Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/228ca612b5758e4e4b00f3646caeece97c76a817.roa
File:                     228ca612b5758e4e4b00f3646caeece97c76a817.roa (raw, json)
Hash identifier:          6J+hWGsyuDf8wOPeA7mZUgor6jNOWsl8rJDyWjoEFfE=
Subject key identifier:   F2:81:F5:EF:62:37:C7:28:D8:9C:09:47:B6:04:6F:AC:F0:FC:F8:F4
Certificate issuer:       /CN=4ba834aeb520331d21c768e13e7564e705630d2c
Certificate serial:       24D8D7
Authority key identifier: 4C:ED:9B:B7:64:90:46:BE:80:01:36:9C:9A:98:4E:BD:F7:E1:78:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba834aeb520331d21c768e13e7564e705630d2c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/228ca612b5758e4e4b00f3646caeece97c76a817.roa
Signing time:             Wed 06 Sep 2023 22:37:07 +0000
ROA not before:           Tue 05 Sep 2023 22:37:07 +0000
ROA not after:            Sat 06 Sep 2025 22:37:07 +0000
asID:                     52347
IP address blocks:        186.177.224.0/22 maxlen: 22
                          186.177.243.0/24 maxlen: 24
                          186.177.244.0/22 maxlen: 22
                          186.177.248.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2414807 (0x24d8d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba834aeb520331d21c768e13e7564e705630d2c
        Validity
            Not Before: Sep  5 22:37:07 2023 GMT
            Not After : Sep  6 22:37:07 2025 GMT
        Subject: CN=228ca612b5758e4e4b00f3646caeece97c76a817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a3:d9:e7:a3:90:94:eb:0a:47:57:ab:1f:c5:
                    40:c8:f4:67:72:8a:69:ea:77:e5:e4:f5:e1:ee:48:
                    90:62:8c:4e:2a:08:79:bf:5c:18:ea:ec:3d:55:84:
                    ea:13:11:ad:bd:61:c0:92:c0:24:f1:43:7f:44:56:
                    cf:cf:f8:89:05:d1:3e:a5:ea:f5:d7:38:00:41:d6:
                    24:5e:e5:f3:4e:6b:1f:55:17:d5:6a:59:51:81:73:
                    0c:46:ee:a7:fe:d8:a8:6b:3d:19:61:3b:39:67:b8:
                    ae:98:e6:33:ad:c0:2d:5d:b1:a9:25:0c:c9:f9:6f:
                    0f:f7:e7:96:0e:75:98:06:78:e8:d2:4d:01:a2:e2:
                    32:4e:47:29:c1:c2:04:df:df:90:bf:9f:e3:3e:1d:
                    c2:ba:f0:c7:5f:bf:d9:fb:0c:d7:32:f0:60:5f:29:
                    b1:c8:e6:da:b0:fd:18:41:49:3a:98:ec:96:47:a5:
                    67:95:24:c5:1f:a3:0b:4e:25:84:78:e0:ce:d5:61:
                    bb:da:e7:44:18:8a:e4:83:de:e3:bb:a4:5c:d3:b7:
                    d9:7c:b3:2c:fb:88:a8:48:f1:84:b2:5f:7d:b0:3a:
                    35:f3:03:a5:46:f5:88:78:3d:92:64:01:2c:24:15:
                    4a:61:dc:cf:c5:d2:28:75:bd:d5:da:a9:69:7d:f1:
                    9c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:81:F5:EF:62:37:C7:28:D8:9C:09:47:B6:04:6F:AC:F0:FC:F8:F4
            X509v3 Authority Key Identifier:
                keyid:4C:ED:9B:B7:64:90:46:BE:80:01:36:9C:9A:98:4E:BD:F7:E1:78:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba834aeb520331d21c768e13e7564e705630d2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/228ca612b5758e4e4b00f3646caeece97c76a817.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/4ba834aeb520331d21c768e13e7564e705630d2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.177.224.0/22
                  186.177.243.0-186.177.255.255

    Signature Algorithm: sha256WithRSAEncryption
         79:57:1b:32:b8:34:6b:38:1b:e7:27:25:37:78:56:26:56:8a:
         68:b0:29:6a:be:f4:e9:38:ab:86:43:01:f5:77:6d:0d:6e:52:
         91:6f:37:c0:ec:a6:3b:89:63:e3:c0:ad:b5:32:2c:fa:93:0a:
         96:37:2c:06:52:57:77:c8:a9:fb:b4:36:fc:9a:6a:67:ab:26:
         1b:7c:e8:d3:02:8f:97:45:65:76:64:6a:da:86:6f:49:33:50:
         cb:40:2b:99:53:fc:76:36:8b:ce:13:67:8a:6b:39:11:33:b3:
         85:f0:db:91:95:2c:15:dc:4d:45:99:34:35:6f:31:a7:1b:55:
         de:9a:69:16:07:31:4f:bc:6b:67:72:8f:d2:87:26:a1:cb:3b:
         e7:37:30:bd:cf:fb:dc:b5:ba:48:2d:b4:84:e6:90:39:a8:2d:
         b1:d8:f3:03:31:54:ec:d2:9a:e9:45:f5:88:90:de:26:91:5f:
         02:66:0a:90:a0:fb:3e:38:57:76:f1:09:3f:2b:94:72:24:aa:
         01:36:f2:07:3f:b9:23:ec:9f:39:71:ee:7c:4b:41:72:19:81:
         e3:f9:c4:3f:e5:03:d8:41:54:a4:cc:f7:a1:af:2a:6a:f3:ec:
         02:34:a0:73:8a:14:4b:f0:f7:91:3a:51:bb:8e:64:68:69:c9:
         35:6f:3c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:20 2024 by rpki-client on console-ams.rpki-client.org