Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/050cacb151024054f69edd8af4ff55880dede042.roa
File:                     050cacb151024054f69edd8af4ff55880dede042.roa (raw, json)
Hash identifier:          CAJ22j2w77Ur2uHBTRDNyvpwvFUwzPPlN2RypQ/X7jE=
Subject key identifier:   A6:C7:BE:94:2A:CC:A6:02:BC:B0:4A:7D:37:CB:4E:77:C2:5E:C2:CC
Certificate issuer:       /CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Certificate serial:       22BA5F
Authority key identifier: A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/050cacb151024054f69edd8af4ff55880dede042.roa
Signing time:             Thu 22 Jun 2023 18:16:38 +0000
ROA not before:           Wed 21 Jun 2023 18:16:00 +0000
ROA not after:            Sun 22 Jun 2025 18:16:00 +0000
asID:                     27711
IP address blocks:        190.2.19.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2275935 (0x22ba5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
        Validity
            Not Before: Jun 21 18:16:00 2023 GMT
            Not After : Jun 22 18:16:00 2025 GMT
        Subject: CN=050cacb151024054f69edd8af4ff55880dede042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0c:02:7c:0a:5a:2c:27:f7:a1:26:2f:71:42:
                    9f:d2:7c:9a:4c:3c:ad:d2:0d:c1:49:90:27:f5:c0:
                    8e:15:1c:b5:99:c9:b0:bd:02:4d:7c:38:97:de:98:
                    d6:9c:53:f9:76:2c:ee:c7:43:6a:cd:11:05:ee:3c:
                    73:bf:1d:28:fe:e6:62:40:a3:7c:14:eb:22:d3:1b:
                    c4:da:31:a7:cb:15:62:0a:32:94:08:b8:80:45:d3:
                    c2:cd:23:fd:cb:c7:a1:2d:0c:17:0f:27:8c:5d:98:
                    ae:75:79:97:46:07:de:c8:ac:13:e2:b6:5f:76:4c:
                    ee:ed:c6:81:c8:9d:d7:a2:0a:44:69:19:2b:ba:d5:
                    8e:a3:4c:a3:df:48:27:c6:53:0f:11:4f:9f:7b:87:
                    1c:0f:6d:4f:71:d3:8d:28:a8:fe:a4:3a:17:16:da:
                    c7:8d:46:0b:c1:45:34:1f:8f:ec:10:93:94:38:ac:
                    f6:6d:08:9b:73:bd:9f:05:11:d1:f1:92:30:05:3f:
                    9e:1c:b0:90:70:34:a2:b6:11:48:cc:6c:d0:fd:4d:
                    44:84:bf:a8:d5:ed:40:89:d6:9c:d0:38:05:92:f7:
                    d8:37:a5:eb:5b:90:d9:cf:e3:eb:76:ee:56:01:2a:
                    59:6d:d7:1f:f8:e6:8c:c4:a6:22:27:7d:bb:fe:3f:
                    b6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C7:BE:94:2A:CC:A6:02:BC:B0:4A:7D:37:CB:4E:77:C2:5E:C2:CC
            X509v3 Authority Key Identifier:
                keyid:A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/050cacb151024054f69edd8af4ff55880dede042.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/29bfc63c4d2e222df3a099e222567deb9e88bb27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.2.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:4f:a3:28:78:21:55:48:f9:3d:19:ac:61:90:b6:53:6f:b7:
         5b:bb:2c:f6:f5:21:84:49:ff:e6:f1:a6:90:cd:3f:1f:dd:b9:
         8e:81:3e:a0:c6:46:b3:95:b2:f8:13:40:8d:93:14:5e:21:0e:
         9d:35:32:ad:7c:9f:65:93:50:1d:8d:e9:90:f1:25:54:64:9a:
         6e:ca:96:88:79:98:7e:36:62:76:29:15:7e:89:56:c4:c3:f8:
         c2:8a:31:58:55:51:c6:b5:41:3f:d8:ef:16:bd:1b:5b:72:12:
         60:83:6e:77:d4:b8:bb:2c:51:0f:d4:49:f6:c4:c8:2f:3e:c7:
         90:07:2a:98:8c:3e:15:cf:17:bd:c3:97:e5:82:da:23:63:64:
         f4:aa:50:72:61:76:ed:b8:ae:d6:cb:d0:d8:f6:ff:a8:aa:ad:
         a4:6c:5c:79:3e:39:6d:62:fd:aa:14:4e:57:d7:46:f9:50:50:
         07:f0:ed:b2:83:1c:3a:81:c4:90:b0:b7:5c:a9:b8:71:23:9d:
         bd:55:94:54:94:08:14:08:f3:d0:94:53:aa:c6:7e:24:98:c0:
         7d:43:e4:64:8d:eb:3e:5a:e6:a4:40:92:35:af:6f:66:6f:47:
         db:c1:e3:97:fa:9d:dd:0a:59:b9:95:7e:b7:27:59:83:85:b9:
         06:e4:22:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:36 2024 by rpki-client on console-ams.rpki-client.org