Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8a5ec771-114b-465b-bb92-def8ced631ef/7b944d146f86e190afb3858b8878d5a38f38ab1e.roa
File:                     7b944d146f86e190afb3858b8878d5a38f38ab1e.roa (raw, json)
Hash identifier:          j2MufTNdq8jYfmcWWX0NR8T6KaNLO0ksdEIzHcYvBB8=
Subject key identifier:   22:06:74:52:8F:4C:81:94:53:E4:9D:9F:2F:ED:04:81:84:4A:8E:6E
Certificate issuer:       /CN=1c9b973317eb80280ae3912672e94609f196869d
Certificate serial:       1C6B5C
Authority key identifier: 50:A0:2E:42:62:3B:B0:F4:70:CB:60:81:93:84:E8:22:6E:34:CA:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c9b973317eb80280ae3912672e94609f196869d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8a5ec771-114b-465b-bb92-def8ced631ef/7b944d146f86e190afb3858b8878d5a38f38ab1e.roa
Signing time:             Tue 17 Oct 2023 19:53:21 +0000
ROA not before:           Mon 16 Oct 2023 19:53:21 +0000
ROA not after:            Fri 17 Oct 2025 19:53:21 +0000
asID:                     52348
IP address blocks:        190.14.40.0/21 maxlen: 24
                          190.52.208.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1862492 (0x1c6b5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c9b973317eb80280ae3912672e94609f196869d
        Validity
            Not Before: Oct 16 19:53:21 2023 GMT
            Not After : Oct 17 19:53:21 2025 GMT
        Subject: CN=7b944d146f86e190afb3858b8878d5a38f38ab1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e0:35:10:49:46:10:83:05:e5:29:07:93:50:
                    ce:8c:b8:0f:16:3d:69:0a:36:a6:40:91:ab:ba:2a:
                    4f:c5:d5:7a:98:3c:70:95:aa:68:5f:50:ba:2d:dd:
                    83:af:32:08:d4:67:cc:9c:29:de:0f:03:26:ed:59:
                    16:42:cc:ed:d3:3e:48:0d:69:a2:e1:a1:65:f9:2d:
                    64:76:50:c7:bd:c1:59:64:11:e0:d3:57:29:a0:7d:
                    80:cd:20:1c:5d:71:d5:2c:78:a6:19:38:7b:c2:75:
                    f8:ae:b2:be:7e:ab:26:e1:75:fa:91:ad:6e:82:ed:
                    fb:e0:94:f3:46:7b:1e:38:93:83:2c:29:24:3d:fc:
                    7b:62:20:d4:8f:a2:5b:5c:0e:c7:a5:c9:02:fd:3a:
                    6a:55:c5:a2:69:ce:e8:85:ee:90:43:9b:8b:6d:b6:
                    cd:62:d8:ef:f8:a0:dc:4d:94:2d:b6:0d:89:13:42:
                    ed:37:4f:99:ca:f4:7b:eb:35:66:88:b4:62:fe:60:
                    83:75:26:ce:3b:41:a2:49:f9:66:36:2c:10:cd:a8:
                    a1:55:ef:54:b9:6a:aa:7e:e5:bb:49:e6:5c:3a:41:
                    bc:1e:0c:32:45:2c:00:08:98:18:b8:ff:77:fe:22:
                    18:fe:61:31:3f:49:44:30:6d:75:6a:18:6b:4f:46:
                    88:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:06:74:52:8F:4C:81:94:53:E4:9D:9F:2F:ED:04:81:84:4A:8E:6E
            X509v3 Authority Key Identifier:
                keyid:50:A0:2E:42:62:3B:B0:F4:70:CB:60:81:93:84:E8:22:6E:34:CA:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c9b973317eb80280ae3912672e94609f196869d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8a5ec771-114b-465b-bb92-def8ced631ef/7b944d146f86e190afb3858b8878d5a38f38ab1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8a5ec771-114b-465b-bb92-def8ced631ef/1c9b973317eb80280ae3912672e94609f196869d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.40.0/21
                  190.52.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         53:d3:59:51:79:3d:be:9f:ea:e0:e0:ab:7b:e2:2d:7b:55:c3:
         f6:7e:94:57:85:37:fd:91:f5:1f:21:05:47:64:82:cc:a3:28:
         22:45:12:6d:b7:16:96:45:b3:a8:de:1e:78:d8:c1:22:09:24:
         58:c4:2d:34:6c:93:95:e4:1e:4b:ab:d6:e3:ab:ce:11:21:4b:
         9e:48:9f:03:5f:b9:62:53:a9:93:df:d2:4f:0c:85:d6:59:65:
         6c:4b:b9:ef:6b:4d:69:08:77:43:1d:88:10:2b:a7:93:bc:1d:
         08:20:c3:fc:01:4c:75:3d:e9:48:0d:1a:9d:2d:9e:2b:7b:3a:
         21:67:b3:d4:e6:fb:19:04:5d:61:c8:f6:97:11:d0:12:94:a1:
         c7:f2:79:0b:1c:0f:59:e8:ba:ce:5a:99:53:68:b0:03:93:2f:
         5f:92:1f:28:51:e6:db:de:04:fe:6d:15:b4:e1:b8:64:8d:89:
         22:06:d0:22:09:76:71:1a:91:50:a8:79:43:fc:02:b7:a7:41:
         2f:11:4c:79:47:2f:d3:fb:6f:49:c3:1d:e7:69:28:4e:ee:4e:
         76:3d:9c:ef:cd:18:77:14:f0:61:66:07:d7:6b:59:9b:de:5b:
         06:a1:37:5c:b9:ec:4b:b5:bb:1c:e6:46:37:df:4c:d5:a3:e8:
         b4:ec:aa:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:53 2024 by rpki-client on console-fra.rpki-client.org