Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/08fd5f6045567b2946e379d612512d37ba88f44d.roa
File:                     08fd5f6045567b2946e379d612512d37ba88f44d.roa (raw, json)
Hash identifier:          Wskp6X4iteUacqPq++1sqEe9eoUmZlDydjGSQxKaonA=
Subject key identifier:   04:9A:44:71:B3:A9:B1:61:8D:3C:00:8D:67:B8:A8:58:43:E1:19:19
Certificate issuer:       /CN=ec902101fc98565e74f436a72f5cb8e35599e267
Certificate serial:       027412
Authority key identifier: 82:BE:16:91:AF:73:AF:56:DF:E0:7C:47:FE:36:A6:D7:6D:A1:DF:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec902101fc98565e74f436a72f5cb8e35599e267.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/08fd5f6045567b2946e379d612512d37ba88f44d.roa
Signing time:             Mon 07 Aug 2023 19:49:04 +0000
ROA not before:           Sun 06 Aug 2023 19:49:04 +0000
ROA not after:            Thu 07 Aug 2025 19:49:04 +0000
asID:                     61507
IP address blocks:        186.148.6.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160786 (0x27412)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec902101fc98565e74f436a72f5cb8e35599e267
        Validity
            Not Before: Aug  6 19:49:04 2023 GMT
            Not After : Aug  7 19:49:04 2025 GMT
        Subject: CN=08fd5f6045567b2946e379d612512d37ba88f44d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7e:93:3c:47:2d:51:e8:c4:52:07:fb:c2:fa:
                    8d:0c:d3:88:6c:e7:0b:b8:f1:28:2e:d3:c2:cf:69:
                    f0:30:74:47:02:a7:7a:9e:50:a9:92:23:4b:c8:d0:
                    6f:f4:d3:db:3c:18:9b:a6:5c:88:aa:48:91:2f:7c:
                    4b:9d:e1:5b:96:f9:8e:aa:e9:39:6f:5f:fd:1e:45:
                    5e:f3:6a:cd:bd:2f:7a:b9:ce:1f:82:79:db:ea:95:
                    c5:61:d0:97:a3:3d:a3:0c:c8:62:cf:74:65:66:d9:
                    f2:f3:a6:f0:90:90:1a:61:d5:47:f6:b6:49:3b:11:
                    3a:d0:2b:49:8a:a8:f4:65:61:17:ec:9e:92:95:dd:
                    57:42:c9:db:70:78:b4:53:9d:cd:6b:53:59:be:e7:
                    d0:6e:8f:b6:5e:31:62:8e:47:a8:d2:c1:17:69:8a:
                    86:7a:9a:f5:f4:d1:e9:f7:95:1e:66:15:6b:cc:d7:
                    88:76:e1:9b:57:ba:96:13:2d:2c:70:fe:8b:ed:65:
                    1d:8a:d0:c8:b4:dc:bb:df:e9:35:9d:65:0a:9e:9b:
                    76:c6:a6:b5:96:93:de:4c:bb:96:ab:44:d6:59:ae:
                    2c:95:68:e1:53:b9:a0:df:79:90:7d:d6:68:f4:1d:
                    62:f5:a8:56:04:e5:b4:26:f1:ab:90:ed:56:d1:25:
                    d0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:9A:44:71:B3:A9:B1:61:8D:3C:00:8D:67:B8:A8:58:43:E1:19:19
            X509v3 Authority Key Identifier:
                keyid:82:BE:16:91:AF:73:AF:56:DF:E0:7C:47:FE:36:A6:D7:6D:A1:DF:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec902101fc98565e74f436a72f5cb8e35599e267.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/08fd5f6045567b2946e379d612512d37ba88f44d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/ec902101fc98565e74f436a72f5cb8e35599e267.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:48:5c:d0:ef:cd:c7:40:07:f4:23:c1:fb:5c:b8:67:c2:85:
         13:cd:3a:58:be:31:3c:1a:83:49:49:f9:af:22:8a:3d:46:42:
         bd:59:de:87:52:e6:a0:ae:6b:20:f3:3c:1c:54:ae:eb:97:91:
         bb:83:3d:1e:c1:ab:18:23:f3:91:1b:39:35:dd:4b:03:74:96:
         5f:04:bb:41:91:dd:64:94:5c:8b:64:86:19:32:9c:3f:10:ff:
         3a:35:c8:cd:de:07:34:30:68:4a:27:e7:55:1c:1c:ea:22:5b:
         75:7a:53:d7:e5:dc:1a:c2:08:f7:f3:90:f5:0d:f9:11:3b:ce:
         e3:21:bf:ff:66:bd:78:a9:32:33:35:15:32:10:78:94:d0:c4:
         ff:87:93:8a:5a:72:5e:ba:7b:a9:7c:79:00:55:06:1b:00:81:
         15:e7:37:88:12:40:06:aa:54:b6:c4:12:52:40:62:a7:34:b0:
         1b:cf:61:73:0d:66:fa:04:9f:b2:52:2e:74:48:ee:20:52:d4:
         7a:35:5c:24:b4:35:9e:05:c2:a2:15:a6:83:ab:5f:5a:ee:84:
         11:0d:73:7d:ac:af:46:ec:a4:17:69:b0:2b:28:bb:d3:84:f2:
         11:d2:6c:1e:ed:86:9d:ff:a2:43:9e:86:ba:e7:d5:e8:db:ab:
         2e:2a:5b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:16 2024 by rpki-client on console-fra.rpki-client.org