Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/6c5cc0d8812015b4fedf408d8048fa8ea6067efd.roa
File:                     6c5cc0d8812015b4fedf408d8048fa8ea6067efd.roa (raw, json)
Hash identifier:          Om9pdqlwj+g1vXFP+U+w4pLubQ7IADy80EtHp0j78rA=
Subject key identifier:   BF:1F:41:30:AD:B9:4A:C3:CD:57:BE:00:86:55:34:BD:68:88:39:64
Certificate issuer:       /CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
Certificate serial:       299146
Authority key identifier: 10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/6c5cc0d8812015b4fedf408d8048fa8ea6067efd.roa
Signing time:             Tue 06 Feb 2024 15:36:57 +0000
ROA not before:           Tue 06 Feb 2024 15:36:47 +0000
ROA not after:            Tue 06 Feb 2029 15:36:47 +0000
asID:                     19114
IP address blocks:        186.65.0.0/18 maxlen: 18
                          186.65.32.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2724166 (0x299146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
        Validity
            Not Before: Feb  6 15:36:47 2024 GMT
            Not After : Feb  6 15:36:47 2029 GMT
        Subject: CN=6c5cc0d8812015b4fedf408d8048fa8ea6067efd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9c:cd:b1:b3:0b:25:d0:7f:85:5c:b3:c2:33:
                    8e:ba:6d:6c:74:69:fc:df:aa:29:b0:c5:35:7e:ff:
                    b4:60:67:c2:44:18:53:a8:81:3e:a6:08:4d:c8:19:
                    ba:a3:06:6f:03:29:d7:4a:1e:2e:b5:3c:67:a2:de:
                    94:d2:2f:f6:e9:50:6d:b3:08:ad:57:cb:ea:05:05:
                    94:50:f6:2b:bf:e1:62:6e:07:7c:ae:10:b6:3f:1a:
                    cc:ec:61:ea:ce:9e:da:2f:76:80:c5:46:f3:30:02:
                    14:72:92:65:28:2a:47:73:3a:53:f0:c7:fd:9f:83:
                    a2:6b:2e:57:11:7a:1e:bf:8e:4d:ab:77:be:ae:8d:
                    69:67:b8:40:3e:4c:51:65:5c:31:e2:3a:ef:22:68:
                    ab:97:db:f1:c2:c7:ff:e1:c2:10:83:91:aa:b0:11:
                    da:8d:7a:f3:95:04:1e:a1:74:ef:21:3b:28:9e:dd:
                    c3:6f:62:64:8e:e4:55:cf:a3:9f:b4:9d:61:97:cd:
                    39:0a:6d:a8:59:be:fe:a9:26:25:66:3e:78:b8:03:
                    f4:08:ee:9e:d6:08:79:4b:68:d8:07:fb:c9:da:97:
                    51:56:03:77:f7:de:ee:24:cd:c4:1e:25:7b:c7:f8:
                    7b:0e:f7:c0:61:65:0e:89:d7:d7:27:3b:00:f6:c0:
                    a4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:1F:41:30:AD:B9:4A:C3:CD:57:BE:00:86:55:34:BD:68:88:39:64
            X509v3 Authority Key Identifier:
                keyid:10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/6c5cc0d8812015b4fedf408d8048fa8ea6067efd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/43a1dd4035b8d29ba7566c64529634ff64783a4f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.65.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4e:84:e6:99:7f:38:40:70:83:0d:82:de:30:21:8b:a6:f6:28:
         b9:9f:29:e5:e9:e7:51:64:80:81:ea:16:8f:a8:82:af:2b:5f:
         0f:95:3b:a7:0f:dc:d9:f6:fd:eb:06:a4:b1:f5:b1:ac:40:00:
         6d:ef:eb:48:aa:3c:63:bc:73:2a:2d:66:b7:e8:b7:6f:fd:71:
         1b:22:f2:76:3b:8a:67:ca:fa:ec:2f:80:41:bc:1e:0a:ac:c6:
         d2:ac:ac:d6:17:1d:a3:32:0f:23:af:e1:cc:b4:0e:9b:26:23:
         d6:fb:3b:7a:d8:57:5d:a4:21:6a:7a:db:f2:e1:49:ef:7e:2e:
         0d:f9:00:77:4b:ec:79:a8:6f:35:08:eb:d2:23:37:90:e1:1a:
         b6:97:d9:dc:dc:75:a2:b5:b1:09:00:4c:cc:a1:0c:a1:c4:0e:
         56:dd:fe:ea:60:56:90:ce:6c:f7:f0:fe:03:2e:1f:25:fe:7b:
         ce:ff:e9:61:c3:f6:cd:f8:ed:af:44:b8:f5:51:8f:d0:83:75:
         0c:90:f6:8c:a9:ef:60:3d:b5:14:e6:f7:ca:d9:ae:0f:70:7e:
         2b:2b:0f:2f:e2:36:08:74:21:e3:c9:bb:51:f3:ab:0e:7b:26:
         3b:86:4b:bc:9c:15:b1:29:0d:48:9a:a4:72:a6:95:bf:1c:43:
         44:26:3e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:44 2024 by rpki-client on console-ams.rpki-client.org