Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/47fd5629621ce3f11f5f08c05c2de9b607ae6062.roa
File:                     47fd5629621ce3f11f5f08c05c2de9b607ae6062.roa (raw, json)
Hash identifier:          D/7cq9I3mOfq4aGvj8lrtXV6nCbQ3Y7efykhdpca5HM=
Subject key identifier:   49:7A:EA:03:78:58:D3:4B:FF:7C:64:BC:3C:B6:74:37:D7:59:D4:EE
Certificate issuer:       /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial:       038C19
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/47fd5629621ce3f11f5f08c05c2de9b607ae6062.roa
Signing time:             Tue 11 Jul 2023 12:59:15 +0000
ROA not before:           Mon 10 Jul 2023 12:59:15 +0000
ROA not after:            Fri 11 Jul 2025 12:59:15 +0000
asID:                     7418
IP address blocks:        186.106.0.0/15 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 232473 (0x38c19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
        Validity
            Not Before: Jul 10 12:59:15 2023 GMT
            Not After : Jul 11 12:59:15 2025 GMT
        Subject: CN=47fd5629621ce3f11f5f08c05c2de9b607ae6062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2a:7a:d4:70:a1:79:1b:17:e6:b9:52:0b:de:
                    13:f5:74:71:81:3c:f4:4d:b5:35:bd:48:10:b6:8f:
                    ee:ce:7b:80:10:0b:38:e7:f6:86:05:31:5c:7a:4f:
                    98:8d:aa:7f:ca:d7:c8:d2:9f:18:a9:9d:ed:a1:1f:
                    77:47:c5:08:90:35:d0:33:67:b6:3a:f4:8f:0e:7e:
                    21:93:ae:93:b8:50:7a:23:2d:80:7a:49:05:22:d5:
                    8a:b6:b5:87:b4:93:0b:34:07:b5:6e:39:02:2d:a9:
                    84:4c:8a:ac:f6:38:87:d1:bc:e2:7e:78:3c:59:67:
                    b6:d1:70:cf:d2:7e:49:63:0b:03:cc:64:22:83:2d:
                    16:ae:52:dc:f5:2d:f5:bb:ba:09:1a:f6:a7:7d:c4:
                    11:9e:a0:ad:10:1a:9b:33:d2:35:6a:7d:e2:e0:47:
                    11:2f:a7:d9:c8:8e:6d:ab:cd:db:4b:a6:10:f6:c0:
                    dc:af:75:0c:fa:dd:4b:ab:06:5e:df:e7:fb:6d:9e:
                    ea:76:b9:ed:86:56:b2:dd:fb:22:c9:cf:82:be:8d:
                    90:69:26:c3:1d:31:2b:e0:18:40:9a:2d:43:71:07:
                    b1:9f:e9:ce:0c:49:62:4f:cc:21:26:9a:d7:fe:5d:
                    cb:eb:15:a6:95:b2:43:b2:8c:5b:29:09:c0:2e:4c:
                    3f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:7A:EA:03:78:58:D3:4B:FF:7C:64:BC:3C:B6:74:37:D7:59:D4:EE
            X509v3 Authority Key Identifier:
                keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/47fd5629621ce3f11f5f08c05c2de9b607ae6062.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.106.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         70:0f:8f:fd:cd:a4:79:4c:97:1e:2a:d3:a8:9b:35:32:f0:2b:
         9e:51:91:e6:5a:25:2e:54:42:b7:fb:18:02:47:78:31:8f:46:
         70:0c:ba:75:1a:96:2c:78:c0:e3:cc:c5:a1:27:78:58:d5:74:
         b5:d1:69:a2:f0:98:3f:28:b4:47:04:74:f8:cd:50:e1:3a:71:
         a4:1c:3c:9f:97:ef:9e:57:92:0f:91:20:97:0a:84:4d:66:ed:
         7c:fc:e9:c5:c0:24:0d:72:99:40:be:b4:d5:fa:c0:02:6a:52:
         81:c4:f0:33:72:61:80:ad:44:dc:12:46:4a:40:24:b1:a1:88:
         70:96:ac:08:51:d2:98:e8:49:46:f5:6b:86:9e:a5:4a:e9:9f:
         20:90:ca:16:4d:fc:46:a0:9f:04:b9:0c:54:3b:f7:cb:c4:65:
         6a:e6:b1:54:80:6f:e3:ef:59:3a:d4:5b:8f:19:1e:12:36:be:
         ea:1f:a2:4f:bd:d8:a5:8b:22:a7:f3:23:90:6a:e6:37:68:a9:
         ef:91:05:ed:8e:4f:ab:c0:b5:b6:fb:82:75:88:64:72:f2:60:
         dd:87:30:d1:40:f3:ba:34:a1:d0:59:5e:27:b9:6d:97:8d:c6:
         24:62:ae:9f:da:16:bc:7c:f3:e6:9e:0f:38:fd:e7:52:47:ed:
         27:3f:c9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org