Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3259ecc0-da3f-4b95-810a-d3774e7dca64/0c1186b6b3f80cea9822914bf26172f7d187fa47.roa
File:                     0c1186b6b3f80cea9822914bf26172f7d187fa47.roa (raw, json)
Hash identifier:          3jaw/dj3Qq3xxfcVPOxDa7aKAbvyc6NlH6Llkdg/Pc4=
Subject key identifier:   F4:34:4D:FD:3C:D3:47:BE:80:B7:5E:20:F0:75:A9:EB:0E:EC:44:06
Certificate issuer:       /CN=e676b8ddc3fa11ce4b5bb1513584be10d9033c41
Certificate serial:       245123
Authority key identifier: CB:58:61:19:F8:B0:A1:1C:E7:AB:9E:E1:7A:57:B5:2F:CE:5B:3E:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e676b8ddc3fa11ce4b5bb1513584be10d9033c41.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3259ecc0-da3f-4b95-810a-d3774e7dca64/0c1186b6b3f80cea9822914bf26172f7d187fa47.roa
Signing time:             Tue 17 Oct 2023 07:30:01 +0000
ROA not before:           Mon 16 Oct 2023 07:30:01 +0000
ROA not after:            Wed 15 Oct 2025 07:30:01 +0000
asID:                     14259
IP address blocks:        170.150.140.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2380067 (0x245123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e676b8ddc3fa11ce4b5bb1513584be10d9033c41
        Validity
            Not Before: Oct 16 07:30:01 2023 GMT
            Not After : Oct 15 07:30:01 2025 GMT
        Subject: CN=0c1186b6b3f80cea9822914bf26172f7d187fa47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:17:79:16:c2:c4:0f:49:d3:12:9e:1c:11:11:
                    5c:5b:c1:39:0b:92:10:d6:05:77:78:1a:ce:51:03:
                    9a:a1:0f:45:d4:61:dc:84:e4:66:b9:7d:90:3b:25:
                    ab:3a:f6:37:10:1b:09:7c:8f:01:09:56:d7:80:80:
                    4b:57:f5:7f:f7:cf:ff:41:de:5a:e4:3c:e7:00:e9:
                    5b:f9:c6:e4:20:46:7d:36:cf:4b:1d:78:d9:a5:4d:
                    6c:10:bd:5e:13:8c:49:5f:b4:b1:f0:65:5f:26:d5:
                    14:48:cf:a5:30:80:3a:24:46:49:63:11:7c:41:d9:
                    0d:5f:59:e6:d6:ff:08:da:a4:a7:f0:c4:ef:42:10:
                    c4:be:fa:e9:8c:5b:f3:6b:dc:c7:57:28:c6:d2:f3:
                    b3:0d:f8:e9:ae:d4:f0:67:34:a2:3e:51:33:96:a1:
                    62:13:ed:6e:bc:60:31:1d:9f:b9:e2:fb:b8:1f:d5:
                    80:82:07:39:53:71:9f:f9:2d:7d:26:7b:82:7a:21:
                    cb:dc:1a:a7:48:2f:b1:c5:41:a0:94:2d:17:19:b6:
                    64:37:5f:7a:8e:ef:b4:7b:66:c8:c0:32:e2:12:0e:
                    e7:ea:57:9f:ce:b1:15:f9:5d:21:c6:23:35:3e:34:
                    56:7b:9d:b0:3c:dd:a8:63:23:d8:2c:db:03:8a:d5:
                    57:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:34:4D:FD:3C:D3:47:BE:80:B7:5E:20:F0:75:A9:EB:0E:EC:44:06
            X509v3 Authority Key Identifier:
                keyid:CB:58:61:19:F8:B0:A1:1C:E7:AB:9E:E1:7A:57:B5:2F:CE:5B:3E:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e676b8ddc3fa11ce4b5bb1513584be10d9033c41.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3259ecc0-da3f-4b95-810a-d3774e7dca64/0c1186b6b3f80cea9822914bf26172f7d187fa47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3259ecc0-da3f-4b95-810a-d3774e7dca64/e676b8ddc3fa11ce4b5bb1513584be10d9033c41.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:2f:b2:23:db:ad:a6:70:fd:95:f3:7d:13:a7:7c:00:db:99:
         54:b1:bf:5f:bd:69:0c:55:f1:d2:c7:dd:ad:e5:4c:c6:92:c6:
         ef:ad:85:e9:9e:de:72:b1:b2:26:b0:21:71:9f:54:ef:fe:c1:
         3d:f6:45:cc:fd:b9:41:5e:b6:c0:0f:bf:a6:24:d6:18:8b:0f:
         e7:66:42:30:37:ad:6c:10:b4:dc:ca:e7:04:18:55:2b:21:f7:
         4a:be:82:6e:54:82:4d:fc:f9:b5:88:7e:0c:93:27:5e:d6:9c:
         94:2a:f7:a9:15:3a:37:ac:de:6b:bd:38:c6:f8:2c:53:a9:6a:
         97:1a:e1:2f:3a:6b:e0:fe:86:e0:72:1c:a3:24:51:f0:c7:c1:
         f9:4d:75:cd:fb:e3:1f:0a:b6:fe:97:21:0f:7c:e8:0a:42:34:
         0f:4a:a1:e3:4c:4c:2d:46:ee:9e:c8:db:75:af:34:5d:f6:0d:
         03:84:37:fa:2e:aa:07:d6:0a:f9:1c:2b:65:af:ed:a6:4a:ca:
         7c:c6:aa:38:79:86:a3:d3:94:71:5c:6b:52:b7:1b:a9:9c:db:
         9e:03:d2:30:cb:3e:a5:3b:99:4c:13:92:ad:58:18:f9:98:f0:
         11:19:71:3a:13:3d:df:ba:41:10:b5:51:98:d2:6e:e0:dd:92:
         23:a0:38:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:19 2024 by rpki-client on console-ams.rpki-client.org