Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3fc38026-6b9d-4919-8047-4d693ba8ecc4/16501874a7a684fcac1bab4f10129a8cd6117590.roa
File:                     16501874a7a684fcac1bab4f10129a8cd6117590.roa (raw, json)
Hash identifier:          RbBkKYEQwODzmAu3nECCbcHHKBDStnt1tf9IsuaA/k0=
Subject key identifier:   7B:B7:82:FF:75:B3:A7:2B:FE:98:CF:E1:CC:96:AB:44:F8:38:CF:89
Certificate issuer:       /CN=1c19bb58bf30a6b5633338f01c9003f7c46c52e6
Certificate serial:       111641
Authority key identifier: D8:D1:38:88:F9:CA:FE:3A:32:13:BE:AD:07:4E:F1:CB:36:16:9A:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c19bb58bf30a6b5633338f01c9003f7c46c52e6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3fc38026-6b9d-4919-8047-4d693ba8ecc4/16501874a7a684fcac1bab4f10129a8cd6117590.roa
Signing time:             Wed 02 Mar 2022 23:41:21 +0000
ROA not before:           Wed 02 Mar 2022 03:00:00 +0000
ROA not after:            Sat 02 Mar 2024 03:00:00 +0000
asID:                     269949
IP address blocks:        190.83.124.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1119809 (0x111641)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c19bb58bf30a6b5633338f01c9003f7c46c52e6
        Validity
            Not Before: Mar  2 03:00:00 2022 GMT
            Not After : Mar  2 03:00:00 2024 GMT
        Subject: CN=16501874a7a684fcac1bab4f10129a8cd6117590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0a:e0:11:0b:65:5a:cd:15:4d:d1:af:13:9b:
                    10:61:57:a5:df:48:28:9f:92:2a:65:51:e3:90:a6:
                    13:d1:c3:bd:2b:f7:c7:60:4b:98:64:88:c1:5e:93:
                    39:7f:9f:98:01:ca:64:53:08:e2:b8:55:78:cc:18:
                    29:72:df:41:a6:9c:e5:5d:85:84:6e:05:98:b3:57:
                    bc:d3:06:00:1d:b2:4e:bf:ee:56:7b:5f:af:a0:f5:
                    8d:61:69:af:32:27:e3:8e:9c:60:61:e5:1f:99:cf:
                    38:ab:d8:a2:7c:95:af:e8:93:da:1b:78:55:ec:20:
                    83:c3:6a:1e:7b:17:18:fd:b0:b7:76:1d:f9:23:e8:
                    07:01:2b:2a:07:8e:86:24:39:e2:30:e1:4a:51:d9:
                    e7:3a:0e:72:ea:df:fc:d1:69:e5:1c:60:93:93:00:
                    19:73:96:1c:88:d5:33:c4:fb:53:7f:04:0a:5f:e5:
                    39:c2:56:24:41:f6:f9:d4:f8:79:89:2d:81:9e:e9:
                    38:5e:a8:62:5c:1f:87:c7:4e:13:67:3d:d8:10:ae:
                    1a:6e:e8:1a:ab:b4:f7:19:53:bb:51:03:ce:bb:9d:
                    70:61:6e:c0:56:2c:9c:4b:b1:e3:7a:4e:3b:51:c5:
                    2c:b8:1a:6b:62:7f:f5:9d:7f:eb:2e:17:f8:67:ca:
                    06:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B7:82:FF:75:B3:A7:2B:FE:98:CF:E1:CC:96:AB:44:F8:38:CF:89
            X509v3 Authority Key Identifier:
                keyid:D8:D1:38:88:F9:CA:FE:3A:32:13:BE:AD:07:4E:F1:CB:36:16:9A:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c19bb58bf30a6b5633338f01c9003f7c46c52e6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3fc38026-6b9d-4919-8047-4d693ba8ecc4/16501874a7a684fcac1bab4f10129a8cd6117590.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3fc38026-6b9d-4919-8047-4d693ba8ecc4/1c19bb58bf30a6b5633338f01c9003f7c46c52e6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:ca:c6:ec:13:10:86:34:9d:00:e7:f9:29:3e:a0:31:4e:64:
         40:41:60:cd:de:ee:1c:cf:73:f5:1c:1b:5e:75:81:1b:d2:59:
         db:8c:e2:51:ae:78:01:ad:bc:4f:47:1b:8a:c9:0d:9d:d6:83:
         6c:8e:ae:44:3b:99:da:50:3a:ed:13:05:cd:27:32:02:4b:ff:
         1f:f8:85:20:6f:a8:60:02:15:d9:1b:84:14:aa:e3:ca:99:82:
         66:42:60:63:cb:bf:7e:05:a4:44:b0:1a:41:52:59:2e:0c:48:
         0f:8e:68:92:db:6f:51:e0:9d:9f:6b:9f:30:5c:64:3e:05:96:
         e2:ac:e4:2b:d9:d6:fa:28:e7:77:fd:93:33:29:15:e5:dd:92:
         aa:34:4f:e5:77:66:e7:ff:d2:9e:de:36:e7:7d:2c:51:26:9e:
         cd:08:75:04:09:96:a8:cc:b3:f3:a4:86:eb:fb:4a:0c:7c:ab:
         ff:e9:6f:99:bb:57:41:94:a7:e0:fa:28:d8:93:5d:c7:0c:5d:
         b4:bd:77:1b:29:a5:f8:89:f8:2b:c5:92:9b:22:b9:34:4e:67:
         82:ff:d4:ef:f2:59:d3:7a:e7:6e:7e:e9:5c:a8:b1:9b:4b:59:
         b8:91:70:14:5e:ce:dd:fe:57:0f:40:88:e2:b9:eb:4a:8f:55:
         64:85:f9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:30 2024 by rpki-client on console-fra.rpki-client.org