Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/f9ff8a7fc0a89b5d13c070767d5f128a60358efc.roa
File:                     f9ff8a7fc0a89b5d13c070767d5f128a60358efc.roa (raw, json)
Hash identifier:          MetRWPqYLlEK/5kysBkJkWFbgOeondVJPXAj58rUcDg=
Subject key identifier:   65:40:5A:C6:92:53:91:7B:59:D6:D8:6A:C6:02:6B:27:ED:4A:A5:AE
Certificate issuer:       /CN=4165db8f57caba312629e89d611ea1f393351415
Certificate serial:       0B634F
Authority key identifier: 56:A0:E4:4C:F3:DE:53:57:C3:36:E4:3B:31:6D:75:17:E5:B0:B3:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4165db8f57caba312629e89d611ea1f393351415.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/f9ff8a7fc0a89b5d13c070767d5f128a60358efc.roa
Signing time:             Wed 07 Feb 2024 17:59:10 +0000
ROA not before:           Wed 07 Feb 2024 17:59:10 +0000
ROA not after:            Sat 07 Feb 2026 17:59:10 +0000
asID:                     262191
IP address blocks:        190.109.18.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 746319 (0xb634f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4165db8f57caba312629e89d611ea1f393351415
        Validity
            Not Before: Feb  7 17:59:10 2024 GMT
            Not After : Feb  7 17:59:10 2026 GMT
        Subject: CN=f9ff8a7fc0a89b5d13c070767d5f128a60358efc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:72:96:89:66:7c:73:b8:fe:ca:e1:44:09:32:
                    e4:bc:7f:9e:38:b8:34:9e:31:b6:db:4e:da:78:b8:
                    2d:fb:7d:8d:9d:bc:2d:16:89:39:f6:c8:95:31:ad:
                    ac:ca:22:1c:3b:27:a8:7b:4a:34:36:5e:21:c8:e3:
                    0f:66:a0:dc:ca:8d:39:1c:0a:98:df:16:85:e5:0b:
                    6a:2f:22:3d:b2:50:74:eb:81:66:d9:03:d1:2a:17:
                    54:37:65:fe:03:d0:3a:54:7d:19:42:11:fe:1c:68:
                    58:a7:ee:f7:e4:40:29:9a:0c:9a:3f:85:ae:04:75:
                    00:b0:7b:1f:d3:bc:11:c5:bc:7f:0a:77:97:5f:b3:
                    df:22:d5:f6:3d:57:eb:fb:72:91:69:69:b7:84:b3:
                    e6:d8:09:f1:b0:3a:1b:63:91:16:23:e7:93:84:c5:
                    e7:c7:2a:6a:b4:f9:b8:eb:62:9b:dc:ec:f7:df:28:
                    37:d7:e8:a0:2a:e8:43:dd:47:3b:f2:08:89:c8:85:
                    9d:2a:eb:64:9e:5c:00:ce:c7:2f:fd:38:ad:fa:03:
                    47:3c:88:4f:32:0a:2b:a2:22:c0:02:c0:84:33:a4:
                    e2:de:48:0b:03:7f:fd:72:c1:25:80:ae:84:2f:7d:
                    b4:7d:b6:96:b7:94:09:aa:8b:5c:5d:b3:59:2c:41:
                    b1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:40:5A:C6:92:53:91:7B:59:D6:D8:6A:C6:02:6B:27:ED:4A:A5:AE
            X509v3 Authority Key Identifier:
                keyid:56:A0:E4:4C:F3:DE:53:57:C3:36:E4:3B:31:6D:75:17:E5:B0:B3:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4165db8f57caba312629e89d611ea1f393351415.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/f9ff8a7fc0a89b5d13c070767d5f128a60358efc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/4165db8f57caba312629e89d611ea1f393351415.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:b4:6c:11:4d:0a:23:cf:b0:5a:bf:ee:d0:fa:a3:37:4c:c2:
         99:d1:9d:e4:8d:da:cc:28:8e:4d:97:31:da:3f:c8:8f:7f:ac:
         57:a7:01:9d:38:15:9c:0f:27:9a:18:0a:66:99:74:3e:06:67:
         72:f3:e5:72:de:83:70:6f:9e:09:c2:e8:8d:74:6c:b3:96:51:
         a0:63:d9:f5:27:06:f4:6a:df:a5:9e:f4:db:ab:9f:32:6f:a4:
         98:7c:19:c8:dd:e2:cd:56:cf:0a:e3:d5:a5:5d:0d:9a:23:8c:
         3d:d9:d8:2b:8a:71:0e:fb:3c:49:20:7c:d0:50:ee:54:94:e8:
         08:34:45:9e:f6:62:d7:3f:f0:b7:38:91:c2:e4:26:d3:e8:42:
         94:66:60:67:40:bc:af:0d:07:a0:af:6e:32:21:75:7f:82:5e:
         9d:c5:a2:80:47:a9:3f:3b:89:0c:bd:ff:54:cc:d6:78:c8:61:
         f7:b2:18:0f:2c:57:b7:9f:10:d3:7a:a0:a6:a8:e7:c7:75:35:
         ad:7d:dd:13:8d:8b:7d:8a:f8:5e:99:89:f3:c7:78:99:05:62:
         3a:de:17:85:ab:76:30:11:0c:c5:cb:9a:c5:a2:df:24:99:7b:
         45:ba:df:41:92:81:11:7e:66:40:9e:1c:95:f1:94:9d:d2:43:
         e0:c3:c7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:38 2024 by rpki-client on console-ams.rpki-client.org