Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7026ef52-79b0-4fc9-b4fe-006e1d7be606/e5de708bf5f548379a463ca45375bc51f9ec5cc6.roa
File:                     e5de708bf5f548379a463ca45375bc51f9ec5cc6.roa (raw, json)
Hash identifier:          8v+P4+TeVeWZCdF5noWOtnRS1JN8l1BcnWR5GlBBFbE=
Subject key identifier:   B1:09:6D:41:29:EF:65:52:E5:84:10:CA:89:A1:1C:D7:5F:63:DC:C1
Certificate issuer:       /CN=d21f7315b565f88e18de69169de5a1119c25988f
Certificate serial:       217C95
Authority key identifier: 9A:0B:7E:6F:2B:9E:A4:D9:78:9C:53:3D:D2:BE:7E:AD:01:C6:2D:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d21f7315b565f88e18de69169de5a1119c25988f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7026ef52-79b0-4fc9-b4fe-006e1d7be606/e5de708bf5f548379a463ca45375bc51f9ec5cc6.roa
Signing time:             Thu 29 Jun 2023 20:21:43 +0000
ROA not before:           Wed 28 Jun 2023 20:21:42 +0000
ROA not after:            Sun 29 Jun 2025 20:21:42 +0000
asID:                     52245
IP address blocks:        186.148.104.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2194581 (0x217c95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d21f7315b565f88e18de69169de5a1119c25988f
        Validity
            Not Before: Jun 28 20:21:42 2023 GMT
            Not After : Jun 29 20:21:42 2025 GMT
        Subject: CN=e5de708bf5f548379a463ca45375bc51f9ec5cc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ac:84:17:d6:2c:41:97:99:4a:45:83:1c:38:
                    35:10:c2:2a:c9:f2:90:85:11:3f:4c:09:51:d3:34:
                    3b:4c:91:c8:6f:00:33:27:87:51:2e:6b:08:d5:49:
                    f7:9e:54:b2:85:dc:80:fd:35:4d:71:1c:f8:31:12:
                    9d:74:dd:5b:5f:ef:10:90:f1:17:cd:e4:1d:34:78:
                    1b:9b:e4:e3:a6:2b:9f:5e:8f:6c:28:d6:e5:3f:71:
                    8f:86:0d:cf:87:a9:84:8e:f6:e9:31:15:54:98:ae:
                    b0:88:0a:17:20:d9:7c:97:7a:96:39:8d:f2:4c:ad:
                    56:8a:f1:96:72:dd:e5:79:96:69:b8:6a:29:e3:f9:
                    9c:c4:9a:13:11:b2:29:4c:33:5c:1e:b9:f0:61:e4:
                    f8:35:5b:4d:b5:de:25:27:9c:03:17:45:b0:78:3c:
                    3f:cc:48:d2:0c:3c:61:81:c0:d3:d8:a3:c3:1d:31:
                    ad:52:c1:5d:90:c7:8b:7b:f1:96:33:2c:4b:59:af:
                    4f:85:5c:85:83:a6:22:29:4a:61:33:8b:42:fe:34:
                    c4:00:a9:fb:a9:ce:26:26:39:4b:b4:d1:b6:af:cb:
                    2a:59:ef:a6:bd:ea:70:43:95:12:e3:20:13:c1:93:
                    28:13:d3:7e:f1:f0:bb:6e:f5:8e:f5:87:5d:60:67:
                    50:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:09:6D:41:29:EF:65:52:E5:84:10:CA:89:A1:1C:D7:5F:63:DC:C1
            X509v3 Authority Key Identifier:
                keyid:9A:0B:7E:6F:2B:9E:A4:D9:78:9C:53:3D:D2:BE:7E:AD:01:C6:2D:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d21f7315b565f88e18de69169de5a1119c25988f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7026ef52-79b0-4fc9-b4fe-006e1d7be606/e5de708bf5f548379a463ca45375bc51f9ec5cc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7026ef52-79b0-4fc9-b4fe-006e1d7be606/d21f7315b565f88e18de69169de5a1119c25988f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:58:73:f4:3b:d0:a6:22:78:33:8f:f3:55:72:08:00:b1:be:
         03:5d:b9:bd:63:2e:db:c9:7d:07:fe:e2:68:85:e8:6b:6e:0f:
         db:6e:d1:4b:99:de:b4:85:8f:88:93:f7:de:40:97:8a:b9:dd:
         48:df:1c:a2:6d:db:f1:bd:57:aa:a7:c8:50:8b:41:6b:9b:42:
         80:38:d1:90:24:66:67:f1:fd:86:7b:e9:c5:fb:23:e9:99:f8:
         51:88:5d:82:6b:15:c5:a7:db:06:4e:3f:5f:ce:5c:4a:c6:33:
         9b:e7:61:33:5e:94:bf:20:a0:b1:d9:01:2b:97:03:28:74:e4:
         a6:23:40:29:a3:7a:72:b4:88:bd:cf:f3:8d:50:55:02:eb:81:
         f3:d5:74:8e:64:db:1d:31:b9:da:ae:9b:fa:7f:ed:a9:fb:5a:
         f1:05:72:20:52:0b:08:4c:f3:9b:f9:4d:a4:d3:f7:59:70:4a:
         cc:32:1b:9b:83:db:0c:bd:13:1b:98:cd:95:94:de:8a:e5:b2:
         b0:c8:30:b7:2c:f5:fc:1d:b8:95:52:b4:99:3f:d5:24:4c:7c:
         58:11:0d:a1:55:37:af:90:e6:53:c4:39:ee:14:d9:42:19:ac:
         5f:6c:60:c2:81:7c:95:17:50:91:53:5f:f8:cc:e3:a9:be:61:
         9c:f1:9f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:38 2024 by rpki-client on console-ams.rpki-client.org