Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/83dc74ac758d270e367accfd6954e2688fab2cdb.roa
File:                     83dc74ac758d270e367accfd6954e2688fab2cdb.roa (raw, json)
Hash identifier:          vIbri6vIDGhpTFeJp5lg42DZKL2cKdZUaTK38TXtnEk=
Subject key identifier:   A2:E9:6D:24:5F:C1:12:95:F5:AA:75:0F:95:59:15:7C:A9:5F:B2:7C
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       2A0E34
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/83dc74ac758d270e367accfd6954e2688fab2cdb.roa
Signing time:             Thu 30 Nov 2023 15:35:17 +0000
ROA not before:           Thu 30 Nov 2023 15:35:17 +0000
ROA not after:            Sun 30 Nov 2025 15:35:17 +0000
asID:                     14080
IP address blocks:        186.146.250.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2756148 (0x2a0e34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Nov 30 15:35:17 2023 GMT
            Not After : Nov 30 15:35:17 2025 GMT
        Subject: CN=83dc74ac758d270e367accfd6954e2688fab2cdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c0:bd:b4:14:d0:ec:7b:14:70:d2:a9:75:01:
                    39:e1:84:af:a3:64:4d:41:0f:fe:29:cf:81:5e:1e:
                    44:cb:6d:39:8c:2f:6d:03:5a:d2:21:99:cd:86:bc:
                    48:fa:ad:2b:72:25:65:e0:13:92:3d:04:b3:e4:ae:
                    e4:c9:61:a1:5c:b1:17:b5:07:ca:d9:e3:40:c8:e4:
                    63:91:ba:8b:a3:fb:5b:57:68:f4:95:71:8e:6f:95:
                    d2:f4:e9:3f:ad:50:d4:fa:38:65:62:31:27:b9:de:
                    fd:6a:64:55:eb:2d:aa:22:80:fc:27:96:ca:e7:b6:
                    d8:da:bc:93:c6:88:f3:ea:44:1c:1d:54:cf:67:0f:
                    4c:f0:57:84:b5:6b:54:a2:b2:43:bb:ba:8f:85:9a:
                    3d:13:85:86:59:cb:fb:7c:e0:9d:d0:ea:b4:b7:f6:
                    4b:22:93:45:36:7d:c3:5c:af:af:b2:fa:44:8d:93:
                    12:44:5e:6b:53:bb:3a:de:d1:1f:00:b1:73:aa:6f:
                    79:ec:d4:07:2b:c8:8c:41:7e:61:53:a6:a0:fd:9f:
                    0e:cb:83:13:63:b5:52:23:bb:9b:3b:63:fc:ec:67:
                    0a:cb:95:73:90:e7:0b:c8:52:cc:5e:a9:55:90:b2:
                    50:60:fa:db:ce:30:ed:4e:00:f5:32:66:60:e4:1a:
                    6e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:E9:6D:24:5F:C1:12:95:F5:AA:75:0F:95:59:15:7C:A9:5F:B2:7C
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/83dc74ac758d270e367accfd6954e2688fab2cdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.146.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:69:7b:b8:d1:f6:27:b2:45:7d:01:48:eb:0b:25:46:ed:20:
         cc:56:9b:1b:56:2a:ef:42:f5:52:2e:6b:be:34:91:ff:08:3e:
         7f:2c:79:6b:7a:7d:75:7f:62:05:3b:c4:da:d6:6f:a6:96:9a:
         72:44:8c:53:ce:0e:18:ca:3f:53:82:0a:f4:b6:df:1b:a3:39:
         c2:9f:bc:af:50:0a:db:46:3d:66:c4:3a:30:ab:b6:96:7e:19:
         ba:d4:a1:21:7a:0d:ea:ce:59:b3:97:ea:bb:2f:13:d1:ca:74:
         bb:86:a9:45:24:2d:28:0b:99:05:e2:2a:5a:f4:31:37:ca:36:
         aa:ad:0e:4a:61:dc:4b:80:84:cc:ab:6d:55:63:e4:5e:da:be:
         06:24:da:f7:a4:ed:68:cf:8c:86:5b:98:3e:b3:51:44:a7:31:
         38:a2:cb:6f:eb:91:b6:c8:41:44:f4:9e:ca:49:ca:09:ef:87:
         f7:91:15:ef:e1:ba:4a:98:d7:90:ff:57:ab:70:dc:3e:ad:c1:
         6c:79:c4:0a:a9:ae:4c:14:99:27:0f:07:ec:40:f3:3e:9c:42:
         35:31:3d:ac:0e:3f:dd:f4:1f:27:5b:db:94:3e:ba:60:3a:b2:
         fa:4e:c3:92:bc:68:fe:f8:c3:41:df:8a:13:e8:f1:65:74:88:
         e3:83:08:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 17 19:24:31 2024 by rpki-client on console-ams.rpki-client.org