Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS27817.roa
File:                     AS27817.roa (raw, json)
Hash identifier:          o2iEXtpaR8PwZ1seWpf2LS4ruckheEZ6+4XgeeQljVQ=
Subject key identifier:   D1:0F:B6:23:B8:D8:4B:68:80:78:5E:D1:77:CC:D4:1F:90:22:B3:0D
Certificate issuer:       /CN=DB06236B96EE00934FCD39A560E5BC04EB7B9EA4
Certificate serial:       67BC2B00B624A929F1835F485963BB89483ED385
Authority key identifier: DB:06:23:6B:96:EE:00:93:4F:CD:39:A5:60:E5:BC:04:EB:7B:9E:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS27817.roa
Signing time:             Tue 04 Feb 2025 18:19:58 +0000
ROA not before:           Tue 04 Feb 2025 18:14:58 +0000
ROA not after:            Tue 03 Feb 2026 18:19:58 +0000
asID:                     27817
IP address blocks:        186.113.12.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:bc:2b:00:b6:24:a9:29:f1:83:5f:48:59:63:bb:89:48:3e:d3:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB06236B96EE00934FCD39A560E5BC04EB7B9EA4
        Validity
            Not Before: Feb  4 18:14:58 2025 GMT
            Not After : Feb  3 18:19:58 2026 GMT
        Subject: CN=D10FB623B8D84B6880785ED177CCD41F9022B30D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:95:b4:65:77:16:12:00:91:34:1d:2e:57:63:
                    20:d4:bd:3d:3d:5d:4c:45:ee:a4:77:17:0b:33:0f:
                    e1:5d:d7:cf:5c:b9:b3:05:bb:60:2f:d3:ab:eb:e4:
                    95:3c:2a:bf:fd:d2:a0:db:57:3e:a8:61:dd:f6:7b:
                    72:56:89:5c:4a:c1:13:2b:30:a5:57:88:0f:c0:49:
                    f2:5d:72:da:64:5f:9a:0b:03:09:b1:6d:9c:d9:0a:
                    cc:3a:a9:de:13:da:36:13:1f:54:c1:c6:76:91:7d:
                    33:c8:d8:62:43:67:78:ea:4f:6c:da:cb:47:38:e0:
                    bd:0f:7e:af:91:ce:57:1c:de:c2:37:0f:e6:cf:0a:
                    1c:02:24:cb:37:3f:3a:d1:0e:44:1f:8d:62:65:40:
                    c1:01:eb:05:49:23:b6:58:ba:ad:e7:e8:32:ea:b8:
                    be:73:dc:54:6b:74:c3:8a:65:7d:67:be:c1:3f:84:
                    1b:78:f4:d1:ed:8c:40:e2:84:18:9d:e2:0f:53:50:
                    dd:22:52:6f:c2:b8:62:88:8d:20:82:bf:07:93:e0:
                    46:ac:cc:71:c0:61:e9:21:3b:d5:63:c9:e6:8e:89:
                    11:e8:62:3f:d2:b7:2c:1c:43:05:5c:51:3f:bc:b5:
                    68:ac:b4:33:1f:91:08:5e:f6:16:f0:1c:3b:82:bc:
                    17:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:0F:B6:23:B8:D8:4B:68:80:78:5E:D1:77:CC:D4:1F:90:22:B3:0D
            X509v3 Authority Key Identifier:
                keyid:DB:06:23:6B:96:EE:00:93:4F:CD:39:A5:60:E5:BC:04:EB:7B:9E:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS27817.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.113.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:99:e8:bf:53:94:f4:d1:80:0a:6b:5d:38:ab:95:a7:bf:7b:
         bb:bc:6f:02:c6:c4:ec:5f:2d:10:70:98:9d:24:23:65:5b:23:
         4b:2a:74:d8:e3:50:a3:46:87:63:28:98:0a:cc:c2:8a:75:42:
         a9:54:ff:c3:e7:c9:fe:18:25:d4:95:ff:ae:90:90:aa:d5:06:
         1d:e3:cc:89:ab:3d:0b:8d:2e:d0:a3:70:5c:15:72:1a:2b:57:
         cd:cb:6d:63:7b:7e:e3:c5:da:b3:23:b3:b0:f3:2f:bc:ef:13:
         4c:6f:7a:6a:bc:e7:d0:b1:08:f3:9a:c0:90:7e:4d:11:7a:be:
         91:07:0e:6e:3e:e7:c1:45:f1:33:bb:69:54:48:f6:81:cf:93:
         2b:f5:4d:b0:37:c6:0a:97:f9:71:4a:ae:5d:7e:3d:9d:25:ba:
         68:d5:16:fd:03:e1:56:42:fa:ad:58:31:0f:56:a0:cf:f9:67:
         9b:bb:0b:8f:27:14:62:55:9b:48:43:50:50:86:bd:80:c2:65:
         e0:fe:39:32:6e:9d:d0:fa:22:be:a3:84:5c:bd:95:5e:16:0a:
         cb:f2:b0:e5:b0:ec:1c:82:14:42:bd:2c:7b:58:59:44:40:e3:
         56:a2:25:ba:17:a0:31:ea:c1:55:b1:c1:53:cf:4b:5d:b6:9c:
         f6:52:de:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:27:56 2025 by rpki-client