Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/7497522c121e3622e7aaf73898f8902a278e78ea.roa
File:                     7497522c121e3622e7aaf73898f8902a278e78ea.roa (raw, json)
Hash identifier:          PtTmZ3wG830QgVoQjhmkoqfNeTy2N5E6MoiHdEkS/kk=
Subject key identifier:   13:48:23:61:DB:4D:F3:E2:C3:80:07:CD:6D:F8:7B:43:FB:0D:63:49
Certificate issuer:       /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial:       038F92
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/7497522c121e3622e7aaf73898f8902a278e78ea.roa
Signing time:             Tue 11 Jul 2023 12:59:36 +0000
ROA not before:           Mon 10 Jul 2023 12:59:36 +0000
ROA not after:            Fri 11 Jul 2025 12:59:36 +0000
asID:                     16629
IP address blocks:        186.106.0.0/15 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 233362 (0x38f92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
        Validity
            Not Before: Jul 10 12:59:36 2023 GMT
            Not After : Jul 11 12:59:36 2025 GMT
        Subject: CN=7497522c121e3622e7aaf73898f8902a278e78ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:20:0a:d7:ca:cc:b0:df:bc:53:de:df:10:3a:
                    15:91:ee:d6:a0:3c:a5:db:d1:cb:e2:89:3c:b6:88:
                    ac:5b:18:32:a5:e7:f8:a6:4c:6b:29:dc:ad:ab:2b:
                    6c:41:c6:a5:5d:49:22:92:76:2e:8d:68:9b:36:1e:
                    f6:77:95:d0:d4:9e:11:bb:39:95:12:2b:2d:24:b7:
                    b3:ab:b8:83:be:12:32:0e:02:e0:3e:f2:eb:75:77:
                    38:00:4d:ec:6d:83:db:1a:a5:48:94:e7:ad:78:5d:
                    cc:54:cb:54:b3:72:e7:bf:f2:70:37:89:2e:b5:d1:
                    6a:78:b4:79:05:67:20:21:b1:55:8f:ba:3f:dc:1b:
                    ad:6e:a0:f3:c2:b6:a5:72:b4:c7:a9:d7:b1:60:fb:
                    e4:c3:e1:2d:4b:2b:4e:9f:b1:36:2d:85:d9:62:c5:
                    33:44:49:ab:d8:a4:59:37:1f:cb:dd:4c:8a:0b:90:
                    56:fb:c3:b1:98:e2:da:17:5c:fb:e7:66:86:1c:64:
                    c3:86:78:96:f6:40:fa:cf:3b:db:b1:bb:a3:db:7d:
                    d1:50:a8:8a:6b:1e:4d:e1:45:99:f1:d0:b0:cd:12:
                    1d:08:eb:f9:e6:69:79:69:3e:e8:c6:15:df:c3:37:
                    4d:6c:2f:a2:e9:81:6f:d8:18:a5:63:7f:3e:32:e7:
                    b7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:48:23:61:DB:4D:F3:E2:C3:80:07:CD:6D:F8:7B:43:FB:0D:63:49
            X509v3 Authority Key Identifier:
                keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/7497522c121e3622e7aaf73898f8902a278e78ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.106.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         85:8b:f1:f8:4f:6f:d8:c1:64:dd:db:90:9c:5b:3b:56:71:89:
         10:73:f8:1b:b1:06:a1:ec:90:21:0d:bc:ad:65:4b:58:a8:aa:
         54:96:41:ec:b0:ae:5f:32:0b:de:31:76:b4:b8:47:e6:ce:be:
         86:23:a2:2e:61:c3:27:24:5d:46:62:1c:fe:77:2e:e8:7f:01:
         1f:62:58:35:ec:9f:8c:7b:19:92:1f:3a:7d:ce:c4:a5:f2:a6:
         54:34:10:c6:43:5d:65:c1:6d:79:64:09:c9:da:86:4d:7e:6b:
         18:70:95:8e:95:9e:97:83:3f:94:c4:2b:8f:c7:10:15:d1:21:
         c5:61:8a:95:7e:c7:aa:13:1b:de:19:b6:fa:4e:58:dd:2c:43:
         8f:30:6a:87:e9:56:11:c5:13:a6:4a:7e:a0:66:30:30:44:fd:
         6e:e3:84:ca:1b:10:63:57:11:9a:14:e0:31:41:6a:06:ce:be:
         ed:7e:38:11:ec:bc:05:01:55:5c:d1:c6:8b:e0:7c:b9:9d:2c:
         52:ac:91:f5:20:08:f1:57:b9:64:ff:95:7b:62:af:9f:dd:12:
         be:7e:51:a8:0f:52:30:39:70:17:5a:a3:95:9b:e5:f8:19:29:
         c5:b7:d3:ec:b0:b3:c5:a8:01:d3:15:85:ab:44:83:94:c1:12:
         85:3a:ed:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:59 2024 by rpki-client on console-ams.rpki-client.org