Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/96f461f3491262a5e688e42671b1f0f4df26efc1.roa
File:                     96f461f3491262a5e688e42671b1f0f4df26efc1.roa (raw, json)
Hash identifier:          8y3No5SLytsRL5jgAIqzGfmu+R6mGRYMGX1JvS6p/5w=
Subject key identifier:   BA:FC:C6:61:C6:17:FE:AE:DF:41:4F:47:E5:E7:43:7B:60:98:05:F3
Certificate issuer:       /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial:       037ED1
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/96f461f3491262a5e688e42671b1f0f4df26efc1.roa
Signing time:             Tue 11 Jul 2023 12:56:42 +0000
ROA not before:           Mon 10 Jul 2023 12:56:42 +0000
ROA not after:            Fri 11 Jul 2025 12:56:42 +0000
asID:                     7418
IP address blocks:        186.78.0.0/15 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229073 (0x37ed1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
        Validity
            Not Before: Jul 10 12:56:42 2023 GMT
            Not After : Jul 11 12:56:42 2025 GMT
        Subject: CN=96f461f3491262a5e688e42671b1f0f4df26efc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:46:31:39:f1:0a:31:a1:b0:dd:57:26:0b:40:
                    6c:bb:f9:18:1d:bc:db:ff:42:65:66:3e:9c:84:89:
                    f7:2e:85:f7:f1:6d:4d:26:f5:cb:b2:60:a8:51:5f:
                    66:0a:fe:59:0b:0f:d2:9e:e8:83:3e:ea:9c:93:8d:
                    b1:8c:45:58:f1:cc:18:4d:bc:7b:50:05:76:98:60:
                    63:1c:cd:16:05:32:47:8e:a1:d5:82:05:52:62:21:
                    fa:31:8b:13:1d:12:85:14:4a:f3:db:9d:86:5b:15:
                    51:24:34:e9:fb:e3:66:2e:81:ad:f2:dc:2c:35:6f:
                    0f:73:e1:73:16:1d:7b:4b:39:63:f3:c6:ce:b0:fa:
                    28:f9:80:cd:d6:f6:03:52:37:b0:e7:98:d0:7d:e9:
                    3a:22:51:67:bd:fc:a4:cb:0d:36:8d:d1:78:9b:a9:
                    28:27:1c:8f:d2:15:69:6e:51:75:a3:fc:8e:40:66:
                    71:48:1e:43:54:c7:9a:88:65:a2:27:45:7a:98:2f:
                    01:91:3d:22:c8:c9:3a:b9:2b:99:15:f9:71:a0:af:
                    0e:0d:1f:92:c4:bd:44:6f:eb:ea:26:b8:62:8b:20:
                    44:8a:7c:94:2f:e7:92:ed:45:4d:ce:e8:5d:23:c1:
                    2b:42:44:80:51:02:54:e4:85:f5:45:11:6a:84:d0:
                    c0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:FC:C6:61:C6:17:FE:AE:DF:41:4F:47:E5:E7:43:7B:60:98:05:F3
            X509v3 Authority Key Identifier:
                keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/96f461f3491262a5e688e42671b1f0f4df26efc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.78.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         10:07:7c:af:32:0d:e1:01:b4:db:63:fc:da:d2:bc:26:71:96:
         ee:6b:19:2f:f7:3f:5b:76:6d:ef:c6:f1:a4:3d:b6:7d:67:b4:
         18:ed:b6:8a:3b:d6:b7:e1:fe:7b:f3:b7:a6:8d:ea:4d:b3:dc:
         4d:2f:9b:15:bc:32:21:63:6f:ad:b4:23:5f:fb:50:fc:25:80:
         8e:3f:1e:82:15:40:9a:e1:ee:ee:69:02:39:aa:da:1e:39:88:
         25:c5:d1:2e:eb:7e:fc:a0:f8:d1:28:65:0e:c4:6d:c7:19:6f:
         ec:1e:f2:a6:a6:0f:7a:53:3e:48:71:ee:c9:4a:6a:b6:d3:9c:
         1e:1f:3e:d4:d2:f6:56:b6:71:a3:40:7e:12:a7:89:9b:53:a4:
         b2:c5:fd:da:51:e6:97:59:e1:11:57:9a:bc:f3:88:14:b6:c1:
         7c:9d:b0:ad:51:27:f6:3c:e5:ae:54:66:c8:9c:f9:fa:55:e1:
         34:02:f7:06:72:80:e5:ab:3a:8b:54:e3:c1:d5:16:64:21:89:
         5b:de:45:d9:1c:59:d5:98:bc:1a:7a:f4:95:da:3d:19:cd:db:
         bf:37:30:eb:17:cb:05:5d:c0:2a:24:f1:e4:e4:aa:99:29:78:
         27:d5:bd:2e:56:7a:a1:25:b3:b1:a9:74:02:a2:c8:ec:bf:19:
         48:dd:d3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org