Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/a8dba54ce836fd4f77c2a3e17cac116fdc739829.roa
File:                     a8dba54ce836fd4f77c2a3e17cac116fdc739829.roa (raw, json)
Hash identifier:          qVRSNvB1trHtLJNHqiX+ahCWy7q54VoAc8UUNUUMMDU=
Subject key identifier:   E3:A7:98:FF:76:9D:86:C6:F0:47:AB:0B:5F:A7:42:4D:44:8E:A0:B6
Certificate issuer:       /CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
Certificate serial:       2E4C0F
Authority key identifier: FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/a8dba54ce836fd4f77c2a3e17cac116fdc739829.roa
Signing time:             Thu 07 Dec 2023 13:01:06 +0000
ROA not before:           Thu 07 Dec 2023 13:00:46 +0000
ROA not after:            Thu 07 Dec 2028 13:00:46 +0000
asID:                     262231
IP address blocks:        186.124.116.0/24 maxlen: 24
                          200.43.81.0/24 maxlen: 24
                          200.45.8.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3034127 (0x2e4c0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
        Validity
            Not Before: Dec  7 13:00:46 2023 GMT
            Not After : Dec  7 13:00:46 2028 GMT
        Subject: CN=a8dba54ce836fd4f77c2a3e17cac116fdc739829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5e:d1:0c:39:70:69:da:ca:7f:1d:ff:e5:2e:
                    0d:dc:bc:db:a4:74:19:6b:e8:4a:b5:e6:05:9e:8e:
                    8e:ed:56:3f:c3:11:07:2f:d6:e3:c5:e0:0d:ed:ea:
                    b0:4e:44:c0:c3:67:fb:c2:96:66:b5:88:ce:bc:bf:
                    ba:aa:ba:74:58:fa:63:a9:08:52:d9:55:97:27:30:
                    df:78:06:df:93:8f:5c:34:b9:ba:98:f9:e2:32:dd:
                    5b:76:16:14:78:dc:7a:a8:3c:b7:cc:ee:f8:8d:07:
                    4e:1b:a6:03:e1:67:a1:4b:59:1d:b1:ce:43:f6:98:
                    e6:97:44:40:f0:82:a4:29:cd:a9:2c:02:d9:91:84:
                    57:bb:a7:ca:e9:7d:47:9d:07:5b:85:46:bb:d1:fc:
                    27:fb:f5:34:26:c0:60:fc:2b:77:df:aa:18:d2:82:
                    ac:ef:ef:f3:b9:c9:47:70:23:54:66:c3:a1:87:ca:
                    d5:2b:4a:48:d1:5c:e9:09:de:b1:cf:82:43:87:5e:
                    27:30:9b:f7:f9:44:83:ff:d3:55:7a:cc:f2:40:7a:
                    c2:ea:cc:02:9e:db:26:d0:7d:af:7e:96:53:af:0d:
                    15:9a:db:5d:0e:04:67:6a:95:dd:5c:69:a0:2b:0a:
                    91:21:2a:e6:b7:ca:09:09:60:0b:52:dd:66:da:79:
                    50:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A7:98:FF:76:9D:86:C6:F0:47:AB:0B:5F:A7:42:4D:44:8E:A0:B6
            X509v3 Authority Key Identifier:
                keyid:FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/a8dba54ce836fd4f77c2a3e17cac116fdc739829.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c974409d0c2a70c921dd685e863e9f00cb1e262a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.124.116.0/24
                  200.43.81.0/24
                  200.45.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:76:1b:60:b7:50:14:03:ff:60:fa:8d:9a:d3:40:c0:91:bf:
         e5:ba:c4:5d:01:ff:49:da:80:a9:11:d7:fd:3a:88:d0:e0:24:
         44:48:15:be:a6:2a:54:3f:7a:25:2c:c5:f4:6a:8e:87:39:00:
         7d:c7:37:46:3a:11:bb:ef:fe:94:ae:b1:fa:5e:10:f0:86:55:
         43:67:50:e3:28:36:09:11:6e:56:82:0a:2f:56:c6:d5:d9:83:
         49:66:2d:12:bf:90:8c:74:b9:85:06:2e:c0:d2:45:1d:6d:ca:
         b2:9a:f4:12:29:23:d7:17:c8:ec:bc:58:5f:e5:e6:fe:cc:c0:
         d3:b5:fb:27:8d:59:d2:a6:ff:c2:22:ee:20:72:39:89:54:3c:
         e7:40:cd:f9:3c:1c:24:64:74:19:88:1b:98:99:62:6a:b3:8b:
         94:85:b0:38:3e:0d:20:72:61:78:2a:5d:85:1e:0e:37:66:6e:
         81:4d:c9:5d:e9:a3:c8:68:5a:50:84:2e:30:c2:ba:3e:ca:77:
         f7:80:da:6d:d8:e8:da:1b:2a:fe:22:bf:50:10:e4:c1:af:4b:
         b5:3c:57:d2:85:4b:af:8f:05:a5:fc:2b:15:ec:aa:36:68:90:
         34:c3:83:c3:fa:d4:df:22:52:d3:2b:54:87:37:a7:8b:9e:31:
         ca:0a:65:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org