Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/fb6ecee5cbf7900f3ab8428f17b5b9fbc1f18e43.roa
File:                     fb6ecee5cbf7900f3ab8428f17b5b9fbc1f18e43.roa (raw, json)
Hash identifier:          /TL0m4THQ7s34yHw0QNVIE3edTeRBl1KQgz5gCpRfTE=
Subject key identifier:   2E:E8:4D:85:39:FD:24:80:AB:E0:25:A4:2A:09:D0:70:85:BE:C0:00
Certificate issuer:       /CN=7d666fc96c87b713c1f1fc6b289e51fae298a9ff
Certificate serial:       24E955
Authority key identifier: 34:46:15:53:3D:37:E7:7E:E5:71:C9:D2:95:48:61:E8:2C:FE:CF:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/fb6ecee5cbf7900f3ab8428f17b5b9fbc1f18e43.roa
Signing time:             Fri 13 Oct 2023 16:31:29 +0000
ROA not before:           Thu 12 Oct 2023 16:31:29 +0000
ROA not after:            Mon 13 Oct 2025 16:31:29 +0000
asID:                     262202
IP address blocks:        186.15.148.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2419029 (0x24e955)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d666fc96c87b713c1f1fc6b289e51fae298a9ff
        Validity
            Not Before: Oct 12 16:31:29 2023 GMT
            Not After : Oct 13 16:31:29 2025 GMT
        Subject: CN=fb6ecee5cbf7900f3ab8428f17b5b9fbc1f18e43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:bd:f9:17:4f:da:3f:a9:cc:3c:ce:0b:00:f3:
                    be:a7:47:51:db:4a:73:cf:94:b5:a6:13:b6:35:cf:
                    a9:ea:be:8c:23:96:19:36:02:44:21:7f:12:60:9e:
                    03:6f:f5:b4:f3:20:02:08:b3:6e:5b:ea:a6:f5:c2:
                    22:51:26:d8:0c:5b:99:23:b1:9e:eb:d0:4d:d0:31:
                    a0:81:48:c2:ab:f4:cb:c1:73:b1:d6:42:e5:da:08:
                    0c:c2:c5:9b:af:97:63:ac:7b:7a:bb:52:dd:71:4c:
                    b4:78:53:08:14:fa:2a:82:ce:0e:a4:12:f3:b0:7d:
                    da:a2:cf:8c:cf:c2:b8:0a:a8:32:01:ac:1d:fb:5a:
                    10:66:39:1a:76:ab:bd:9b:d8:96:e1:92:5f:f5:21:
                    c8:65:4c:5c:19:e5:a3:48:29:23:d6:99:22:42:27:
                    a0:e4:3d:db:ae:41:b6:f3:15:cf:f6:31:b6:36:0d:
                    32:6f:15:7b:8f:4c:d0:ce:50:8d:88:b5:99:c2:d0:
                    f7:ac:7f:fd:90:f7:15:54:a9:f3:a4:1b:f9:ab:09:
                    9d:e5:6e:46:b1:1e:9d:72:1f:e0:fc:f1:a9:99:12:
                    0b:44:eb:9e:0d:d2:b8:11:dd:e0:bb:30:83:61:0e:
                    e6:12:70:0d:82:71:90:ba:d4:8c:86:47:0c:45:dc:
                    a9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E8:4D:85:39:FD:24:80:AB:E0:25:A4:2A:09:D0:70:85:BE:C0:00
            X509v3 Authority Key Identifier:
                keyid:34:46:15:53:3D:37:E7:7E:E5:71:C9:D2:95:48:61:E8:2C:FE:CF:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/fb6ecee5cbf7900f3ab8428f17b5b9fbc1f18e43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.15.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:a6:54:08:81:5b:55:16:69:20:d5:66:2c:f8:74:b0:bd:3b:
