Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/e66332905c7c1049798c53cbe1d684305912846f.roa
File:                     e66332905c7c1049798c53cbe1d684305912846f.roa (raw, json)
Hash identifier:          OJEykU2y6k5S9w9ntthKEtql28PtfwdeVrUtwGx2eGY=
Subject key identifier:   03:C8:93:08:B3:98:AF:22:82:4A:F1:AE:36:DB:1D:73:8E:F8:BD:78
Certificate issuer:       /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial:       12053B
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/e66332905c7c1049798c53cbe1d684305912846f.roa
Signing time:             Wed 29 Nov 2023 15:02:13 +0000
ROA not before:           Wed 29 Nov 2023 15:02:12 +0000
ROA not after:            Sat 29 Nov 2025 15:02:12 +0000
asID:                     267786
IP address blocks:        186.38.99.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1180987 (0x12053b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
        Validity
            Not Before: Nov 29 15:02:12 2023 GMT
            Not After : Nov 29 15:02:12 2025 GMT
        Subject: CN=e66332905c7c1049798c53cbe1d684305912846f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:73:eb:f6:4f:b5:87:28:b1:b4:fc:3c:fe:07:
                    f0:cc:44:23:f7:38:a8:95:35:11:9b:1d:82:7b:be:
                    fa:49:8e:35:1f:9d:6c:65:b8:e8:bf:c9:c1:87:2d:
                    d4:21:38:0e:28:c7:b9:68:4d:0a:11:9c:6b:cc:51:
                    78:fe:2e:b0:2d:6d:7a:ea:4f:52:ab:83:51:ea:b4:
                    60:ab:88:24:57:c5:48:a9:c2:76:cb:c7:b4:bc:cd:
                    3e:c4:9f:25:1f:4c:44:dd:e9:8a:d5:89:ab:8c:94:
                    1f:86:8c:42:a0:9b:7a:00:5f:a1:df:a1:38:fa:f5:
                    3a:3a:e9:fc:de:6a:be:d3:e6:0b:c6:b8:25:27:9f:
                    52:0c:35:c7:86:ba:2d:01:60:ae:43:ed:e4:60:0c:
                    20:0d:78:bf:ad:d9:0e:39:82:4b:20:0d:c5:b4:2b:
                    ce:4a:4f:3b:b1:2f:c0:73:df:79:4d:e5:98:22:90:
                    24:9f:e5:c0:78:4f:58:b5:2f:bd:56:97:a7:ba:26:
                    6a:19:27:4e:5c:ac:03:08:17:d6:c7:84:65:f8:cb:
                    03:17:66:88:cb:e1:c8:2f:21:3d:28:bc:7f:75:c9:
                    ab:2d:03:34:ff:34:a6:2c:5e:70:d0:71:da:b9:4f:
                    43:39:78:10:36:d2:00:c7:3e:74:e2:1c:2e:a7:d0:
                    f9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C8:93:08:B3:98:AF:22:82:4A:F1:AE:36:DB:1D:73:8E:F8:BD:78
            X509v3 Authority Key Identifier:
                keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/e66332905c7c1049798c53cbe1d684305912846f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.38.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:6e:17:b0:70:83:69:91:71:44:0e:e3:e0:e5:b5:7a:46:a3:
         7c:3a:05:d3:c1:95:c7:bc:99:bf:f0:0f:5a:44:64:5b:91:2f:
         2f:a9:a1:f1:82:a7:13:ad:1e:a8:98:88:26:14:e6:0c:1a:18:
         ee:2e:6a:36:48:4a:a2:dc:7a:69:22:83:d2:20:8d:5b:47:6e:
         fd:05:e2:1b:80:bb:0b:af:da:20:36:e7:08:62:ff:e9:3a:90:
         4d:a0:ee:86:df:e8:c3:7c:f1:3a:46:e6:f4:09:db:02:c6:de:
         7a:1a:63:d6:7c:2f:1f:ec:13:19:c8:b8:df:52:eb:c6:45:e4:
         c3:b7:58:b1:d7:90:8e:42:9e:b5:00:eb:e4:4c:3a:2f:aa:14:
         37:db:9f:b4:f3:03:01:85:1b:e5:c0:a3:8a:f0:1c:ec:34:c7:
         e6:1d:e1:ac:bd:26:54:ca:fa:33:c0:3c:a5:fa:59:ce:04:31:
         91:f7:00:71:73:33:f9:2b:96:57:9c:ec:c2:32:a1:a5:09:a9:
         07:d4:ff:74:8e:07:ae:1b:58:dc:fe:66:96:37:c5:e0:b0:fb:
         e5:54:4b:b1:cd:ab:79:4b:4f:1a:ce:2f:0c:72:49:79:2a:5a:
         a1:2f:93:47:4b:44:3b:e3:78:f7:e9:46:68:46:2f:b4:48:6c:
         d1:89:87:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:43 2024 by rpki-client on console-ams.rpki-client.org