Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/01ab27ae0411e380e57bb345a8db94d56d840d35.roa
File:                     01ab27ae0411e380e57bb345a8db94d56d840d35.roa (raw, json)
Hash identifier:          fdxOZbL5atlq/0Umv9qJ2ms0brJgQd9FQwa0kCpoxfI=
Subject key identifier:   FD:85:1E:90:28:96:23:24:7D:9F:72:32:45:A7:1D:25:C8:E7:6B:95
Certificate issuer:       /CN=b12012502b7ca3b0da125f250315dfe19bfb18d5
Certificate serial:       21C605
Authority key identifier: A0:AA:33:C0:E5:EA:9C:31:8A:E1:96:B6:D8:72:02:35:9C:67:12:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b12012502b7ca3b0da125f250315dfe19bfb18d5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/01ab27ae0411e380e57bb345a8db94d56d840d35.roa
Signing time:             Wed 14 Jun 2023 20:48:29 +0000
ROA not before:           Tue 13 Jun 2023 20:48:29 +0000
ROA not after:            Sat 14 Jun 2025 20:48:29 +0000
asID:                     52468
IP address blocks:        186.189.215.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2213381 (0x21c605)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b12012502b7ca3b0da125f250315dfe19bfb18d5
        Validity
            Not Before: Jun 13 20:48:29 2023 GMT
            Not After : Jun 14 20:48:29 2025 GMT
        Subject: CN=01ab27ae0411e380e57bb345a8db94d56d840d35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:79:0c:a3:16:fe:01:6c:e2:f7:b7:05:b5:f9:
                    91:1e:51:25:0a:7c:8d:5f:c8:18:67:b8:82:bd:40:
                    2b:66:55:57:24:2d:cb:23:cb:ce:4d:6a:46:1a:9a:
                    6c:0f:7f:5b:27:69:1c:ee:a6:32:90:3c:9c:4b:03:
                    20:17:1c:34:b4:59:a3:5e:b8:d3:26:62:06:97:63:
                    28:0c:83:a6:d5:52:02:e5:48:1a:33:71:0e:ff:b1:
                    b5:d4:da:f4:27:95:16:9b:fd:99:1d:38:5a:ec:08:
                    31:25:04:ab:39:14:b1:2f:e2:c3:5f:2c:c9:5c:49:
                    cf:af:9a:fd:fa:f4:8a:37:8b:7d:12:db:4a:b6:f4:
                    59:bd:ff:5f:99:1f:ef:49:c6:38:84:54:01:d8:48:
                    56:00:08:14:f2:82:29:32:88:7d:a9:a6:0b:24:79:
                    e0:0c:e9:8b:d0:3f:ff:ae:15:98:c9:90:bc:ba:ea:
                    f3:4b:23:2f:06:0c:1e:b0:e6:ec:e8:83:db:89:5f:
                    35:80:7e:c9:8e:b1:54:46:4d:d7:3a:ef:60:45:b0:
                    e9:9e:61:c9:18:9b:96:4b:5c:da:ff:c2:46:d6:3d:
                    5b:02:82:5c:13:b2:5d:cf:64:cd:87:68:88:1b:e6:
                    97:fc:c0:90:50:71:24:9f:47:2e:6e:4f:96:e8:ca:
                    09:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:85:1E:90:28:96:23:24:7D:9F:72:32:45:A7:1D:25:C8:E7:6B:95
            X509v3 Authority Key Identifier:
                keyid:A0:AA:33:C0:E5:EA:9C:31:8A:E1:96:B6:D8:72:02:35:9C:67:12:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b12012502b7ca3b0da125f250315dfe19bfb18d5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/01ab27ae0411e380e57bb345a8db94d56d840d35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/b12012502b7ca3b0da125f250315dfe19bfb18d5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.189.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:38:59:f7:75:d8:e2:7b:2d:6b:47:64:fd:b4:84:05:31:ab:
         d6:a6:ff:0b:c1:ae:7d:75:37:3c:57:c7:43:3e:59:b7:2b:0f:
         5c:d5:19:a5:a0:bc:67:ad:bd:c5:bf:3b:ec:c1:bb:96:ee:ec:
         dc:b8:c2:73:6f:ba:11:29:3f:9c:e3:68:bf:03:84:f1:74:a6:
         42:08:e2:fd:04:61:e1:43:81:b1:c7:36:7b:40:02:19:7b:5d:
         69:07:1c:fd:b3:df:55:86:d5:1c:6f:d9:02:7c:c2:7f:3c:ff:
         9a:67:6c:e4:58:c9:e2:49:18:7b:1b:3e:f5:a6:f5:af:ab:72:
         a3:42:4e:a1:4a:a2:48:a6:ce:01:e1:aa:6c:c7:46:2e:29:7c:
         b9:1d:24:6d:a8:c1:29:a7:96:69:be:60:30:95:26:dc:10:bf:
         c0:80:be:5a:28:7a:6d:94:4b:f2:20:b5:ad:ca:6f:2b:9b:11:
         a8:96:d2:02:52:db:3c:49:71:12:b2:b9:e7:25:2d:74:94:3f:
         f8:01:74:55:8f:dc:71:11:88:4b:cb:8a:8b:57:dc:c0:7d:1d:
         e2:a3:c1:eb:3c:b7:7a:43:e1:61:5e:5d:96:1d:ad:07:97:cd:
         47:8d:08:5f:1c:fd:af:77:38:71:fe:0c:c9:d7:c6:43:03:4a:
         c9:84:03:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org