Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/8ff8ce5792840bae9bb7d5b12e77c22982245ca5.roa
File:                     8ff8ce5792840bae9bb7d5b12e77c22982245ca5.roa (raw, json)
Hash identifier:          ViRomWn7FXuzGHTSbFuEqszoyaqzOO+I6vglaBVHnQ8=
Subject key identifier:   0F:AB:CC:B9:F0:EF:F4:40:EE:82:EA:59:40:71:41:C5:B4:74:83:45
Certificate issuer:       /CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Certificate serial:       2D99D2
Authority key identifier: C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/8ff8ce5792840bae9bb7d5b12e77c22982245ca5.roa
Signing time:             Thu 07 Dec 2023 12:42:11 +0000
ROA not before:           Thu 07 Dec 2023 12:41:57 +0000
ROA not after:            Thu 07 Dec 2028 12:41:57 +0000
asID:                     264715
IP address blocks:        186.153.128.0/22 maxlen: 24
                          181.81.248.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2988498 (0x2d99d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8263f0ea1b563289205ad0264530f8e6c30e569
        Validity
            Not Before: Dec  7 12:41:57 2023 GMT
            Not After : Dec  7 12:41:57 2028 GMT
        Subject: CN=8ff8ce5792840bae9bb7d5b12e77c22982245ca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:38:8b:2b:ee:99:6e:e3:69:f0:d0:98:b7:be:
                    4f:44:fb:fa:de:1f:24:26:9f:31:66:06:41:32:bf:
                    68:8d:a4:b9:f3:e9:99:f9:2a:b6:2c:2a:fe:a5:33:
                    1b:22:f4:65:a2:f3:a8:a9:6c:cc:d1:15:75:6b:17:
                    aa:5d:c1:5a:47:77:b8:31:3c:1a:65:ca:04:45:95:
                    77:d9:74:3c:ea:f8:4a:ac:f8:fc:a4:d8:73:e7:d0:
                    00:79:a9:b5:d5:72:17:1f:f9:ac:ef:87:fb:ea:21:
                    9d:8b:8e:59:41:00:1f:30:3f:cb:b2:7e:db:40:a3:
                    fb:27:38:59:c1:d6:2a:d3:34:61:98:13:3b:79:1f:
                    6c:2f:30:77:2a:3f:bd:7a:ee:88:b4:10:b9:aa:4d:
                    24:bd:b5:db:a6:fe:79:5b:ea:3e:c5:75:74:a2:d4:
                    5b:44:5f:3f:70:c2:6a:a3:10:31:b2:11:ec:53:24:
                    af:c6:72:d0:cd:0f:fd:b2:76:9b:6c:9c:8d:17:9f:
                    43:fa:91:91:cd:08:69:16:98:61:13:64:81:18:2a:
                    59:b8:c2:78:23:f2:fe:10:fa:f9:dd:a9:6a:e4:d5:
                    42:1b:35:70:a8:de:10:f4:6a:2b:c7:16:22:a8:0c:
                    6b:a1:55:ff:fe:ea:d7:0b:3f:24:21:72:83:ce:42:
                    1b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:AB:CC:B9:F0:EF:F4:40:EE:82:EA:59:40:71:41:C5:B4:74:83:45
            X509v3 Authority Key Identifier:
                keyid:C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/8ff8ce5792840bae9bb7d5b12e77c22982245ca5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f8263f0ea1b563289205ad0264530f8e6c30e569.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.81.248.0/22
                  186.153.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:ef:a7:07:05:ff:4d:d1:54:6d:65:37:82:c8:cc:0f:d4:28:
         8c:ab:75:81:05:8a:85:6f:41:fe:a2:d7:df:bf:aa:ee:9c:97:
         9d:07:86:34:7e:62:7c:8e:88:2d:43:f3:17:f8:24:94:dd:7a:
         e2:09:a8:f4:61:75:a9:3d:f8:85:7b:61:65:cd:75:d7:a1:b2:
         d1:20:ae:73:d2:6f:a3:ac:85:5f:9a:9c:3c:3c:f6:34:a9:59:
         fb:00:a4:c7:eb:27:83:0b:46:32:e4:7a:dd:74:c2:da:b7:c2:
         6a:fd:65:8b:4a:4e:d7:1e:07:06:0c:5d:dc:c9:09:dd:64:e6:
         f6:6d:b9:fe:11:4b:e8:78:78:bc:3e:26:e4:5c:5a:69:1f:e4:
         35:6f:51:65:21:df:22:9d:ac:71:00:31:15:c9:d6:e2:61:5a:
         c2:94:1b:f5:23:94:f4:4c:5e:05:ad:f1:04:e5:ee:89:c0:69:
         c9:c5:90:1b:64:1a:16:a7:21:1e:09:72:e6:b8:80:c8:c3:69:
         3c:d4:3f:f1:ed:51:73:c4:21:dd:ab:f6:d3:c1:6a:81:06:a9:
         7d:24:9e:f0:b4:da:03:6a:00:21:00:b9:63:9d:db:12:e4:6b:
         4f:21:16:15:6b:f7:a6:43:ec:ad:13:80:e8:51:ba:f1:d7:3a:
         3f:b6:d2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:43 2024 by rpki-client on console-fra.rpki-client.org