Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/49930b94-1f5d-44a7-a04d-5cc014b2e05b/36be9ee862d082f574495674f77a45f9aff278cc.roa
File:                     36be9ee862d082f574495674f77a45f9aff278cc.roa (raw, json)
Hash identifier:          BQknxVlcCe+3yuGToaPtlYOZqbY2gYAHIuK21Myzk28=
Subject key identifier:   67:A9:80:86:7D:E7:2C:A3:70:8B:27:5E:D6:B4:D8:D8:7E:A1:4E:89
Certificate issuer:       /CN=c1ebf4c682bc9be7cc000c7f6431ed81a05c4adf
Certificate serial:       0F2A6A
Authority key identifier: 8A:04:13:E4:CA:41:9E:4C:EC:96:9D:21:C4:54:54:44:49:87:C4:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1ebf4c682bc9be7cc000c7f6431ed81a05c4adf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/49930b94-1f5d-44a7-a04d-5cc014b2e05b/36be9ee862d082f574495674f77a45f9aff278cc.roa
Signing time:             Mon 28 Feb 2022 15:27:54 +0000
ROA not before:           Mon 28 Feb 2022 03:00:00 +0000
ROA not after:            Wed 28 Feb 2024 03:00:00 +0000
asID:                     264827
IP address blocks:        187.102.192.0/23 maxlen: 23
                          187.102.192.0/24 maxlen: 24
                          187.102.193.0/24 maxlen: 24
                          187.102.194.0/23 maxlen: 23
                          187.102.194.0/24 maxlen: 24
                          187.102.195.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 993898 (0xf2a6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1ebf4c682bc9be7cc000c7f6431ed81a05c4adf
        Validity
            Not Before: Feb 28 03:00:00 2022 GMT
            Not After : Feb 28 03:00:00 2024 GMT
        Subject: CN=36be9ee862d082f574495674f77a45f9aff278cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6b:65:07:40:75:ab:1b:9b:63:c5:f9:e2:3e:
                    93:90:11:c0:88:37:94:05:14:22:ce:37:8f:bc:fe:
                    72:8a:c5:f7:7a:88:53:0f:2c:b9:a3:b3:09:09:72:
                    f8:4f:d9:43:28:07:43:04:79:5c:66:2b:be:68:66:
                    a2:a8:18:30:ee:39:a8:8e:44:e7:ba:99:d9:b8:b5:
                    24:68:61:ef:50:33:bf:ae:b3:07:d5:5f:0c:13:64:
                    8f:fb:ee:8d:1b:ae:e7:98:d3:45:1b:80:0c:1c:62:
                    c6:53:5a:3c:73:ae:69:9b:01:10:a0:cf:da:b9:4a:
                    55:51:59:ed:62:fc:7f:73:3d:b7:fc:e3:1a:04:01:
                    2e:aa:fa:1e:31:37:2a:95:c5:df:46:36:1c:db:08:
                    ac:11:59:bf:d7:3e:a0:05:05:03:24:4e:ba:d6:8f:
                    e4:32:a8:19:31:62:12:21:69:6f:40:e3:a7:f9:84:
                    61:9f:e8:59:15:dc:42:8c:78:4f:3f:92:1c:6a:51:
                    9d:cd:44:ac:83:b6:05:9b:3e:05:55:c1:96:4c:14:
                    77:7c:db:44:37:e0:45:24:d1:7d:7f:7b:72:81:b8:
                    b0:b5:8d:ee:90:68:4f:d2:64:59:53:c9:99:87:8a:
                    49:0b:3b:5b:25:d7:57:88:b0:11:c5:39:92:24:1f:
                    c9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A9:80:86:7D:E7:2C:A3:70:8B:27:5E:D6:B4:D8:D8:7E:A1:4E:89
            X509v3 Authority Key Identifier:
                keyid:8A:04:13:E4:CA:41:9E:4C:EC:96:9D:21:C4:54:54:44:49:87:C4:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1ebf4c682bc9be7cc000c7f6431ed81a05c4adf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/49930b94-1f5d-44a7-a04d-5cc014b2e05b/36be9ee862d082f574495674f77a45f9aff278cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/49930b94-1f5d-44a7-a04d-5cc014b2e05b/c1ebf4c682bc9be7cc000c7f6431ed81a05c4adf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:7f:08:34:33:ac:07:43:a9:26:3a:f7:a7:81:75:d7:28:46:
         57:32:1e:8a:1d:1a:2c:5c:ea:bc:cb:26:9b:c8:1a:7e:ec:a1:
         76:af:ba:7d:83:db:5a:b7:30:e3:8a:c6:7a:d8:5e:5c:d9:14:
         0c:49:fb:8e:ca:46:da:a5:36:96:6e:7d:30:3c:49:cf:30:4d:
         39:ea:a0:bc:da:52:fa:c2:5e:45:02:ee:69:b5:a7:3a:b7:50:
         de:09:d9:e4:6a:5c:34:1a:ce:ef:9c:e5:20:b2:f9:2f:5c:d7:
         12:ea:6c:4e:3e:a8:d3:82:05:d4:3e:f3:25:05:b1:22:fd:8c:
         bc:43:9e:ab:66:30:da:eb:2c:da:4d:12:21:bf:c1:f3:e2:4e:
         ae:f0:ff:5d:06:a9:22:c8:d6:19:5b:01:2e:b5:ff:74:e5:19:
         88:7d:9b:8d:b8:cf:d8:81:5f:f8:a9:a8:24:cf:78:32:1a:29:
         21:63:f3:d9:a5:c5:9e:cc:21:10:31:7e:96:c1:c1:b9:62:31:
         65:06:03:7c:73:19:8c:01:c5:38:d2:ef:62:4b:34:19:86:c0:
         cf:95:5a:27:aa:13:92:dd:c8:48:8b:a7:21:86:66:55:3c:00:
         e1:90:e4:97:4e:15:4e:fd:da:0d:0b:f0:3e:c4:20:a3:a1:df:
         2a:31:a5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:41 2024 by rpki-client on console-ams.rpki-client.org