Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/35737f692d4ab9525e14412c37b5ce2b7e560b93.roa
File:                     35737f692d4ab9525e14412c37b5ce2b7e560b93.roa (raw, json)
Hash identifier:          ezPFsroXuxW7YnxgbivI0zuhqvKatSZfSWdeDbuEOHA=
Subject key identifier:   8F:49:D6:AD:09:FB:0D:AB:D3:5A:B1:41:2D:C7:4D:D9:69:16:06:BF
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       248048
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/35737f692d4ab9525e14412c37b5ce2b7e560b93.roa
Signing time:             Thu 27 Apr 2023 22:47:05 +0000
ROA not before:           Wed 26 Apr 2023 22:47:05 +0000
ROA not after:            Sun 27 Apr 2025 22:47:05 +0000
asID:                     14080
IP address blocks:        186.87.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2392136 (0x248048)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Apr 26 22:47:05 2023 GMT
            Not After : Apr 27 22:47:05 2025 GMT
        Subject: CN=35737f692d4ab9525e14412c37b5ce2b7e560b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:17:cc:ec:d7:4f:cd:b4:82:86:29:e2:02:57:
                    bb:76:1f:22:ef:fc:b5:eb:fa:15:ef:c1:9d:e3:55:
                    fa:61:ab:4f:72:09:53:4a:d3:34:ad:de:fe:2b:d1:
                    9b:db:cf:81:16:34:c6:e5:26:f7:29:bc:ea:9d:97:
                    0d:e6:85:fa:84:b3:86:00:bf:ab:bb:b5:da:a3:e7:
                    df:76:73:aa:41:75:78:f5:78:80:2f:e2:2c:97:37:
                    b3:db:d3:15:0a:db:1a:16:e4:f7:7c:b3:e1:5b:e0:
                    8f:3d:d7:cc:d6:f4:32:ea:9b:b0:a6:a4:0d:e9:e2:
                    54:b8:ac:40:ac:71:44:8c:58:29:0e:a7:03:c2:1d:
                    3a:3b:d0:6e:02:1b:65:38:5b:a5:8b:e6:e3:1b:0b:
                    25:ee:bc:eb:a9:97:86:0b:ba:19:08:7f:5c:ff:12:
                    20:c6:ea:68:56:7d:f0:4e:27:e8:e4:0b:c8:60:f4:
                    9d:ad:3c:89:3a:1d:97:52:0d:d4:4c:b5:0e:8f:36:
                    b8:93:f6:0a:69:ea:1e:4d:6b:cd:d8:28:29:49:3a:
                    a8:87:0a:8f:17:16:d9:89:a0:e3:b4:db:af:e2:90:
                    2e:bb:05:6b:58:6a:c0:7c:61:99:b0:93:98:41:9a:
                    9a:0d:57:29:4d:ec:5b:67:1f:34:6c:b5:9c:dd:57:
                    0f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:49:D6:AD:09:FB:0D:AB:D3:5A:B1:41:2D:C7:4D:D9:69:16:06:BF
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/35737f692d4ab9525e14412c37b5ce2b7e560b93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.87.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:01:4a:c4:55:57:0a:b0:06:cb:b5:e7:07:93:13:b5:06:d6:
         38:71:90:2b:4b:fd:47:4b:d2:a4:27:33:84:8d:bd:ed:01:f8:
         83:38:33:56:62:77:de:c0:2c:12:d6:0b:41:5a:39:92:41:ee:
         f6:4d:dd:f7:c6:4b:8e:1b:3b:0e:ca:20:7c:fe:06:39:c5:09:
         b7:ee:97:73:80:ba:c3:c2:1f:2a:6b:5a:9b:14:80:4d:a9:9e:
         e2:88:ba:74:3f:2d:86:e6:49:b6:a2:b7:38:02:27:c1:7d:3b:
         76:de:4c:ef:67:a5:0f:92:0a:78:17:2c:d0:c0:91:ec:53:0e:
         c2:8e:e6:bf:b1:da:cd:1c:c6:ef:92:4e:26:0b:3e:9d:bc:79:
         47:f1:00:4d:e6:f3:80:60:df:bc:4e:87:39:26:d5:66:e5:03:
         4f:74:f3:89:b4:cc:00:34:16:a9:d8:0e:09:35:05:27:9e:3e:
         2e:1a:0e:08:6c:a6:79:6e:ab:2a:15:ac:6d:d8:22:57:b6:91:
         fa:99:90:d4:2c:e5:25:9a:e4:e4:70:75:69:e8:e4:6a:97:4e:
         98:e5:37:35:16:b9:0c:85:e5:bd:70:3a:b0:83:b3:db:8f:5d:
         87:3b:01:d5:47:7c:22:b5:ac:ef:73:62:76:93:d1:8e:94:7c:
         50:f2:dd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 17 19:24:31 2024 by rpki-client on console-ams.rpki-client.org