Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/084458bc-7e17-4691-abed-a119bafdcca3/0bc6306eb6a82827c9a5bfe0213eb9c89505c358.roa
File:                     0bc6306eb6a82827c9a5bfe0213eb9c89505c358.roa (raw, json)
Hash identifier:          S+5AIi5wnUVKFsjAB6zIdIbLEIOTKVw30OK9rFTFZKo=
Subject key identifier:   CF:64:99:07:E2:26:61:82:0C:4D:40:C3:EA:4C:AF:6B:9F:46:84:55
Certificate issuer:       /CN=2c52eb2f56a05cf45070d5c3aa85d4d1f73b2c4e
Certificate serial:       1DC5CD
Authority key identifier: CC:0F:5B:B3:8F:97:11:01:00:2C:63:CD:E6:8F:60:27:29:AC:61:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2c52eb2f56a05cf45070d5c3aa85d4d1f73b2c4e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/084458bc-7e17-4691-abed-a119bafdcca3/0bc6306eb6a82827c9a5bfe0213eb9c89505c358.roa
Signing time:             Tue 17 Oct 2023 16:01:08 +0000
ROA not before:           Mon 16 Oct 2023 16:01:08 +0000
ROA not after:            Fri 17 Oct 2025 16:01:08 +0000
asID:                     270006
IP address blocks:        187.102.208.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1951181 (0x1dc5cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c52eb2f56a05cf45070d5c3aa85d4d1f73b2c4e
        Validity
            Not Before: Oct 16 16:01:08 2023 GMT
            Not After : Oct 17 16:01:08 2025 GMT
        Subject: CN=0bc6306eb6a82827c9a5bfe0213eb9c89505c358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7e:4b:39:40:a2:50:fd:f3:ee:ea:a6:d4:7e:
                    7a:e4:a6:76:14:9b:5e:89:61:e0:05:a4:57:3b:18:
                    b6:d0:5f:19:44:78:62:5d:6b:eb:ef:73:08:f6:d1:
                    90:e2:0c:e2:59:38:0b:1a:28:4c:53:d4:84:18:5d:
                    19:b9:ca:52:94:ac:38:03:77:66:33:54:2a:f8:7f:
                    49:45:13:a2:e6:ab:67:79:0a:a5:92:0f:71:fd:b8:
                    ed:42:64:2c:a3:9e:30:8c:6c:e9:76:a6:bc:43:e6:
                    d8:8c:89:7a:87:92:66:7e:ae:d8:c9:38:ad:9d:63:
                    85:d8:7c:5a:b7:c6:37:72:77:b6:32:44:b2:12:d0:
                    1f:cc:80:1a:48:77:79:f1:0b:13:97:59:f5:67:5e:
                    d6:fb:fd:dc:fe:80:a8:07:84:90:56:a5:70:7c:02:
                    7a:a2:d3:3a:56:7e:86:13:23:29:f8:73:a7:1d:4b:
                    51:5a:5f:86:e6:52:48:a1:b4:3b:18:e9:4e:f3:c5:
                    dc:72:05:fd:4a:43:b5:a2:83:23:50:67:ac:70:bb:
                    1e:ef:2b:ad:6d:be:4f:14:d1:ce:97:44:ae:01:c4:
                    eb:df:fb:8b:98:c6:fb:7c:68:e2:51:2b:de:e5:c6:
                    42:c7:bc:58:c8:e1:03:8d:c4:9a:ff:03:6e:c4:17:
                    84:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:64:99:07:E2:26:61:82:0C:4D:40:C3:EA:4C:AF:6B:9F:46:84:55
            X509v3 Authority Key Identifier:
                keyid:CC:0F:5B:B3:8F:97:11:01:00:2C:63:CD:E6:8F:60:27:29:AC:61:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2c52eb2f56a05cf45070d5c3aa85d4d1f73b2c4e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/084458bc-7e17-4691-abed-a119bafdcca3/0bc6306eb6a82827c9a5bfe0213eb9c89505c358.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/084458bc-7e17-4691-abed-a119bafdcca3/2c52eb2f56a05cf45070d5c3aa85d4d1f73b2c4e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:0a:82:bf:9e:32:a2:c8:6f:3f:ad:4e:de:60:a9:28:d2:83:
         f5:0b:7c:fc:95:6a:ef:ac:8d:9b:9b:b7:1d:3d:d6:21:39:a2:
         92:6d:cc:6b:bc:c4:a5:f6:81:49:c1:66:d1:d8:a0:ba:20:a1:
         15:90:90:bc:4e:ad:96:10:f1:a7:c9:d7:9e:fc:e6:12:6b:c2:
         b0:af:30:bb:b5:8c:ce:1e:b8:50:08:c2:72:cc:bb:71:c4:6b:
         9d:e6:bc:4c:b4:b7:83:02:67:df:11:ce:6e:4f:d0:61:22:51:
         c9:91:97:62:97:d6:41:8c:57:2f:e3:9d:6d:bb:af:7f:fe:9d:
         2a:bd:74:7a:91:d8:6a:c9:a0:0f:7d:22:a6:20:0f:53:74:fd:
         ba:58:fb:c2:2c:f4:bf:12:98:5f:4f:39:68:8c:71:35:2f:cb:
         b9:25:9b:34:76:1f:cd:db:fa:33:e6:60:2a:ac:a9:4c:49:b5:
         18:60:5c:19:4c:4a:f0:a4:46:8a:51:5c:86:b6:e0:38:15:57:
         3b:f1:cb:17:69:db:6b:ff:63:72:42:af:7b:aa:fc:2b:64:0a:
         4e:33:50:d5:42:21:96:f4:f4:96:d1:20:bd:ed:06:fb:c8:53:
         36:cf:ad:7e:0a:d4:13:92:58:75:d0:51:a0:0f:15:e0:65:0a:
         a7:27:2e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:01 2024 by rpki-client on console-fra.rpki-client.org