Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/bd54761f93008cd57c0c8646e39b44be542b1a45.roa
File:                     bd54761f93008cd57c0c8646e39b44be542b1a45.roa (raw, json)
Hash identifier:          M16Xc+oR2fM4S3pm2+7cvnljTDIVG6Hq2bKW5YchVBE=
Subject key identifier:   53:D4:69:A3:98:54:7E:BE:E0:62:C8:97:63:26:85:B1:91:EE:C3:81
Certificate issuer:       /CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Certificate serial:       0DAEC6
Authority key identifier: C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/bd54761f93008cd57c0c8646e39b44be542b1a45.roa
Signing time:             Wed 24 Mar 2021 14:40:23 +0000
ROA not before:           Wed 24 Mar 2021 14:40:23 +0000
ROA not after:            Tue 24 Mar 2026 14:40:23 +0000
asID:                     19114
IP address blocks:        186.65.0.0/18 maxlen: 24
                          200.24.192.0/19 maxlen: 24
                          200.7.192.0/19 maxlen: 24
                          200.7.224.0/19 maxlen: 24
                          2800:830::/31 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 896710 (0xdaec6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab812eecfcc01d38c444dbeae53234651af8c84d
        Validity
            Not Before: Mar 24 14:40:23 2021 GMT
            Not After : Mar 24 14:40:23 2026 GMT
        Subject: CN=bd54761f93008cd57c0c8646e39b44be542b1a45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e4:c9:db:b5:86:3e:f7:91:22:a3:d7:cd:69:
                    f7:22:76:18:9e:6d:7f:f9:40:ef:79:84:72:57:c4:
                    8f:28:aa:1d:02:d3:06:cb:ab:4e:f5:27:32:3b:4b:
                    ec:21:17:62:ea:0a:cf:2e:92:35:6e:b3:09:5b:ca:
                    38:bd:ab:27:2d:c7:d3:aa:30:a8:f4:c5:b8:12:77:
                    fd:42:5f:65:cf:78:2a:03:fb:d3:8f:0f:6f:d1:91:
                    9c:9d:4f:28:60:09:ef:2f:ad:b0:5c:7f:5f:3c:8d:
                    7a:b9:4e:0c:d2:0a:d2:49:20:57:d1:56:7e:8a:ff:
                    82:a8:51:0c:78:d4:be:f0:c3:24:ae:fa:a6:70:ef:
                    99:9a:7f:b2:3e:06:09:e9:0a:68:bc:53:19:7e:d4:
                    98:13:12:df:4e:54:d4:28:4f:ba:e6:7e:da:f7:ab:
                    7c:31:42:83:68:ee:d1:64:e0:a5:b9:14:c5:6a:d6:
                    b0:8b:88:b9:cf:34:5d:3b:04:e7:32:96:14:bd:54:
                    4d:e9:58:39:94:61:c7:f2:d2:08:13:65:2c:27:67:
                    d4:d0:ee:e3:2f:9a:2e:ce:5b:ce:c5:0b:86:bd:17:
                    67:a3:b8:db:77:64:2f:58:40:9a:11:95:1f:59:7c:
                    5e:e7:56:e6:43:3b:59:1c:e5:a9:e3:b5:32:62:32:
                    5c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D4:69:A3:98:54:7E:BE:E0:62:C8:97:63:26:85:B1:91:EE:C3:81
            X509v3 Authority Key Identifier:
                keyid:C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/bd54761f93008cd57c0c8646e39b44be542b1a45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ab812eecfcc01d38c444dbeae53234651af8c84d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.65.0.0/18
                  200.7.192.0/18
                  200.24.192.0/19
                IPv6:
                  2800:830::/31

    Signature Algorithm: sha256WithRSAEncryption
         3e:1b:44:c8:94:49:89:96:1f:96:ef:bf:e4:b3:85:cb:ff:12:
         f8:bf:28:5a:f0:65:47:52:33:30:6f:9e:e2:bb:2b:d8:70:8b:
         2d:93:39:03:a4:9f:bf:94:8c:92:fd:fb:91:51:24:dd:6d:27:
         44:6d:f3:c2:6d:7d:be:8a:62:83:49:ab:1e:e3:11:7a:c6:f2:
         0f:16:9e:cc:c9:b1:45:f6:97:31:22:5c:a6:ae:ad:da:b9:dd:
         45:17:9f:e9:28:c6:0c:08:c4:5b:a9:33:54:95:18:43:ac:56:
         1b:1e:2e:77:23:69:78:8a:9a:07:3e:d8:9f:b6:d6:bd:d6:3b:
         0c:08:b8:d0:0f:d5:ea:5d:71:54:cd:cf:da:7c:6c:94:cd:9e:
         ca:72:cb:87:96:6d:22:e7:7d:20:29:4a:fc:92:f0:1f:28:73:
         37:d1:c3:38:60:9b:3a:80:39:62:7d:fc:34:5e:98:15:7e:f7:
         22:0f:a9:f7:65:f0:ca:b5:0d:99:b8:13:46:73:5c:c4:b7:a7:
         b9:cd:e4:d3:51:15:6e:ba:34:bf:5e:f6:80:99:48:11:74:5f:
         4d:09:13:83:17:66:0c:54:0a:1d:25:c3:2c:ac:5e:d2:17:88:
         70:1f:2f:94:79:3f:ba:d5:9d:9c:63:7d:b9:3c:e6:a9:01:02:
         25:97:07:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org