Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/bd5ec78f68d10fd92dc3f2800bc3932bdad96495.roa
File:                     bd5ec78f68d10fd92dc3f2800bc3932bdad96495.roa (raw, json)
Hash identifier:          y9IxfH6bYBdH920lGsv2GwCZ99E3SEJ5ZgiUP43GQY0=
Subject key identifier:   49:15:4D:45:A8:13:31:2B:88:AE:25:4C:53:38:C3:53:8F:06:C6:36
Certificate issuer:       /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial:       0386F4
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/bd5ec78f68d10fd92dc3f2800bc3932bdad96495.roa
Signing time:             Tue 11 Jul 2023 12:58:08 +0000
ROA not before:           Mon 10 Jul 2023 12:58:07 +0000
ROA not after:            Fri 11 Jul 2025 12:58:07 +0000
asID:                     7418
IP address blocks:        186.104.0.0/15 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231156 (0x386f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
        Validity
            Not Before: Jul 10 12:58:07 2023 GMT
            Not After : Jul 11 12:58:07 2025 GMT
        Subject: CN=bd5ec78f68d10fd92dc3f2800bc3932bdad96495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:63:80:96:d1:6f:b5:7f:00:ce:55:ce:35:ed:
                    c9:06:95:fc:ef:74:10:a5:af:86:fe:83:8e:01:b3:
                    5d:e0:de:9c:b1:10:f1:d0:57:04:7a:95:55:7d:a1:
                    55:bd:36:5e:63:aa:a5:fb:62:b2:20:53:b7:f4:2f:
                    51:8a:56:05:b0:45:35:d9:3f:99:20:bb:15:cf:7c:
                    12:48:6c:26:2f:05:ed:e1:b1:1d:75:26:93:84:ce:
                    fc:dd:fd:7c:93:75:9c:7a:6e:3d:3a:a4:d6:ef:61:
                    82:37:e5:c4:20:78:68:a9:bc:26:c5:79:2b:a2:9e:
                    eb:c1:83:b1:18:d3:5d:47:7f:aa:ac:22:2b:7e:de:
                    36:c6:7f:1e:14:6d:ee:48:4f:92:8f:c0:e0:6b:ea:
                    b5:21:13:77:74:82:c1:72:c1:8d:8f:17:84:6a:16:
                    95:2d:09:8c:bb:c2:41:20:88:43:dd:7c:01:ee:80:
                    5d:68:20:9d:04:50:26:79:77:8c:5c:4a:0d:b7:03:
                    3d:ec:34:db:90:1c:a7:7d:02:d4:8e:ac:7a:89:47:
                    a8:fc:c4:a6:f8:6c:31:e9:bd:d5:ea:1b:7b:8a:53:
                    c5:18:4a:07:e6:e8:ff:14:5e:52:10:b1:24:a3:f1:
                    70:14:38:c8:ca:8b:6e:3a:fd:f8:cd:3e:ed:94:4e:
                    25:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:15:4D:45:A8:13:31:2B:88:AE:25:4C:53:38:C3:53:8F:06:C6:36
            X509v3 Authority Key Identifier:
                keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/bd5ec78f68d10fd92dc3f2800bc3932bdad96495.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.104.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         03:a1:af:ab:28:8f:a9:0d:aa:f5:7a:87:28:83:35:d0:40:ac:
         b6:f6:b2:1a:d0:99:f8:fe:9b:95:1f:5a:ef:d7:b1:af:6f:79:
         10:41:3e:59:59:20:6f:4a:bf:01:17:c5:03:65:3c:ab:ea:35:
         ab:f6:eb:88:44:73:bc:4d:2b:13:71:e3:b1:2d:f5:1c:e8:a7:
         f4:77:43:24:95:c6:da:20:f8:53:cb:da:85:a5:70:99:bb:db:
         8c:57:ca:a1:85:7b:ac:10:0f:7c:32:ea:88:c7:f2:b7:f2:49:
         b3:e6:fb:9d:c5:e4:34:08:99:31:02:ca:7c:44:da:5c:6e:36:
         4f:77:22:24:76:0b:33:5e:9c:01:94:f6:08:71:d8:1f:67:37:
         47:9b:e7:61:be:64:25:38:78:72:3e:2e:63:cf:7b:f7:b0:62:
         9e:60:d5:98:9f:b2:49:fd:08:fd:d7:59:5c:31:73:71:50:82:
         fb:f9:67:1d:fc:37:4a:d5:56:21:f8:33:a3:7a:27:5d:cb:97:
         eb:05:fe:4c:64:6f:31:c8:6c:2e:75:5d:95:eb:e1:62:00:d6:
         77:9e:17:10:d9:cb:83:de:b1:a0:2a:6e:dc:18:81:79:49:bd:
         f2:b4:21:67:a0:79:d8:8f:dd:ea:b3:02:6f:06:23:6c:5e:3f:
         79:0a:19:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org