Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/8cff8df89fbc50367c99b4415796d650e58e1051.roa
File:                     8cff8df89fbc50367c99b4415796d650e58e1051.roa (raw, json)
Hash identifier:          N2O2RXL8kQt8KvEQeYm4299FX4OKU6iTHBoQlUdKof4=
Subject key identifier:   0F:54:0A:77:F0:38:20:C1:C2:6F:A5:7C:EE:8D:E4:9E:D5:8C:43:93
Certificate issuer:       /CN=4165db8f57caba312629e89d611ea1f393351415
Certificate serial:       0B4EC8
Authority key identifier: 56:A0:E4:4C:F3:DE:53:57:C3:36:E4:3B:31:6D:75:17:E5:B0:B3:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4165db8f57caba312629e89d611ea1f393351415.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/8cff8df89fbc50367c99b4415796d650e58e1051.roa
Signing time:             Tue 06 Feb 2024 19:12:18 +0000
ROA not before:           Tue 06 Feb 2024 19:12:18 +0000
ROA not after:            Fri 06 Feb 2026 19:12:18 +0000
asID:                     262191
IP address blocks:        190.109.14.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 741064 (0xb4ec8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4165db8f57caba312629e89d611ea1f393351415
        Validity
            Not Before: Feb  6 19:12:18 2024 GMT
            Not After : Feb  6 19:12:18 2026 GMT
        Subject: CN=8cff8df89fbc50367c99b4415796d650e58e1051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1b:ce:a4:79:8c:cc:e7:04:d7:3a:77:27:d1:
                    3a:86:58:60:20:07:36:d0:64:49:dc:ba:f8:4a:f0:
                    d0:6e:65:b7:4e:40:0c:0b:37:c1:de:40:79:b4:0c:
                    25:a8:40:cc:3b:25:7c:27:16:f3:83:7b:c9:b0:f0:
                    4f:d3:14:7e:8f:97:ea:91:88:7b:df:fd:c6:bf:79:
                    1f:d6:f7:34:df:bc:7b:1f:50:56:db:a8:5c:ea:fe:
                    82:f3:c0:7a:22:25:d6:30:23:df:d8:0f:a3:f5:64:
                    b8:8a:43:35:0a:0f:cb:7d:11:ae:a8:c1:53:af:25:
                    3d:14:61:e3:a7:81:29:7d:cd:07:e7:3d:02:82:54:
                    29:6f:8c:44:80:8b:06:72:36:42:a2:df:41:42:62:
                    e7:ce:77:a4:eb:1c:6f:2a:20:72:ed:0d:4f:72:b2:
                    8e:af:6c:0b:d8:87:a3:32:fd:91:80:51:d2:f2:76:
                    e3:df:df:e6:2b:c0:f0:5e:df:4b:b8:7a:70:6b:70:
                    88:b4:eb:ae:e9:58:62:36:35:0b:38:8c:50:bc:b3:
                    49:28:88:e7:0a:b8:1d:9b:fc:64:d0:37:a1:6b:bb:
                    11:9d:12:9b:52:fb:7e:5d:1c:86:9d:73:ae:1f:43:
                    5c:88:3c:9f:6a:a5:54:19:33:b0:28:00:ff:36:64:
                    99:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:54:0A:77:F0:38:20:C1:C2:6F:A5:7C:EE:8D:E4:9E:D5:8C:43:93
            X509v3 Authority Key Identifier:
                keyid:56:A0:E4:4C:F3:DE:53:57:C3:36:E4:3B:31:6D:75:17:E5:B0:B3:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4165db8f57caba312629e89d611ea1f393351415.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/8cff8df89fbc50367c99b4415796d650e58e1051.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/4165db8f57caba312629e89d611ea1f393351415.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:95:3a:33:b0:dd:0c:b4:f0:a7:d6:c8:53:21:89:ad:b0:15:
         7b:52:74:67:1f:72:75:e8:2e:d0:9b:01:52:c1:f2:a3:d6:ce:
         bb:2b:d5:fc:8a:a6:a6:fe:37:9f:a1:dd:b3:17:4d:5a:93:b6:
         c8:7c:a2:17:03:8a:9f:c3:8a:fa:03:14:c3:6d:33:39:f8:82:
         9f:dd:6c:66:eb:4c:79:8d:3d:66:61:c7:d7:07:2c:ae:fd:af:
         4f:21:35:e6:10:b0:aa:63:38:fd:51:f6:50:b5:70:61:b9:27:
         fe:03:52:bc:ab:a6:73:09:d6:9c:f6:0b:a3:e9:77:a4:a7:4d:
         41:f0:c6:8c:6c:60:6e:ac:61:54:1e:cf:4b:76:3b:85:81:29:
         b1:4f:22:41:c1:6f:76:c2:70:aa:59:3d:19:d1:12:f1:af:80:
         d6:54:ee:39:55:ba:74:f9:a1:51:33:e0:1d:0e:ce:29:84:c8:
         5a:9f:4c:b4:bc:9c:4b:19:f7:be:8e:6a:ab:55:89:d1:25:b6:
         c8:f8:b7:11:8d:f8:65:4c:27:1c:21:08:16:41:ca:26:cc:96:
         7b:f2:96:2c:cf:30:5c:ce:7e:7f:21:80:6c:71:7d:cf:f1:4d:
         1a:61:47:b5:ff:96:08:3f:a8:ab:20:c0:84:ad:19:f8:72:bf:
         34:de:42:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:38 2024 by rpki-client on console-ams.rpki-client.org