         61:e5:be:02:75:b6:32:5c:80:df:8b:bd:6c:3a:5e:71:49:84:
         2e:f0:b8:ef:12:ed:b1:67:ac:7e:ad:ed:dd:62:c9:5e:8b:f2:
         ff:6b:7d:95:21:37:ff:14:57:79:4f:41:a8:1d:77:d6:05:ff:
         a1:31:a5:c6:84:a7:17:20:0a:d7:5d:3b:5f:6d:66:4f:42:a7:
         cc:41:f5:f6:d0:2b:44:eb:91:dc:7e:6d:95:a5:37:fc:3d:1f:
         15:41:8d:cf:44:fc:8a:c4:09:1f:c3:33:fb:94:d4:8e:ef:72:
         ac:1e:fd:fa:2b:0e:8c:ec:ac:10:6e:c8:e5:25:a7:20:c8:41:
         68:b2:ef:98:3d:ad:92:d9:8a:7f:26:c4:0a:3a:9c:20:18:b5:
         74:f4:0d:17:ea:c3:7c:8d:6f:ca:4e:7d:f4:c5:40:1c:fe:bb:
         59:0e:ea:33:78:f2:43:41:df:62:c6:1c:a6:7a:0c:66:1b:03:
         ba:a3:f5:4e:cf:89:e3:7c:ce:4d:d6:40:bc:df:d8:73:c7:f6:
         7a:20:f7:b2:8d:94:7d:89:9a:8b:70:56:12:01:42:cd:ac:90:
         9c:ea:e5:c0:f9:8d:86:74:13:ba:b5:e2:1f:62:4a:41:9e:76:
         bd:19:dc:de
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJOlVMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdk
NjY2ZmM5NmM4N2I3MTNjMWYxZmM2YjI4OWU1MWZhZTI5OGE5ZmYwHhcNMjMxMDEy
MTYzMTI5WhcNMjUxMDEzMTYzMTI5WjAzMTEwLwYDVQQDEyhmYjZlY2VlNWNiZjc5
MDBmM2FiODQyOGYxN2I1YjlmYmMxZjE4ZTQzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAg735F0/aP6nMPM4LAPO+p0dR20pzz5S1phO2Nc+p6r6MI5YZ
NgJEIX8SYJ4Db/W08yACCLNuW+qm9cIiUSbYDFuZI7Ge69BN0DGggUjCq/TLwXOx
1kLl2ggMwsWbr5djrHt6u1LdcUy0eFMIFPoqgs4OpBLzsH3aos+Mz8K4CqgyAawd
+1oQZjkadqu9m9iW4ZJf9SHIZUxcGeWjSCkj1pkiQieg5D3brkG28xXP9jG2Ng0y
bxV7j0zQzlCNiLWZwtD3rH/9kPcVVKnzpBv5qwmd5W5GsR6dch/g/PGpmRILROue
DdK4Ed3guzCDYQ7mEnANgnGQutSMhkcMRdyp+QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFC7oTYU5/SSAq+AlpCoJ0HCFvsAAMB8GA1UdIwQYMBaAFDRGFVM9N+d+5XHJ
0pVIYegs/s8mMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2Q2NjZm
Yzk2Yzg3YjcxM2MxZjFmYzZiMjg5ZTUxZmFlMjk4YTlmZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjUwNTRjMGYtMTk4YS00N2M2LWIxMTItMTUyZTM0
NjAyMzhjL2ZiNmVjZWU1Y2JmNzkwMGYzYWI4NDI4ZjE3YjViOWZiYzFmMThlNDMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yNTA1NGMwZi0xOThhLTQ3YzYtYjExMi0xNTJl
MzQ2MDIzOGMvN2Q2NjZmYzk2Yzg3YjcxM2MxZjFmYzZiMjg5ZTUxZmFlMjk4YTlm
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAroPlDANBgkqhkiG9w0BAQsFAAOCAQEAEaZUCIFbVRZpINVm
LPh0sL07YeW+AnW2MlyA34u9bDpecUmELvC47xLtsWesfq3t3WLJXovy/2t9lSE3
/xRXeU9BqB131gX/oTGlxoSnFyAK1107X21mT0KnzEH19tArROuR3H5tlaU3/D0f
FUGNz0T8isQJH8Mz+5TUju9yrB79+isOjOysEG7I5SWnIMhBaLLvmD2tktmKfybE
CjqcIBi1dPQNF+rDfI1vyk599MVAHP67WQ7qM3jyQ0HfYsYcpnoMZhsDuqP1Ts+J
43zOTdZAvN/Yc8f2eiD3so2UfYmai3BWEgFCzayQnOrlwPmNhnQTurXiH2JKQZ52
vRnc3g==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:03 2024 by rpki-client on console-fra.rpki-client.org