Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5f93ae70-4edf-4086-bc00-248f54525fb8/20a3a3c84a9c6c6aebf4e8e7d3f237d4295da8d7.roa
File:                     20a3a3c84a9c6c6aebf4e8e7d3f237d4295da8d7.roa (raw, json)
Hash identifier:          9cELr61C0MzVdBMWFofeD2bAjpiLPH8N5QWDC0ldqmQ=
Subject key identifier:   07:49:12:07:F8:72:21:F1:BE:6A:9C:41:DB:5E:91:1E:BF:83:06:5E
Certificate issuer:       /CN=29194fbdbd11c97181ad21546cc92fc2d0e3857a
Certificate serial:       20CD37
Authority key identifier: 48:F9:63:04:80:AE:04:85:2E:87:A6:87:F3:2E:19:51:75:61:A2:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29194fbdbd11c97181ad21546cc92fc2d0e3857a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5f93ae70-4edf-4086-bc00-248f54525fb8/20a3a3c84a9c6c6aebf4e8e7d3f237d4295da8d7.roa
Signing time:             Mon 08 May 2023 17:06:34 +0000
ROA not before:           Sun 07 May 2023 17:06:31 +0000
ROA not after:            Thu 08 May 2025 17:06:31 +0000
asID:                     265867
IP address blocks:        190.14.18.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2149687 (0x20cd37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29194fbdbd11c97181ad21546cc92fc2d0e3857a
        Validity
            Not Before: May  7 17:06:31 2023 GMT
            Not After : May  8 17:06:31 2025 GMT
        Subject: CN=20a3a3c84a9c6c6aebf4e8e7d3f237d4295da8d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:97:2e:ac:5c:c7:6a:bb:dd:b8:9d:29:a8:07:
                    5a:15:0a:74:1d:8c:69:b2:84:b9:ce:39:e9:64:1e:
                    2e:7e:99:0a:34:22:80:a7:d0:d3:c2:37:9f:ee:e8:
                    82:f5:54:ab:e3:5c:0b:c8:d7:c4:64:7b:85:d9:35:
                    9c:cf:a4:15:46:c5:49:84:d2:a2:b7:b3:c4:2b:cd:
                    2e:0e:6a:df:ba:04:b9:51:7f:55:b2:f4:28:04:c7:
                    53:6b:fb:6e:e9:ef:95:14:b3:4f:46:49:84:6e:67:
                    b9:f6:54:a3:36:1c:7f:36:a5:f0:5a:9d:99:43:20:
                    bf:f5:ea:e8:ca:c3:15:b5:e9:79:34:4b:e4:eb:25:
                    b4:c5:a1:60:6c:95:fb:fd:72:10:81:40:67:70:bf:
                    0f:99:2d:2d:05:d1:13:af:ef:f0:5f:ae:57:74:99:
                    0f:32:ba:4a:ef:95:00:f0:fc:0f:24:1a:a8:be:ce:
                    90:e0:06:2b:c9:63:8d:f6:5d:19:d1:8a:ba:12:f6:
                    2c:08:c8:3b:ba:80:d5:8e:f8:92:bd:ad:69:da:20:
                    bc:07:bb:8b:19:d9:5d:45:57:e7:3f:3f:50:62:c5:
                    31:08:3d:f8:99:38:41:fc:4c:bc:3c:05:fb:cd:4c:
                    5b:93:e7:b4:2d:0f:5e:78:26:77:36:de:d7:89:04:
                    7c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:49:12:07:F8:72:21:F1:BE:6A:9C:41:DB:5E:91:1E:BF:83:06:5E
            X509v3 Authority Key Identifier:
                keyid:48:F9:63:04:80:AE:04:85:2E:87:A6:87:F3:2E:19:51:75:61:A2:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29194fbdbd11c97181ad21546cc92fc2d0e3857a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5f93ae70-4edf-4086-bc00-248f54525fb8/20a3a3c84a9c6c6aebf4e8e7d3f237d4295da8d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5f93ae70-4edf-4086-bc00-248f54525fb8/29194fbdbd11c97181ad21546cc92fc2d0e3857a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:2e:7f:74:91:34:16:b0:02:3f:cc:6e:e0:9b:c6:97:22:8a:
         f4:fe:0a:2e:9b:0e:9b:84:f9:41:bb:ee:2b:f4:8e:fe:2b:72:
         d9:33:a5:cf:b8:a2:cd:a9:ff:83:5e:26:b3:a9:f9:22:0b:29:
         e1:c4:4c:f0:de:e8:65:42:5d:4a:c3:d0:37:ec:9e:b9:59:51:
         6b:3f:b6:3d:37:73:c0:c5:9a:c5:7d:dc:9d:5c:37:2d:c1:75:
         bd:61:b6:e0:a7:26:19:14:72:ca:a8:ce:f6:25:c7:fe:d7:92:
         c8:8b:e5:cc:7f:d9:26:1f:99:29:57:4d:d8:ef:49:cd:d1:26:
         e1:92:0d:df:2e:7e:e1:aa:21:27:bc:76:4b:0a:e5:a0:3f:db:
         8e:72:14:a8:70:6d:47:f8:f7:a5:cf:63:26:6c:9e:7b:91:0c:
         c3:0c:35:f4:02:87:17:4a:01:d7:00:71:3c:7e:78:17:4f:36:
         38:5b:c7:82:d7:db:ed:c1:c3:d1:d3:1a:00:85:cf:71:b4:a1:
         bf:18:6e:fa:a2:cb:fa:44:c1:91:02:40:bd:a2:49:c6:0a:a1:
         02:e9:1c:bf:c3:22:98:14:2d:40:40:80:fa:4b:58:b1:fc:91:
         3f:4c:92:b0:d8:b0:7c:eb:3c:9e:ed:58:16:67:c5:9a:93:02:
         87:77:64:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:36 2024 by rpki-client on console-ams.rpki-client.org