Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/60301754-5ae7-4eb9-ae7b-93cb9761ab48/f820f96f8145258c97bffa25ca72c77f5e334fda.roa
File:                     f820f96f8145258c97bffa25ca72c77f5e334fda.roa (raw, json)
Hash identifier:          9XiTcTgt9ekAoVErJUAu3lQjg8I7VySHbKfr/2/KVzA=
Subject key identifier:   86:50:96:78:2D:B0:06:FF:AA:BC:A9:28:47:89:ED:DA:73:66:C4:E4
Certificate issuer:       /CN=604a67651b9e118bdc8f447e80ce77e1326a75c0
Certificate serial:       029A88
Authority key identifier: 01:B5:81:D5:80:05:4B:8E:F4:D4:0B:9D:04:09:2A:26:77:6C:B7:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/604a67651b9e118bdc8f447e80ce77e1326a75c0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/60301754-5ae7-4eb9-ae7b-93cb9761ab48/f820f96f8145258c97bffa25ca72c77f5e334fda.roa
Signing time:             Wed 09 Aug 2023 21:00:20 +0000
ROA not before:           Tue 08 Aug 2023 21:00:19 +0000
ROA not after:            Sat 09 Aug 2025 21:00:19 +0000
asID:                     270190
IP address blocks:        186.26.74.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170632 (0x29a88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=604a67651b9e118bdc8f447e80ce77e1326a75c0
        Validity
            Not Before: Aug  8 21:00:19 2023 GMT
            Not After : Aug  9 21:00:19 2025 GMT
        Subject: CN=f820f96f8145258c97bffa25ca72c77f5e334fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:28:ad:19:38:f3:91:3d:f2:7f:34:c3:dd:24:
                    69:42:5a:82:dc:4a:dd:99:0e:7a:59:53:f9:d6:f8:
                    50:c1:36:6c:ef:c0:88:56:0f:ad:a1:6c:0b:db:b4:
                    7a:a5:c4:63:ae:da:59:a4:b6:25:3c:e8:49:48:4d:
                    6c:fb:a8:d1:dd:23:e4:9f:be:bc:a4:20:dd:75:f3:
                    ba:f7:e2:e1:59:cc:b4:db:c1:13:8e:9c:45:eb:0c:
                    29:ce:26:01:8b:2a:a5:90:d9:ea:8f:8c:46:4c:e5:
                    15:a7:fc:03:a6:69:ec:c8:c3:8f:9c:3d:fa:9c:f7:
                    64:3a:1e:4c:e7:ea:b4:43:c0:f6:16:01:48:f1:d6:
                    22:10:ef:8d:ac:ac:8c:96:c0:b5:9a:86:4a:00:df:
                    ba:c7:ee:61:3e:71:7a:6f:cb:a4:61:9b:56:4a:b3:
                    6c:fd:98:09:4c:99:5c:ed:9e:49:33:ef:7e:37:16:
                    d1:8f:5f:cf:c1:ab:42:b5:5a:79:61:17:a9:2f:ac:
                    df:8b:e8:14:e5:2c:1c:62:2c:82:dc:a8:79:6c:5c:
                    c7:66:43:21:69:33:0f:c9:37:ea:a6:a2:bf:6f:97:
                    16:06:66:16:8a:15:13:89:f4:d8:5d:62:4d:4f:3a:
                    3e:e0:74:a6:ba:ee:af:39:fd:d4:49:c3:eb:5b:5e:
                    31:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:50:96:78:2D:B0:06:FF:AA:BC:A9:28:47:89:ED:DA:73:66:C4:E4
            X509v3 Authority Key Identifier:
                keyid:01:B5:81:D5:80:05:4B:8E:F4:D4:0B:9D:04:09:2A:26:77:6C:B7:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/604a67651b9e118bdc8f447e80ce77e1326a75c0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/60301754-5ae7-4eb9-ae7b-93cb9761ab48/f820f96f8145258c97bffa25ca72c77f5e334fda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/60301754-5ae7-4eb9-ae7b-93cb9761ab48/604a67651b9e118bdc8f447e80ce77e1326a75c0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.26.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:65:c1:82:43:4f:4a:d0:b2:3d:36:e2:6f:07:75:9b:53:b0:
         e1:0b:78:d3:62:a7:6f:3f:56:95:65:6e:f8:a7:cd:20:6d:32:
         62:aa:16:4d:17:bd:df:be:f0:51:b6:c2:04:6c:65:7c:f4:76:
         a9:11:4f:34:68:5e:5a:63:6a:83:b5:1c:5c:91:08:85:29:bf:
         06:02:26:e9:a9:2e:cd:19:e2:87:7e:88:29:d7:88:94:c6:87:
         0d:09:c2:60:69:c6:56:76:11:c6:20:87:1e:1b:e0:35:b3:e9:
         0c:72:2d:bd:73:13:1b:2f:33:3a:8a:df:cf:dc:bd:8f:4b:ce:
         2e:92:35:7b:cb:50:b5:ce:9b:12:4b:fc:96:d1:44:6f:0a:b5:
         a9:f8:6a:db:d7:e3:2a:a0:68:7e:04:7f:69:b3:aa:f0:8b:4a:
         3d:3b:48:6e:91:e5:25:c8:17:60:13:96:ac:64:0f:a1:b7:93:
         74:fe:64:1b:32:2e:86:90:aa:6a:17:b7:7b:41:e4:a6:ee:71:
         74:f2:0f:30:7d:09:5b:c3:54:c4:43:62:d1:df:b3:a5:3d:e4:
         eb:c0:d6:98:dc:e2:3c:b2:ed:11:62:f4:02:13:b6:65:26:62:
         7f:11:d8:3c:25:56:c2:d8:d8:ea:6e:0a:54:f3:a4:b1:ae:a7:
         c0:51:ba:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:36 2024 by rpki-client on console-ams.rpki-client.org