Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/fa5a39559b2b22ce490667ed41790be7200e8809.roa
File:                     fa5a39559b2b22ce490667ed41790be7200e8809.roa (raw, json)
Hash identifier:          wI2/G4CdeLwInciXrrDFfwIwTdwTXE2OgGMPkqrjNfs=
Subject key identifier:   84:D9:70:8F:24:82:A5:D1:96:64:F0:5B:90:1F:EE:BB:60:F8:66:6B
Certificate issuer:       /CN=ec902101fc98565e74f436a72f5cb8e35599e267
Certificate serial:       026FA7
Authority key identifier: 82:BE:16:91:AF:73:AF:56:DF:E0:7C:47:FE:36:A6:D7:6D:A1:DF:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec902101fc98565e74f436a72f5cb8e35599e267.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/fa5a39559b2b22ce490667ed41790be7200e8809.roa
Signing time:             Mon 07 Aug 2023 19:47:10 +0000
ROA not before:           Sun 06 Aug 2023 19:47:10 +0000
ROA not after:            Thu 07 Aug 2025 19:47:10 +0000
asID:                     52396
IP address blocks:        186.148.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159655 (0x26fa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec902101fc98565e74f436a72f5cb8e35599e267
        Validity
            Not Before: Aug  6 19:47:10 2023 GMT
            Not After : Aug  7 19:47:10 2025 GMT
        Subject: CN=fa5a39559b2b22ce490667ed41790be7200e8809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:49:97:01:f7:dc:28:58:47:91:d4:3b:fb:30:
                    fd:9f:22:74:c9:ce:a0:9e:66:38:7a:6b:e6:3e:d7:
                    f0:e8:db:02:33:83:98:44:26:47:dc:4c:0d:40:83:
                    1a:25:21:50:a5:25:d8:de:47:3d:84:dc:c0:08:03:
                    46:a5:c7:b5:7d:f6:29:9f:e5:a7:b3:e4:ea:fd:d7:
                    fd:6e:1a:0e:f4:c2:89:96:7c:1e:9a:f1:ca:82:16:
                    30:d7:9d:63:5d:03:8e:ac:e7:78:82:b5:32:52:d8:
                    ea:31:8e:a7:3b:db:fd:24:b8:53:23:1a:cf:d0:44:
                    22:1f:19:2f:22:d2:13:ae:87:88:91:c7:d0:46:a7:
                    a8:fb:3d:33:66:6d:3e:0d:4d:7b:d9:39:50:13:65:
                    c9:5a:b6:4c:a4:6e:7f:97:59:c7:0a:b6:e0:c0:55:
                    a3:6d:a0:84:52:11:e9:ab:58:82:b5:5f:61:ea:06:
                    9c:bf:29:11:de:1f:60:cf:54:88:72:c3:a1:59:81:
                    5d:7c:d8:0d:31:fa:cf:70:1e:5d:1f:73:1e:be:b6:
                    aa:e2:92:10:8b:47:5b:72:d2:fc:5a:a5:4c:8f:b2:
                    e0:df:eb:f5:e0:cc:99:4d:47:45:50:6a:9b:df:e2:
                    5c:1a:0e:c2:f3:9c:25:fa:0e:63:4a:ed:41:1a:d0:
                    f7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D9:70:8F:24:82:A5:D1:96:64:F0:5B:90:1F:EE:BB:60:F8:66:6B
            X509v3 Authority Key Identifier:
                keyid:82:BE:16:91:AF:73:AF:56:DF:E0:7C:47:FE:36:A6:D7:6D:A1:DF:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec902101fc98565e74f436a72f5cb8e35599e267.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/fa5a39559b2b22ce490667ed41790be7200e8809.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/ec902101fc98565e74f436a72f5cb8e35599e267.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:a9:97:7d:0b:de:f9:2e:15:3d:c5:e7:74:6e:ac:6c:dc:5d:
         ea:fa:9d:97:7e:65:39:80:1b:19:19:c3:17:32:d2:af:ea:15:
         71:d9:c0:81:62:04:e7:2f:a2:f0:97:71:63:cf:b0:2c:8f:f0:
         be:61:0a:d9:2d:71:2e:e8:8b:ba:77:05:74:bb:3d:8b:0a:56:
         5f:1e:d9:57:81:9b:ad:7c:0d:e2:d2:21:db:d0:9c:fb:14:59:
         ce:bd:05:95:08:a7:a7:25:09:42:d2:98:99:d2:01:3c:fa:2c:
         40:f8:cf:26:72:01:dc:25:51:a0:55:3d:4a:34:09:d3:01:fa:
         7b:f9:46:2d:63:da:e9:df:d3:85:e8:96:ee:2e:80:1a:b0:ff:
         a7:a5:ec:3d:aa:da:66:c8:f9:c6:f7:d8:9c:0f:f8:ec:67:d0:
         bc:51:58:1b:0e:08:47:c7:17:52:10:d3:29:b7:ff:25:45:25:
         19:ad:dd:ac:dc:41:70:79:89:fc:27:31:93:22:9e:ac:e2:a8:
         72:19:f6:c4:94:9b:c8:28:b1:57:66:a9:2a:a6:eb:a6:12:7b:
         b1:4c:aa:61:f5:fc:76:52:1c:26:61:bb:ec:31:13:5d:81:39:
         e5:c6:84:56:a1:95:1e:ca:f4:57:a7:84:97:78:97:09:f8:32:
         13:27:f2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:41 2024 by rpki-client on console-fra.rpki-client.org