Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/2c984a80a7504f93386f8b3a97adcce1204e5d36.roa
File:                     2c984a80a7504f93386f8b3a97adcce1204e5d36.roa (raw, json)
Hash identifier:          7sPQ3DWoO3dFFQh/phu9hZpKRhBtTRh8HjbEUCK40/I=
Subject key identifier:   35:A2:61:E0:16:4D:7F:D2:3F:BB:6D:06:2A:69:73:64:AA:A6:64:F4
Certificate issuer:       /CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Certificate serial:       19361D
Authority key identifier: 3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/2c984a80a7504f93386f8b3a97adcce1204e5d36.roa
Signing time:             Mon 18 Jul 2022 15:03:03 +0000
ROA not before:           Mon 18 Jul 2022 03:00:00 +0000
ROA not after:            Thu 18 Jul 2024 03:00:00 +0000
asID:                     265705
IP address blocks:        186.31.155.0/24 maxlen: 24
                          190.26.31.0/24 maxlen: 24
                          190.26.30.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1652253 (0x19361d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7855197f590ff298b52ab358da08a0fdbfe6a883
        Validity
            Not Before: Jul 18 03:00:00 2022 GMT
            Not After : Jul 18 03:00:00 2024 GMT
        Subject: CN=2c984a80a7504f93386f8b3a97adcce1204e5d36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:96:e7:f2:f8:49:08:6a:3c:44:13:f8:bd:92:
                    75:d5:5d:08:53:18:a4:31:23:d5:5f:93:6a:a7:8e:
                    b7:78:86:78:7a:bc:16:0d:39:bd:df:14:ff:6b:60:
                    11:f8:97:63:ad:6f:30:75:1d:3b:aa:bb:ae:dd:0a:
                    c7:33:89:d6:f7:36:7d:4f:3f:6a:e4:c7:27:dc:03:
                    e0:d8:75:c1:4c:5c:51:51:27:95:6d:fe:da:da:3d:
                    25:3c:4f:a1:e6:0c:b4:84:11:13:6c:53:79:ea:36:
                    2f:e2:00:ba:c4:bb:79:83:55:bc:b3:84:80:90:99:
                    28:0a:b2:4e:d9:ec:81:42:95:7f:9d:66:0a:b2:75:
                    f3:ba:a6:62:13:da:65:06:66:b3:59:78:94:7e:3c:
                    fa:da:82:d6:03:ca:ac:10:2b:01:8a:bc:55:9e:d0:
                    1b:90:b5:c4:09:ea:90:c1:e4:62:11:46:6e:4c:6e:
                    0f:3f:c8:b3:83:a5:66:87:cc:28:44:3a:f7:ed:30:
                    50:19:d0:d8:00:4e:08:3b:7e:d3:6f:f0:f6:0b:45:
                    36:2c:1f:ad:27:67:be:ec:48:ee:ab:c2:44:d2:e3:
                    aa:7b:05:ab:62:63:06:fe:af:26:71:7e:d0:22:9f:
                    4c:da:9c:ea:dd:d8:26:13:1e:7c:c4:b1:82:30:fc:
                    f6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A2:61:E0:16:4D:7F:D2:3F:BB:6D:06:2A:69:73:64:AA:A6:64:F4
            X509v3 Authority Key Identifier:
                keyid:3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/2c984a80a7504f93386f8b3a97adcce1204e5d36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7855197f590ff298b52ab358da08a0fdbfe6a883.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.31.155.0/24
                  190.26.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:01:ec:a3:f3:0d:28:b0:60:c6:cc:e5:77:ff:e4:71:3e:8a:
         cc:86:83:a0:b6:23:f8:57:5f:01:94:2f:ef:6a:09:25:56:52:
         f3:e3:08:1d:0f:1e:a0:03:a5:c9:7f:93:ec:88:20:27:58:42:
         f3:9b:b8:6d:4e:06:ab:3f:df:49:70:0e:ae:0a:05:f1:e8:95:
         35:f4:d8:a6:74:cf:51:cc:73:7e:6d:53:36:99:56:e3:4d:df:
         8c:a9:b7:f6:a7:c0:4e:39:af:73:e9:b1:cd:fc:71:4f:05:ef:
         23:d4:23:f0:23:81:0d:29:2d:af:02:22:96:86:86:dc:32:8a:
         64:f4:f9:8d:14:80:8c:0b:6d:d7:a1:24:38:6c:b0:1b:71:5a:
         1f:26:68:89:98:14:2d:bf:ea:e7:cd:6e:77:42:e5:f3:8f:e9:
         a9:d3:02:82:25:ff:9e:88:08:21:c2:8d:6c:fc:3b:9a:fb:76:
         06:94:fb:13:f3:12:b1:01:24:3b:ca:c0:c4:34:70:8c:e9:cd:
         d6:c7:d3:5d:85:7a:5c:6a:ef:e8:9e:e0:b1:45:58:1e:12:ef:
         a3:b4:90:36:23:d4:db:01:0c:f1:f0:5d:be:72:60:37:d7:82:
         62:21:a1:5a:34:c9:54:82:df:e5:fd:98:e2:87:34:3a:e3:9d:
         9a:f9:92:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:00 2024 by rpki-client on console-fra.rpki-client.org