Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7026ef52-79b0-4fc9-b4fe-006e1d7be606/5ec4c5bcd5a00bfbf087d283893ad561487d8d2f.roa
File:                     5ec4c5bcd5a00bfbf087d283893ad561487d8d2f.roa (raw, json)
Hash identifier:          800WOQqWtOMcshG7TqycaXzF+b1ujhPpziIE6sB4RVI=
Subject key identifier:   E6:7C:13:9E:A2:4A:87:2A:E0:28:C1:A8:97:A4:A2:F6:97:37:65:FE
Certificate issuer:       /CN=d21f7315b565f88e18de69169de5a1119c25988f
Certificate serial:       119489
Authority key identifier: 9A:0B:7E:6F:2B:9E:A4:D9:78:9C:53:3D:D2:BE:7E:AD:01:C6:2D:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d21f7315b565f88e18de69169de5a1119c25988f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7026ef52-79b0-4fc9-b4fe-006e1d7be606/5ec4c5bcd5a00bfbf087d283893ad561487d8d2f.roa
Signing time:             Thu 23 Sep 2021 23:09:20 +0000
ROA not before:           Thu 23 Sep 2021 03:00:00 +0000
ROA not after:            Sat 23 Sep 2023 03:00:00 +0000
asID:                     52245
IP address blocks:        186.148.104.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1152137 (0x119489)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d21f7315b565f88e18de69169de5a1119c25988f
        Validity
            Not Before: Sep 23 03:00:00 2021 GMT
            Not After : Sep 23 03:00:00 2023 GMT
        Subject: CN=5ec4c5bcd5a00bfbf087d283893ad561487d8d2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:dd:67:31:5e:43:f4:9a:88:95:d9:a8:b5:f5:
                    c5:98:ca:25:2f:49:54:4f:aa:53:85:39:59:1c:72:
                    7b:4d:5a:fe:2b:96:8b:3c:bf:08:c8:bf:d9:da:8c:
                    09:39:ae:dc:a7:41:dc:31:3a:41:d2:90:67:10:9c:
                    70:99:80:d0:61:4f:3b:ec:0c:f1:0d:b7:62:6e:95:
                    ad:b3:e5:a0:a2:a1:07:9a:a7:01:66:ce:60:ac:6e:
                    06:ba:86:41:2e:b6:86:96:42:a1:57:33:d9:e1:68:
                    40:4a:36:27:1c:94:90:2a:19:d3:6e:48:9a:cc:fe:
                    97:79:f6:cb:48:dc:b7:5b:d0:db:a1:6c:ef:f5:2b:
                    33:79:38:7b:10:96:32:18:44:e8:a4:d3:49:59:3b:
                    37:5b:3b:3f:64:b8:be:6d:c5:86:ed:94:26:40:39:
                    03:81:40:d2:f8:b9:21:b8:e4:a0:12:e8:66:4e:68:
                    51:27:41:ff:f9:b3:5f:84:71:6a:dc:7e:a2:35:b1:
                    c0:66:97:07:ab:55:b7:c8:7a:65:b9:80:96:85:5d:
                    83:f6:0a:3e:38:9a:cc:e6:dc:da:75:3c:f9:94:37:
                    dc:a0:36:ea:1f:58:c0:e7:25:76:35:7d:d9:bf:f5:
                    c9:74:7f:a4:1e:50:70:75:02:70:52:13:f4:ac:ba:
                    e3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:7C:13:9E:A2:4A:87:2A:E0:28:C1:A8:97:A4:A2:F6:97:37:65:FE
            X509v3 Authority Key Identifier:
                keyid:9A:0B:7E:6F:2B:9E:A4:D9:78:9C:53:3D:D2:BE:7E:AD:01:C6:2D:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d21f7315b565f88e18de69169de5a1119c25988f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7026ef52-79b0-4fc9-b4fe-006e1d7be606/5ec4c5bcd5a00bfbf087d283893ad561487d8d2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7026ef52-79b0-4fc9-b4fe-006e1d7be606/d21f7315b565f88e18de69169de5a1119c25988f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:63:75:ae:1c:4a:2d:45:41:17:a2:7e:8d:aa:80:64:fb:e2:
         79:2b:f6:66:62:d2:98:93:7a:a2:d3:c7:04:6f:a2:0b:80:c1:
         53:e5:dd:94:d1:55:58:a0:7c:1b:e6:ef:5e:b9:87:bd:1e:c0:
         d3:54:79:15:49:a5:f0:5c:c4:f6:47:22:07:d4:d9:cf:31:e4:
         8c:4a:35:ec:d2:23:ec:1e:82:2d:49:2d:1e:3d:b3:ea:f8:14:
         a6:25:ae:80:f5:54:74:c7:e0:0d:5e:b5:90:da:be:81:3b:af:
         91:33:a1:87:4d:37:bf:a7:a5:f1:5c:de:4c:99:dd:e5:74:24:
         7a:41:e9:6b:6a:df:32:50:40:3e:89:22:32:ac:19:90:72:e9:
         d9:fd:ec:26:8d:5f:b9:cc:54:4e:81:be:6b:bd:0f:e2:12:fb:
         ee:25:21:27:32:9a:b0:62:0b:82:ec:4a:79:90:de:51:ad:61:
         26:76:75:1e:86:53:bc:a2:fa:4a:2e:7d:9a:4a:0e:4a:5e:08:
         07:c7:8e:8a:86:3f:55:a2:22:8e:6a:7f:d2:4a:ba:90:ca:4d:
         3c:44:2e:c1:00:c6:48:56:24:7b:82:f9:bc:6b:93:e8:c6:3c:
         f6:1c:0c:a0:66:4f:d5:e6:6b:c9:a0:a3:0a:6c:73:56:96:07:
         50:15:09:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:50 2024 by rpki-client on console-fra.rpki-client.org