Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/625f07cc-275d-4d29-afd8-1212efcfa216/cfdb991f9b18ccc776c8abaf49a59c8cb5b66aee.roa
File:                     cfdb991f9b18ccc776c8abaf49a59c8cb5b66aee.roa (raw, json)
Hash identifier:          rYWaEi//50zg19bd35Vrlwtt6PwICmFTFOICyPeiFEA=
Subject key identifier:   56:05:CB:41:81:9D:C3:79:EB:1D:28:69:C6:F4:FA:2D:15:A3:1A:EA
Certificate issuer:       /CN=82225174b3988d5920cd5a642f74ca96004f3b86
Certificate serial:       0D5D6A
Authority key identifier: A6:B6:0E:25:B5:F3:51:46:12:87:2E:65:A8:35:52:98:B3:67:42:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82225174b3988d5920cd5a642f74ca96004f3b86.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/625f07cc-275d-4d29-afd8-1212efcfa216/cfdb991f9b18ccc776c8abaf49a59c8cb5b66aee.roa
Signing time:             Wed 24 Mar 2021 14:28:34 +0000
ROA not before:           Wed 24 Mar 2021 14:28:34 +0000
ROA not after:            Tue 24 Mar 2026 14:28:34 +0000
asID:                     262191
IP address blocks:        186.190.254.0/24 maxlen: 24
                          186.190.255.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 875882 (0xd5d6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82225174b3988d5920cd5a642f74ca96004f3b86
        Validity
            Not Before: Mar 24 14:28:34 2021 GMT
            Not After : Mar 24 14:28:34 2026 GMT
        Subject: CN=cfdb991f9b18ccc776c8abaf49a59c8cb5b66aee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ee:f7:89:ac:f6:b5:71:a6:8f:04:0c:21:7a:
                    ec:d1:6a:ac:42:ba:f2:14:6d:d0:2a:1d:e6:39:d7:
                    b8:e0:ba:f0:01:02:7d:dd:ae:02:b9:49:3e:50:78:
                    ab:68:1a:d3:24:c3:3a:7a:82:97:5f:bd:61:71:7f:
                    ab:e7:cf:bc:03:cf:98:20:65:0c:d9:5f:a9:ce:ef:
                    43:f2:1f:dc:b3:61:e7:64:d4:05:5e:9c:64:22:91:
                    20:85:24:e0:f8:af:1e:74:ba:60:1c:98:fd:ce:e9:
                    2b:b7:3b:f1:90:f9:a4:08:1e:7d:af:67:12:f4:6b:
                    da:cd:08:4c:b8:3e:56:0d:db:72:98:09:bd:e5:d0:
                    cd:ba:a5:11:eb:5b:64:b5:d6:54:06:75:98:2a:a5:
                    d5:4f:83:7f:7c:1f:1e:b4:1b:0f:76:fb:d1:63:e9:
                    5d:4d:3a:bb:99:f0:d1:ce:63:86:ab:52:c8:67:86:
                    e6:36:53:83:55:53:65:25:6c:cd:98:8c:89:84:13:
                    75:3c:8e:17:07:ce:f7:7a:30:d1:34:e9:66:67:fd:
                    4a:65:5e:2d:37:0e:73:2b:be:ea:dc:cc:65:5d:d3:
                    a1:6a:39:df:34:f7:cf:2c:b6:91:a7:a6:cf:ee:0f:
                    97:01:f6:be:c5:c7:4f:78:3e:c9:c9:e0:73:74:92:
                    e6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:05:CB:41:81:9D:C3:79:EB:1D:28:69:C6:F4:FA:2D:15:A3:1A:EA
            X509v3 Authority Key Identifier:
                keyid:A6:B6:0E:25:B5:F3:51:46:12:87:2E:65:A8:35:52:98:B3:67:42:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82225174b3988d5920cd5a642f74ca96004f3b86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/625f07cc-275d-4d29-afd8-1212efcfa216/cfdb991f9b18ccc776c8abaf49a59c8cb5b66aee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/625f07cc-275d-4d29-afd8-1212efcfa216/82225174b3988d5920cd5a642f74ca96004f3b86.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.190.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:3d:84:39:a3:39:9d:68:d7:1b:6e:b2:28:6a:ec:cd:08:47:
         a9:c9:3b:a4:8b:77:9d:5e:cb:ba:f5:8d:2e:75:16:1e:9e:56:
         88:86:83:35:f7:00:c2:79:d9:bf:94:4f:12:a2:40:20:cc:96:
         5d:72:0c:ea:9c:37:3f:d8:dd:ea:1f:9d:71:59:00:20:90:4d:
         60:63:2e:1b:84:d9:38:d1:f3:5d:22:7a:d5:d0:8e:4c:b7:fe:
         c4:20:e1:5f:80:ec:d5:4c:6b:72:f2:f8:b6:6d:ef:1c:c3:07:
         6b:3e:4b:3f:24:1f:41:c8:cb:51:f3:3a:96:79:11:de:25:35:
         72:ec:52:06:c5:99:2d:8b:7e:64:67:55:49:74:b7:9e:d7:88:
         6b:82:b9:69:0a:57:a2:c4:3f:42:e8:62:c2:f2:7b:0c:85:50:
         c7:0f:a1:6f:8b:59:a5:1b:9e:75:b7:01:10:95:50:54:f1:c6:
         49:ec:14:4b:2e:90:25:25:da:0b:f9:c3:43:df:69:60:cb:5a:
         f3:a4:de:f0:d5:f9:1c:81:7f:45:b1:3a:8a:e4:06:79:38:be:
         e7:c5:63:38:42:3d:6a:2b:08:f8:ce:3d:54:b0:0f:ab:97:62:
         68:db:81:ed:c0:1b:eb:aa:42:f6:9f:73:44:dc:d5:33:2c:2e:
         8b:4a:c8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org