Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/6db6e991043d9b1c15f432535beeb8017f6fca7f.roa
File:                     6db6e991043d9b1c15f432535beeb8017f6fca7f.roa (raw, json)
Hash identifier:          c4XpMtgFH2CQzBmb/O3IBeHxdm28M1qBaaaRxZHbo5Q=
Subject key identifier:   90:31:C3:D3:D1:24:DA:F9:78:E9:F0:67:8B:6D:5A:87:68:2D:F8:9F
Certificate issuer:       /CN=4ba834aeb520331d21c768e13e7564e705630d2c
Certificate serial:       24B0B5
Authority key identifier: 4C:ED:9B:B7:64:90:46:BE:80:01:36:9C:9A:98:4E:BD:F7:E1:78:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba834aeb520331d21c768e13e7564e705630d2c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/6db6e991043d9b1c15f432535beeb8017f6fca7f.roa
Signing time:             Mon 04 Sep 2023 23:12:56 +0000
ROA not before:           Sun 03 Sep 2023 23:12:55 +0000
ROA not after:            Thu 04 Sep 2025 23:12:55 +0000
asID:                     52347
IP address blocks:        186.177.232.0/21 maxlen: 21
                          186.177.228.0/22 maxlen: 22
                          186.177.242.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2404533 (0x24b0b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba834aeb520331d21c768e13e7564e705630d2c
        Validity
            Not Before: Sep  3 23:12:55 2023 GMT
            Not After : Sep  4 23:12:55 2025 GMT
        Subject: CN=6db6e991043d9b1c15f432535beeb8017f6fca7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:36:e4:d0:e0:19:c3:cc:f5:be:64:7f:e0:84:
                    e0:bc:06:45:1f:eb:dd:41:10:ab:3d:ac:c6:50:d7:
                    0e:f7:6a:bf:20:ee:4e:1b:07:17:b7:39:b1:ea:7c:
                    84:18:96:83:4a:4b:cb:dd:52:a4:ea:cb:42:e5:c2:
                    5b:24:3e:8a:ea:11:54:84:67:be:00:13:59:05:51:
                    0a:dc:f9:4b:27:5a:14:9b:9c:a2:30:06:71:52:fb:
                    da:b9:d6:40:55:b3:c4:92:b2:09:84:2e:a9:1b:e0:
                    ae:40:71:d6:0f:7b:d4:69:4e:92:0f:ca:22:58:ea:
                    89:54:50:cc:75:c3:d5:e8:ee:6d:05:e0:43:82:b7:
                    39:08:ea:22:9c:7d:49:04:83:b4:57:97:26:f7:ad:
                    82:44:8c:0c:60:93:c8:a5:88:e7:96:c5:99:1c:db:
                    ca:6e:a7:7a:ac:6f:5a:c0:3e:1f:0a:1a:32:0f:c4:
                    10:51:03:5e:59:4b:06:d8:fc:5d:3d:67:5a:25:50:
                    97:d7:e7:0b:35:7d:ab:44:28:08:dd:4b:a0:7f:ec:
                    d3:2d:e1:f3:ba:b9:40:60:c4:a3:97:6f:7d:83:1f:
                    2c:df:d7:e8:6c:6d:11:d5:81:de:fb:00:b3:84:6b:
                    d1:d2:83:17:41:dd:6b:98:31:5d:b0:8f:fb:2c:7a:
                    85:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:31:C3:D3:D1:24:DA:F9:78:E9:F0:67:8B:6D:5A:87:68:2D:F8:9F
            X509v3 Authority Key Identifier:
                keyid:4C:ED:9B:B7:64:90:46:BE:80:01:36:9C:9A:98:4E:BD:F7:E1:78:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba834aeb520331d21c768e13e7564e705630d2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/6db6e991043d9b1c15f432535beeb8017f6fca7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/4ba834aeb520331d21c768e13e7564e705630d2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.177.228.0-186.177.239.255
                  186.177.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:e0:6b:e4:be:5f:9e:30:ce:af:49:64:ad:6a:dd:00:83:e0:
         e6:ff:0f:74:30:08:3e:b0:b0:28:d2:5a:8e:ac:b4:be:e1:ca:
         dc:98:ab:03:ac:e7:cc:a2:ac:f6:ce:7f:5a:a7:e7:69:93:7a:
         5f:5b:b5:1d:ec:c0:3c:29:20:50:1a:b1:df:e5:49:16:84:33:
         dd:82:9b:79:d6:30:25:e8:e7:54:a9:fc:a8:39:b1:0a:43:d7:
         d9:22:6b:74:47:78:fe:e8:e4:c2:cf:32:67:1c:3e:b6:33:30:
         9e:ea:ec:58:b5:a0:b7:55:f7:d0:ae:b5:c4:36:67:0f:e5:a7:
         52:00:fe:8b:85:32:b1:e5:14:96:e5:96:15:16:ee:b4:49:f5:
         b8:bd:35:42:3a:aa:cd:52:7d:e0:93:03:10:ed:e6:5b:f3:0f:
         5f:34:e2:67:fd:e9:15:b5:4a:ca:9f:42:d0:62:01:55:21:75:
         8a:fe:04:46:1f:47:85:e2:8f:85:52:9c:c7:77:c5:9e:df:5c:
         b5:ca:f0:54:50:4f:cf:fa:cb:fb:13:86:40:6c:85:bc:85:84:
         50:61:27:02:03:29:ac:ca:6b:cd:d8:e7:38:56:79:5f:9a:c4:
         94:60:ae:4d:fb:13:8b:4e:d1:2d:bd:3a:35:03:3d:da:b1:33:
         77:c2:e8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:05 2024 by rpki-client on console-fra.rpki-client.org