Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/0e39c71249b52b24a0534d1f6f22c13e623fbf11.roa
File:                     0e39c71249b52b24a0534d1f6f22c13e623fbf11.roa (raw, json)
Hash identifier:          /L+L5wfLKzCOFN6bnnXYair+CnktLVpS/+DNwXC9Yf0=
Subject key identifier:   43:1D:20:83:3B:F3:0E:9F:8F:24:EC:25:5C:79:AF:C7:4C:02:62:00
Certificate issuer:       /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial:       038A22
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/0e39c71249b52b24a0534d1f6f22c13e623fbf11.roa
Signing time:             Tue 11 Jul 2023 12:58:24 +0000
ROA not before:           Mon 10 Jul 2023 12:58:24 +0000
ROA not after:            Fri 11 Jul 2025 12:58:24 +0000
asID:                     16629
IP address blocks:        186.104.0.0/15 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231970 (0x38a22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
        Validity
            Not Before: Jul 10 12:58:24 2023 GMT
            Not After : Jul 11 12:58:24 2025 GMT
        Subject: CN=0e39c71249b52b24a0534d1f6f22c13e623fbf11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ed:c0:c6:62:18:95:ca:8e:f3:8d:1d:b7:74:
                    8a:c4:8d:23:62:3a:e8:d3:88:8f:2d:d3:9c:e0:e5:
                    3d:7a:1f:85:37:09:86:a9:7b:7c:ff:f5:cd:0c:bf:
                    de:31:15:ae:f6:f5:39:61:9e:76:17:ef:85:2d:84:
                    4e:80:f6:41:bc:38:23:35:b2:f1:d7:3d:b7:33:6d:
                    ac:82:f1:d9:9f:7b:4e:ff:1b:96:58:3b:25:f3:01:
                    b9:fd:0d:0f:d3:02:c9:01:45:77:a2:be:6a:45:37:
                    64:1c:85:af:82:dc:b0:b2:f1:ff:a8:92:49:22:c9:
                    e4:64:4b:1f:a1:98:0f:99:9a:9f:fc:eb:ed:42:56:
                    5b:5e:94:a4:f9:7e:cf:4b:08:97:50:51:15:53:06:
                    0c:5b:b0:17:1e:83:19:fe:03:52:cb:4c:2e:b3:3b:
                    92:89:94:dd:53:1d:59:21:5f:1a:c4:53:ef:5f:8a:
                    6b:11:eb:7c:5b:5c:47:52:b8:fe:e6:96:1e:3a:4d:
                    b9:fb:ea:91:b1:d0:a1:cd:b6:c1:43:81:f1:fa:9c:
                    7f:63:7b:87:96:2e:91:bc:c2:28:8e:23:ea:21:5a:
                    56:99:a2:e6:1f:d3:29:a0:3e:4e:3d:df:ac:04:ec:
                    6b:66:4a:d0:f2:99:e6:7f:c2:0b:73:fe:6f:a6:ec:
                    88:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:1D:20:83:3B:F3:0E:9F:8F:24:EC:25:5C:79:AF:C7:4C:02:62:00
            X509v3 Authority Key Identifier:
                keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/0e39c71249b52b24a0534d1f6f22c13e623fbf11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.104.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         79:8a:f2:7e:79:8c:46:6e:1d:51:ad:6e:3e:84:27:17:96:74:
         4a:68:c4:9b:6b:f5:19:aa:a8:1b:42:46:9d:1b:4b:0c:8c:a5:
         90:2c:02:fd:55:8b:0d:bf:c6:12:f2:3e:6d:3c:77:28:c5:2a:
         68:9d:ec:f4:99:cb:36:99:a7:b5:7b:75:28:7a:e2:08:2e:99:
         56:de:4a:e2:fb:96:64:08:6d:e6:81:71:6c:31:d9:73:56:a7:
         35:dd:4a:5b:52:11:2d:d2:62:46:f7:3c:3b:9f:fe:dd:8f:80:
         5e:07:7c:c9:81:fd:c5:39:2d:c5:69:3f:d2:b2:85:a0:cf:82:
         fc:28:ba:b9:59:2c:70:a4:bc:6d:13:fc:82:ca:9a:98:55:2c:
         21:ef:d7:f7:8f:e0:f7:11:67:6c:2c:5a:97:36:ad:90:58:fa:
         83:d7:6e:3b:bb:cc:a3:36:cc:40:20:1e:cf:d2:29:eb:15:fb:
         54:cc:a3:85:cc:f4:b5:24:ea:1f:bd:8b:23:0e:b9:87:b7:d5:
         47:15:f7:7c:51:d3:9d:25:40:e5:0a:05:48:d4:e6:aa:35:e8:
         ec:91:dd:60:86:f1:f1:9b:b8:d1:2e:89:d8:a1:a4:ca:41:b8:
         f5:59:99:10:21:47:e4:ab:9f:89:88:30:9d:7c:4a:45:fc:b3:
         84:f2:27:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org