Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/0d186f8d2ec00c68adf557ff288c29de2e39debc.roa
File:                     0d186f8d2ec00c68adf557ff288c29de2e39debc.roa (raw, json)
Hash identifier:          3izgJ0tYzeotu/puIaIKELheAYsDOj67iv/ln5rRbTo=
Subject key identifier:   F5:5F:5B:F5:BB:5E:1D:22:65:A7:C8:9D:FD:F9:B3:54:B8:5F:F6:77
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       12C8DC
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/0d186f8d2ec00c68adf557ff288c29de2e39debc.roa
Signing time:             Thu 23 Dec 2021 12:39:16 +0000
ROA not before:           Thu 23 Dec 2021 03:00:00 +0000
ROA not after:            Sat 23 Dec 2023 03:00:00 +0000
asID:                     12859
IP address blocks:        191.96.96.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1231068 (0x12c8dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Dec 23 03:00:00 2021 GMT
            Not After : Dec 23 03:00:00 2023 GMT
        Subject: CN=0d186f8d2ec00c68adf557ff288c29de2e39debc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b0:27:b2:67:ee:cf:ce:da:46:e6:d0:51:26:
                    47:af:e3:47:b1:cf:cd:5a:4b:82:7c:74:1d:c6:8f:
                    3c:84:05:4c:ba:1a:cd:5c:63:9b:ad:00:6a:12:f2:
                    32:37:6b:b3:e2:cf:4a:64:39:f1:07:bd:db:3a:bf:
                    14:d3:00:87:9b:33:77:2a:27:ea:01:09:aa:1f:88:
                    8d:2d:4b:4c:6a:a8:0d:88:78:85:22:57:36:1c:0b:
                    83:f0:7c:af:6f:3d:7d:aa:0d:96:25:db:78:f7:66:
                    80:35:92:10:4c:ea:f8:aa:e3:b8:09:c2:ac:7e:2c:
                    98:0b:04:ea:d0:a9:97:f1:81:1a:f1:98:91:7f:cd:
                    67:a3:19:0e:2a:e6:84:b6:73:2d:43:22:f7:e4:38:
                    97:81:15:bc:3c:07:5d:b4:de:4b:f2:b8:ce:ff:7b:
                    a0:34:30:79:9b:f5:79:c6:a5:1f:de:66:87:95:78:
                    be:1a:07:b0:7f:a6:eb:aa:b5:1b:ff:7d:69:b4:9c:
                    b3:5f:a4:86:fe:07:00:24:07:3e:a0:db:d0:bb:96:
                    ca:01:72:e4:c7:e4:da:fc:99:18:1a:9c:ba:f7:08:
                    6f:86:63:e8:fe:f4:89:e5:1b:0f:a2:c1:bb:ff:c5:
                    fc:d4:f2:bf:3d:f9:c6:89:7f:2f:5e:5a:b1:17:f9:
                    08:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:5F:5B:F5:BB:5E:1D:22:65:A7:C8:9D:FD:F9:B3:54:B8:5F:F6:77
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/0d186f8d2ec00c68adf557ff288c29de2e39debc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:45:cf:0e:5e:4c:e3:3f:25:11:f3:29:0a:35:51:4d:c5:73:
         9c:a5:53:25:ac:c8:c2:df:a1:8e:ad:1e:1a:99:c0:cb:45:25:
         d0:34:83:53:ab:b7:a1:80:9c:42:fa:71:de:41:66:49:d7:71:
         90:c4:46:aa:e4:13:6c:85:76:9c:d5:a0:27:dd:68:fa:f9:2d:
         dc:dd:5b:ed:13:5b:bd:ec:4a:cd:66:db:ab:74:90:e7:61:51:
         1d:36:08:5d:ea:10:08:9b:b7:6e:5f:0d:03:99:63:61:67:cc:
         22:37:3d:ee:7d:aa:d0:d2:44:06:8e:e3:3b:28:9e:04:79:79:
         1a:f0:ee:cd:8b:b9:ea:fd:35:2d:4f:a4:0b:67:bf:2a:d2:7b:
         45:22:30:b7:7a:83:5c:51:cc:b3:ac:27:d5:1f:d0:64:f1:ec:
         44:f9:03:a7:e2:a2:ee:e9:dc:54:6e:79:14:e3:3d:a8:44:f2:
         0a:1e:bf:89:d1:fb:f3:99:f8:67:7a:29:ae:42:62:4d:cf:c1:
         6f:78:53:55:87:1b:83:64:fe:8a:c0:5d:3e:45:32:b3:61:24:
         1f:a5:ac:20:79:7b:5e:ca:91:a1:f9:29:ec:44:6b:a2:e2:0d:
         1c:1c:8b:e2:9b:37:3c:59:f9:35:0e:7f:9d:5a:c7:6f:5f:33:
         14:b8:ae:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:23 2024 by rpki-client on console-fra.rpki-client.org