Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/8eb0d5ba099fb16d1c1727c8d9e43dcc91fafba7.roa
File:                     8eb0d5ba099fb16d1c1727c8d9e43dcc91fafba7.roa (raw, json)
Hash identifier:          Gv6PIDJ1TrSo5XuiyY0xzCeq1kG3enNfNkLCkP+nLSE=
Subject key identifier:   C9:1F:88:08:77:0C:66:46:ED:78:8A:55:A4:D2:2E:54:98:EA:41:67
Certificate issuer:       /CN=b12012502b7ca3b0da125f250315dfe19bfb18d5
Certificate serial:       122665
Authority key identifier: A0:AA:33:C0:E5:EA:9C:31:8A:E1:96:B6:D8:72:02:35:9C:67:12:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b12012502b7ca3b0da125f250315dfe19bfb18d5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/8eb0d5ba099fb16d1c1727c8d9e43dcc91fafba7.roa
Signing time:             Tue 28 Sep 2021 23:23:36 +0000
ROA not before:           Tue 28 Sep 2021 03:00:00 +0000
ROA not after:            Thu 28 Sep 2023 03:00:00 +0000
asID:                     52468
IP address blocks:        186.189.215.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1189477 (0x122665)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b12012502b7ca3b0da125f250315dfe19bfb18d5
        Validity
            Not Before: Sep 28 03:00:00 2021 GMT
            Not After : Sep 28 03:00:00 2023 GMT
        Subject: CN=8eb0d5ba099fb16d1c1727c8d9e43dcc91fafba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:85:13:35:1d:45:99:10:c6:f4:f3:23:84:00:
                    79:29:85:cc:24:db:09:97:36:a4:fb:6b:46:8f:ff:
                    90:46:86:3d:10:4c:8d:48:a5:9e:78:1d:54:af:6b:
                    48:d9:c7:0a:a2:6c:fe:0b:9b:64:74:cf:4f:82:81:
                    d1:da:2b:7b:95:31:b2:5c:75:43:d4:b3:bc:89:0d:
                    76:7e:04:df:df:cf:a6:25:f4:40:94:97:83:3a:0f:
                    88:11:3d:c3:6f:e1:84:25:b0:10:76:a4:e7:9b:6d:
                    d3:07:e9:9c:54:62:3c:3b:a8:2f:3a:81:ff:5b:e6:
                    b5:40:53:fc:bd:f9:a5:b2:41:1a:7c:27:84:e4:76:
                    63:8b:52:5b:5a:e1:2c:a9:76:97:d6:f7:ec:1c:14:
                    a3:ef:b7:bd:cb:ac:6f:f8:eb:db:a6:d2:13:bf:2c:
                    b7:6f:49:b4:2a:00:bc:85:73:24:25:f6:49:c2:06:
                    f7:8a:ee:24:da:4e:96:2f:4c:74:7b:06:f2:27:02:
                    e5:c3:eb:b8:a2:70:c7:9f:ee:1a:9e:b0:40:9d:28:
                    ec:55:52:73:52:af:ee:99:12:d3:dc:f6:f4:35:eb:
                    a6:de:86:ce:ed:dc:2a:f2:e7:b8:d8:d8:f9:45:6a:
                    e6:86:13:9a:10:9e:a9:d4:36:18:6d:db:6a:a3:d5:
                    38:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:1F:88:08:77:0C:66:46:ED:78:8A:55:A4:D2:2E:54:98:EA:41:67
            X509v3 Authority Key Identifier:
                keyid:A0:AA:33:C0:E5:EA:9C:31:8A:E1:96:B6:D8:72:02:35:9C:67:12:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b12012502b7ca3b0da125f250315dfe19bfb18d5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/8eb0d5ba099fb16d1c1727c8d9e43dcc91fafba7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/b12012502b7ca3b0da125f250315dfe19bfb18d5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.189.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:5e:d9:1c:6b:88:ec:22:bc:17:65:0e:f0:31:57:42:bb:38:
         0b:03:b5:3c:03:98:c4:3f:11:35:33:64:f1:94:ae:25:d1:17:
         5a:8d:77:f9:92:d1:7d:da:b4:4a:98:04:8b:ab:34:1f:40:ea:
         b1:11:07:3c:fe:76:7b:e3:0f:c8:4d:52:6d:ef:b1:34:2c:71:
         87:5b:88:06:20:7f:0b:a9:e8:6e:15:db:b4:67:4a:5e:75:31:
         ea:c7:1f:a0:10:60:13:82:4f:a7:63:a8:9c:d9:dd:25:4d:63:
         5d:a3:c3:b3:0b:dc:e4:af:3d:e4:99:20:ad:12:af:c3:bc:5a:
         8f:4d:81:c5:4e:30:80:5f:67:dd:0c:66:49:cc:5c:c3:15:5e:
         5b:28:57:1a:ff:b0:47:75:e2:cc:54:27:4f:f1:1b:45:df:d7:
         ad:ce:2a:46:74:d8:9a:dc:71:a0:64:f8:ba:13:eb:a7:87:0b:
         9f:14:65:8e:cd:3a:32:88:6f:56:6f:84:ec:d7:e2:11:b1:63:
         d6:27:46:e9:d5:00:66:3e:bd:22:60:4c:85:0f:ea:e6:99:c2:
         b7:52:20:d9:b4:93:a8:10:21:52:e3:e4:58:e0:b1:08:b0:f3:
         db:3b:c4:bc:38:21:0a:77:7d:c7:b2:62:ae:c8:e5:fd:b1:e9:
         53:71:41:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:46 2024 by rpki-client on console-ams.rpki-client.org