Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c5c64d06796c311aa7c6ac83eca39ff89d3e3896.roa
File:                     c5c64d06796c311aa7c6ac83eca39ff89d3e3896.roa (raw, json)
Hash identifier:          wgHqbUcr7bIKhuqfDvqxB7UPW8GEf6+i9on9SJnS+zA=
Subject key identifier:   B8:58:A0:76:A5:19:AA:2D:BB:DD:5E:85:80:72:00:94:7F:41:B5:3F
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       2A0A8F
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c5c64d06796c311aa7c6ac83eca39ff89d3e3896.roa
Signing time:             Thu 30 Nov 2023 15:34:46 +0000
ROA not before:           Thu 30 Nov 2023 15:34:46 +0000
ROA not after:            Sun 30 Nov 2025 15:34:46 +0000
asID:                     14080
IP address blocks:        186.146.249.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2755215 (0x2a0a8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Nov 30 15:34:46 2023 GMT
            Not After : Nov 30 15:34:46 2025 GMT
        Subject: CN=c5c64d06796c311aa7c6ac83eca39ff89d3e3896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fd:4d:b4:7f:6e:12:be:e6:f1:c8:72:a2:9d:
                    98:58:4e:c0:07:ff:0c:66:3d:c6:99:b2:18:e6:2d:
                    e2:0b:de:0c:01:3c:74:7d:5d:c5:57:e6:d5:34:17:
                    e5:cb:69:37:cf:8f:cd:92:38:e1:29:8e:a3:38:57:
                    95:12:41:fc:71:19:1c:a7:dd:0c:cc:ae:c6:04:65:
                    0e:dc:0b:fc:08:f4:cc:bd:d6:62:5f:b1:60:28:6c:
                    84:5b:c6:56:89:d1:79:7d:d6:47:e3:d2:98:f4:cc:
                    cd:29:96:82:07:75:1c:b9:45:d7:c1:6c:2e:0c:5e:
                    d8:70:07:e1:c7:4c:ca:49:eb:61:77:59:7e:ed:0a:
                    b1:cf:83:c6:52:44:b0:a5:e1:a2:ea:67:62:9f:16:
                    bb:c1:6b:30:03:a4:bb:08:83:35:24:6a:66:39:53:
                    c1:bb:5e:b7:51:14:cc:a2:20:ca:23:52:2b:93:3f:
                    eb:23:c0:cd:68:4d:5a:51:d5:6a:b2:0a:43:e6:ec:
                    1d:ed:55:a0:9c:03:d8:fd:ea:8b:86:f6:0d:fe:37:
                    74:24:52:1f:26:fc:d9:c1:7d:3c:a6:1d:83:ac:96:
                    e9:60:c7:b2:11:31:24:8d:e4:23:fb:af:68:f5:ab:
                    af:9c:b2:f0:b4:12:ce:02:e6:89:3f:1a:88:d6:2d:
                    77:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:58:A0:76:A5:19:AA:2D:BB:DD:5E:85:80:72:00:94:7F:41:B5:3F
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c5c64d06796c311aa7c6ac83eca39ff89d3e3896.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.146.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:df:05:27:26:98:af:da:c2:35:3f:9c:69:29:db:4d:32:2c:
         5e:02:cd:49:e8:20:fc:71:77:2a:f3:0c:a0:cc:c3:1e:e5:26:
