Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/09f6c70b3c44fa1728c69e744f5faa14f7f79e7b.roa
File:                     09f6c70b3c44fa1728c69e744f5faa14f7f79e7b.roa (raw, json)
Hash identifier:          /9yZXxLyJJ3EeYpEHRMk5JUzQVzcfQSGLnJ+FcqfszU=
Subject key identifier:   D6:29:6C:8C:3A:DD:50:FF:5C:3F:74:CA:2F:4E:35:26:97:5D:7A:F1
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       183A8F
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/09f6c70b3c44fa1728c69e744f5faa14f7f79e7b.roa
Signing time:             Tue 01 Feb 2022 17:12:13 +0000
ROA not before:           Thu 18 Nov 2021 03:00:00 +0000
ROA not after:            Thu 18 Nov 2060 03:00:00 +0000
asID:                     14080
IP address blocks:        186.82.62.0/23 maxlen: 23
                          190.158.112.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1587855 (0x183a8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Nov 18 03:00:00 2021 GMT
            Not After : Nov 18 03:00:00 2060 GMT
        Subject: CN=09f6c70b3c44fa1728c69e744f5faa14f7f79e7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ab:60:16:a1:7b:d7:70:c2:08:cb:55:d0:7a:
                    88:99:cb:5d:87:f3:24:c8:3e:5f:92:a3:31:e6:6b:
                    b9:1a:8c:8d:16:fc:bc:14:4c:70:30:62:6a:d7:03:
                    0d:53:f9:bb:1f:b0:df:ac:d3:2e:9f:0c:bf:2e:fd:
                    b0:1a:c1:a9:95:7c:83:b4:2f:ca:46:ff:2d:9a:a3:
                    d9:86:a5:d7:97:06:7a:33:46:a6:d4:01:da:ca:c4:
                    6e:e5:ec:d8:88:aa:df:46:94:81:de:17:23:4d:45:
                    ba:e2:96:15:ec:22:a8:5e:73:6e:a1:b4:5d:f0:3b:
                    3b:d1:1e:e2:0d:f8:98:6b:d3:46:53:fe:6c:d0:c9:
                    a7:fc:79:38:b8:ef:94:18:77:5c:cb:ae:3e:d6:9b:
                    c6:23:51:ba:e4:65:f6:d6:9b:9e:f8:d7:55:64:a7:
                    19:d0:58:c7:d8:ba:7f:0d:c2:e4:8a:64:e2:61:1f:
                    7d:e1:5d:fb:07:90:b9:45:89:76:21:47:cc:f3:6e:
                    fe:9f:c7:dd:eb:60:b9:17:68:72:4a:59:2b:cf:75:
                    00:c5:74:a6:0d:29:e0:10:b1:3e:a9:e1:b7:22:2d:
                    05:a8:6c:fc:ea:bd:b9:27:3c:ff:1d:20:86:eb:4e:
                    64:d8:46:07:c3:07:d9:47:eb:49:ef:07:e4:ca:38:
                    14:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:29:6C:8C:3A:DD:50:FF:5C:3F:74:CA:2F:4E:35:26:97:5D:7A:F1
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/09f6c70b3c44fa1728c69e744f5faa14f7f79e7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.82.62.0/23
                  190.158.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:bf:75:89:84:96:03:c9:ed:97:47:9c:bc:7f:db:fb:c5:ee:
         ea:4b:d8:a5:dc:60:23:b0:49:f0:a8:40:50:e3:42:d8:47:79:
         bb:1e:e5:db:d7:ea:5a:56:50:4f:c0:ba:ee:03:04:4d:c1:ea:
         29:60:51:b8:d4:92:37:67:e6:02:11:02:cc:5b:d0:31:5f:49:
         3b:a3:86:2d:df:5c:80:97:c1:38:72:23:90:da:e7:ee:22:b3:
         95:4b:1c:fa:95:ca:2b:30:5c:8e:3c:d7:e9:2b:d8:ad:01:a7:
         09:63:09:e9:13:72:49:ec:a5:10:b2:f0:cc:f9:e4:b2:74:5d:
         79:e7:e7:8d:3b:8a:d4:eb:43:d4:67:1e:b1:b8:bb:23:a9:04:
         ea:27:67:c3:7a:5e:ae:28:0d:b0:01:fa:c0:fd:44:f4:e5:33:
         5a:da:aa:32:42:d0:25:13:09:7c:d9:d8:53:33:f0:90:d9:64:
         66:d4:21:f2:59:20:5f:d2:ba:63:03:1c:f7:6a:92:73:2d:40:
         12:e8:a7:78:12:3d:ca:05:4c:82:0e:90:76:2b:d2:a9:06:9c:
         59:80:30:cc:46:b4:4f:2e:dc:ae:e7:09:f6:4f:90:9d:38:83:
         9a:9b:37:ea:47:48:05:5d:b8:d1:08:43:06:65:54:91:98:f1:
         67:40:10:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:17 2024 by rpki-client on console-fra.rpki-client.org