Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/33bceda262ccf052d2733cc28028d80b41ae84c0.roa
File:                     33bceda262ccf052d2733cc28028d80b41ae84c0.roa (raw, json)
Hash identifier:          3yLuL3p6f/hIM0vktC4HtT+9j/Dc/aRcDbtEm8RgaW4=
Subject key identifier:   2A:06:9D:CA:B9:14:F2:F8:32:EE:E9:EE:1F:CB:0F:C5:8C:1B:48:70
Certificate issuer:       /CN=05fbbb173c217aa8030fc6d9379843579229ce31
Certificate serial:       27C11E
Authority key identifier: 6D:D8:87:CE:7B:A8:45:9B:CA:48:71:1D:F7:C0:A9:E1:8F:D6:72:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05fbbb173c217aa8030fc6d9379843579229ce31.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/33bceda262ccf052d2733cc28028d80b41ae84c0.roa
Signing time:             Tue 20 Feb 2024 00:56:40 +0000
ROA not before:           Tue 20 Feb 2024 00:56:39 +0000
ROA not after:            Tue 20 Feb 2029 00:56:39 +0000
asID:                     27986
IP address blocks:        186.67.248.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2605342 (0x27c11e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05fbbb173c217aa8030fc6d9379843579229ce31
        Validity
            Not Before: Feb 20 00:56:39 2024 GMT
            Not After : Feb 20 00:56:39 2029 GMT
        Subject: CN=33bceda262ccf052d2733cc28028d80b41ae84c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:73:1e:b9:5c:32:f3:d5:f4:93:91:4f:d1:97:
                    a6:e5:b2:3d:99:d2:82:09:9c:68:94:d3:15:61:cf:
                    d0:50:fb:c5:b9:fa:59:b0:4b:63:9e:27:40:7b:b7:
                    cf:ef:0a:52:a4:9e:18:88:ee:fe:59:11:70:47:a8:
                    4f:4f:89:ff:d2:e3:88:3a:40:1b:81:00:ac:b5:4c:
                    05:ed:bc:cc:33:b6:e8:4e:52:5e:b1:43:d4:dd:48:
                    76:b5:e8:85:03:28:dc:27:dd:fc:4f:64:3c:31:32:
                    57:27:66:8d:dd:f8:cd:bf:3e:61:de:92:1a:71:9c:
                    82:ff:a5:af:c0:fc:e4:fc:7f:61:65:08:81:a4:e0:
                    f0:8c:bf:99:2e:aa:26:c7:b4:2c:84:4e:fb:3f:24:
                    12:a6:b7:19:71:fa:35:0a:1e:ff:d0:72:e2:c8:bb:
                    9c:f4:fe:77:a5:de:2b:27:50:5d:94:24:0e:39:bd:
                    ef:32:e5:67:23:69:ef:15:27:7c:ee:e6:d4:9c:59:
                    e9:93:de:13:ad:ce:97:fd:16:56:eb:c1:46:84:1b:
                    a9:76:77:a8:9d:87:91:5e:3f:29:63:e1:74:f5:a4:
                    73:00:40:d8:8e:be:ae:db:a0:ef:3b:87:f8:11:92:
                    f1:0a:55:a0:9e:9f:db:a2:8c:06:54:fe:b7:08:e3:
                    fb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:06:9D:CA:B9:14:F2:F8:32:EE:E9:EE:1F:CB:0F:C5:8C:1B:48:70
            X509v3 Authority Key Identifier:
                keyid:6D:D8:87:CE:7B:A8:45:9B:CA:48:71:1D:F7:C0:A9:E1:8F:D6:72:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05fbbb173c217aa8030fc6d9379843579229ce31.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/33bceda262ccf052d2733cc28028d80b41ae84c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/05fbbb173c217aa8030fc6d9379843579229ce31.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.67.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:68:4a:96:aa:38:41:44:65:c4:99:fd:c2:84:3c:29:27:6c:
         c2:94:1e:8f:a2:43:70:00:f6:2c:6d:e7:25:5c:5d:21:3c:ae:
         c7:75:87:83:6b:45:18:57:ad:0c:b7:63:7b:52:4e:69:87:fe:
         96:9e:2f:0b:17:81:9f:81:40:d4:47:fd:09:1f:a1:db:2d:8b:
         bc:4a:3f:23:1e:1f:56:c8:c9:0d:0e:7b:c1:bb:e1:67:8d:90:
         87:1a:5f:b0:9e:b9:5b:1d:41:f9:15:7b:82:53:d0:d5:36:c0:
         44:f2:4d:71:b8:a5:e0:92:2e:5f:04:2d:57:7d:27:7a:05:6f:
         34:9f:63:47:24:bd:b0:69:ab:16:7d:c9:39:7d:3f:fd:6a:67:
         d1:fb:34:a7:4b:8f:8d:df:ca:c3:a2:a1:63:1f:9d:67:c5:5f:
         d2:a5:83:67:40:11:58:89:da:f7:b3:12:a3:5d:4b:ca:63:26:
         c4:0f:12:9c:5c:cc:87:a2:9e:d3:02:79:53:01:fb:ea:13:a6:
         03:30:41:7b:a1:6c:6a:67:50:a6:76:0f:f8:02:bc:a4:55:e5:
         a4:bd:51:a7:8d:08:9a:86:68:0d:8c:c2:bc:bb:18:b7:7c:50:
         29:08:84:f4:2e:d9:ad:b2:a4:4a:1d:fd:b1:29:4d:14:99:9a:
         93:08:ea:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:20 2024 by rpki-client on console-ams.rpki-client.org