         c6:0b:00:41:bf:37:9d:b9:dd:b6:e5:b8:8b:3e:9f:4a:3d:8a:
         a5:7f:c9:7c:e9:d9:0f:e3:9b:dd:16:ed:84:65:2f:b0:03:22:
         71:90:99:09:b3:4c:93:a4:22:0e:8f:a8:82:18:5e:a0:de:17:
         e0:03:53:ee:54:07:80:3f:a7:e6:e0:4c:cd:df:b1:76:14:ac:
         6b:e0:00:2a:7d:99:a3:09:16:c9:b2:d5:a0:a4:38:45:49:f1:
         77:8c:00:b1:6b:b2:81:68:18:ae:ae:20:5e:c8:54:9f:d8:1c:
         cd:08:5d:93:7d:54:37:8e:2d:9c:37:24:0b:b7:a3:3e:f5:31:
         63:59:77:38:37:d8:72:5d:b8:47:23:10:86:a8:d8:8e:50:cd:
         8b:5b:86:f4:21:87:4b:81:ce:bd:43:4d:a5:a3:21:c3:a2:a7:
         25:49:a3:77:c2:18:7c:21:3d:9a:1b:d5:c2:e9:79:a7:0c:0b:
         66:71:8a:df:b5:dc:6d:b9:46:20:43:22:88:0e:57:78:65:fd:
         89:81:de:8b:b2:84:12:7e:78:99:f1:d4:7d:5b:8b:db:bd:59:
         85:a3:a2:e4
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDKgqPMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
ZjY4ZWNkMzg5NmIzMjg4ZjgzYzI5YTJjM2RhNDRjODIxYzc2ODQwHhcNMjMxMTMw
MTUzNDQ2WhcNMjUxMTMwMTUzNDQ2WjAzMTEwLwYDVQQDEyhjNWM2NGQwNjc5NmMz
MTFhYTdjNmFjODNlY2EzOWZmODlkM2UzODk2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqf1NtH9uEr7m8chyop2YWE7AB/8MZj3GmbIY5i3iC94MATx0
fV3FV+bVNBfly2k3z4/NkjjhKY6jOFeVEkH8cRkcp90MzK7GBGUO3Av8CPTMvdZi
X7FgKGyEW8ZWidF5fdZH49KY9MzNKZaCB3UcuUXXwWwuDF7YcAfhx0zKSethd1l+
7Qqxz4PGUkSwpeGi6mdinxa7wWswA6S7CIM1JGpmOVPBu163URTMoiDKI1Irkz/r
I8DNaE1aUdVqsgpD5uwd7VWgnAPY/eqLhvYN/jd0JFIfJvzZwX08ph2DrJbpYMey
ETEkjeQj+69o9auvnLLwtBLOAuaJPxqI1i13CwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLhYoHalGaotu91ehYByAJR/QbU/MB8GA1UdIwQYMBaAFKhzgywDCRS4/QD1
P69G5JXZcRs8MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzFmNjhl
Y2QzODk2YjMyODhmODNjMjlhMmMzZGE0NGM4MjFjNzY4NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDI0MTliOTItZmJiYS00MDRiLWEyMjktZjM4NjVk
NTdhNDZhL2M1YzY0ZDA2Nzk2YzMxMWFhN2M2YWM4M2VjYTM5ZmY4OWQzZTM4OTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wMjQxOWI5Mi1mYmJhLTQwNGItYTIyOS1mMzg2
NWQ1N2E0NmEvYzFmNjhlY2QzODk2YjMyODhmODNjMjlhMmMzZGE0NGM4MjFjNzY4
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALqS+TANBgkqhkiG9w0BAQsFAAOCAQEAKN8FJyaYr9rCNT+c
aSnbTTIsXgLNSegg/HF3KvMMoMzDHuUmxgsAQb83nbndtuW4iz6fSj2KpX/JfOnZ
D+Ob3RbthGUvsAMicZCZCbNMk6QiDo+oghheoN4X4ANT7lQHgD+n5uBMzd+xdhSs
a+AAKn2ZowkWybLVoKQ4RUnxd4wAsWuygWgYrq4gXshUn9gczQhdk31UN44tnDck
C7ejPvUxY1l3ODfYcl24RyMQhqjYjlDNi1uG9CGHS4HOvUNNpaMhw6KnJUmjd8IY
fCE9mhvVwul5pwwLZnGK37XcbblGIEMiiA5XeGX9iYHei7KEEn54mfHUfVuL271Z
haOi5A==
-----END CERTIFICATE-----
Generated at Sun Mar 17 19:15:18 2024 by rpki-client on console-fra.rpki-client.org