:13 2026 GMT
        Subject: CN=5c94cf48207af6164ce3871fc8a1eb9a50e16b44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:64:0c:b1:0f:71:12:d6:cd:de:83:e1:af:de:
                    ca:c8:1e:a1:eb:1d:37:10:e6:32:cb:93:d2:41:ee:
                    42:d7:0c:85:58:78:58:05:9e:48:22:af:19:f4:b5:
                    09:f6:80:aa:eb:9d:a3:a9:47:29:c5:d2:08:54:79:
                    57:87:8e:c3:41:c5:64:93:6b:a4:db:ea:3a:b9:9a:
                    90:2e:e9:37:d0:47:87:a2:50:ff:47:96:f4:db:b4:
                    b0:3b:66:6d:3a:79:e4:44:f6:48:91:f3:8e:0b:d9:
                    45:a5:53:8c:f7:bd:e8:3d:ea:ed:6f:6a:78:95:7e:
                    52:d5:f5:1d:f6:db:b5:85:ed:f7:a9:a6:c1:59:5f:
                    ce:4a:d3:1c:9c:2e:0a:85:f3:58:ab:f9:53:90:76:
                    28:c2:7b:b7:39:b8:f1:1c:7e:cc:bd:65:43:1a:5a:
                    9d:29:4d:eb:51:b8:15:12:fe:e0:70:09:e8:44:04:
                    a1:46:f2:4d:17:68:26:53:86:b3:5b:4d:ad:7e:3d:
                    83:1e:5f:7a:c6:2c:cc:14:fa:5a:5b:75:c4:25:f6:
                    ad:32:d0:c1:26:b0:58:27:6e:bf:18:e0:47:24:70:
                    99:0e:59:8c:c3:c1:bf:44:86:c6:8d:5d:77:d6:b9:
                    0a:4a:b1:2a:73:29:e5:65:fd:e7:c4:54:c6:b1:89:
                    71:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:AC:56:6E:C4:BF:E6:3A:5B:1A:76:0C:4F:3C:2C:4C:D8:A2:17:6A
            X509v3 Authority Key Identifier:
                keyid:4C:B1:1C:CB:1C:D3:F1:33:59:8C:6A:7C:8B:2A:39:9E:D2:9D:E5:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e804a389c3b0880219ecf5f7a3c62d96a274b592.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18f9ef39-7199-4bf7-b2b1-6b30a01b84dc/5c94cf48207af6164ce3871fc8a1eb9a50e16b44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18f9ef39-7199-4bf7-b2b1-6b30a01b84dc/e804a389c3b0880219ecf5f7a3c62d96a274b592.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.76.63.0/24
                  190.76.127.0/24
                  190.76.192.0-190.76.240.255
                  190.76.244.0/24
                  190.76.248.0/24
                  190.76.251.0-190.76.252.255

    Signature Algorithm: sha256WithRSAEncryption
         0b:1b:e2:c2:c1:40:ce:d7:d2:48:0d:e8:5d:de:c6:5d:d5:c5:
         b9:3b:2c:4c:99:f9:b1:c9:0f:6f:4b:a2:be:6f:6a:98:80:3f:
         31:37:1c:18:a8:5a:d1:c8:a3:95:d5:9a:8e:31:ee:5f:4a:aa:
         37:de:ef:e7:6a:f8:ab:1e:d6:cd:1c:ca:7b:d3:cd:8f:96:78:
         0e:89:d1:37:79:8b:f6:93:25:2e:8d:ba:35:ad:ef:6d:c4:d3:
         ac:ab:a1:80:b9:50:0a:18:c1:01:3b:04:01:33:31:1f:ab:83:
         ce:ab:98:c2:4b:9a:b2:c1:ad:0a:bb:e0:57:d5:8b:70:5a:2b:
         fb:d8:12:d6:ac:40:46:45:58:c9:18:ca:4f:7c:30:78:ab:09:
         af:36:73:07:50:42:46:5c:65:81:3d:a5:24:69:59:04:94:1f:
         f0:46:dc:db:7b:69:f5:71:0d:25:9b:c2:5b:e6:50:ad:9f:62:
         47:b1:9a:1c:01:52:0e:e1:42:43:1c:bc:6b:f0:61:ea:e8:e5:
         0c:94:30:72:43:ac:63:66:de:a0:44:0e:de:11:65:4a:73:40:
         2f:2f:f8:bf:32:20:d3:f7:c2:35:36:94:6b:68:84:26:60:ad:
         61:73:85:bc:c5:cd:3c:b6:29:d2:2b:07:b5:e2:d4:f7:8a:53:
         15:83:84:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----