Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/5c8d92e355108049d69daa6480d505f193b98f1a.roa
File:                     5c8d92e355108049d69daa6480d505f193b98f1a.roa (raw, json)
Hash identifier:          wzDgiCH0xWYCHswPuK22hs8SE0jsDb9cKetH07suQag=
Subject key identifier:   C0:F3:E3:BE:1A:4C:FC:1A:32:95:85:2E:FC:43:C4:1E:E1:2F:8B:CD
Certificate issuer:       /CN=bca241a84c27bfe35e84dea65f4a7db00fab553c
Certificate serial:       06E595
Authority key identifier: F4:58:60:FC:8C:F0:EC:66:8C:12:40:B7:75:C3:E2:4E:6C:36:03:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bca241a84c27bfe35e84dea65f4a7db00fab553c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/5c8d92e355108049d69daa6480d505f193b98f1a.roa
Signing time:             Thu 10 Aug 2023 20:14:24 +0000
ROA not before:           Wed 09 Aug 2023 20:14:24 +0000
ROA not after:            Sun 10 Aug 2025 20:14:24 +0000
asID:                     7418
IP address blocks:        186.65.128.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 451989 (0x6e595)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca241a84c27bfe35e84dea65f4a7db00fab553c
        Validity
            Not Before: Aug  9 20:14:24 2023 GMT
            Not After : Aug 10 20:14:24 2025 GMT
        Subject: CN=5c8d92e355108049d69daa6480d505f193b98f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:10:36:1d:ee:38:05:ea:0b:ba:79:1b:62:66:
                    de:26:5b:c1:76:95:d9:3e:de:a2:df:c7:ec:35:24:
                    06:c5:2b:65:23:a9:57:76:8a:29:4c:52:78:53:14:
                    05:58:88:53:70:f2:58:66:cb:db:b6:85:94:6c:e5:
                    24:e4:10:65:3c:a2:0d:68:8e:e3:85:d0:ff:18:4d:
                    93:92:5d:3e:f7:65:91:9a:fb:cd:c7:47:00:cf:25:
                    08:32:d6:b3:e6:a9:48:03:0a:28:67:33:42:4d:ec:
                    bd:9f:d1:a6:1a:50:d9:3f:66:f7:e3:e0:29:0a:6c:
                    59:1c:44:22:a7:11:5e:a9:b7:c8:a2:2c:33:ec:58:
                    1a:7f:23:21:bd:5d:f3:0b:48:33:73:72:ec:4d:dd:
                    bd:fb:72:25:c5:2a:14:da:73:db:71:04:d1:bd:ed:
                    25:da:17:ca:de:41:05:e5:be:89:f6:21:0e:e5:bb:
                    04:55:5b:63:88:87:2a:07:59:a1:39:7e:3e:cd:09:
                    00:05:b0:a0:2b:ed:84:a5:6b:59:e1:e5:5c:73:a3:
                    b5:40:a1:8b:37:e4:d3:c6:17:46:2e:a6:1d:06:49:
                    81:a2:f5:4b:70:bb:0c:36:d2:9c:a4:62:a9:55:fe:
                    11:1b:12:3a:9c:ba:3e:c6:1e:f5:68:be:08:47:2e:
                    ba:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F3:E3:BE:1A:4C:FC:1A:32:95:85:2E:FC:43:C4:1E:E1:2F:8B:CD
            X509v3 Authority Key Identifier:
                keyid:F4:58:60:FC:8C:F0:EC:66:8C:12:40:B7:75:C3:E2:4E:6C:36:03:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bca241a84c27bfe35e84dea65f4a7db00fab553c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/5c8d92e355108049d69daa6480d505f193b98f1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/bca241a84c27bfe35e84dea65f4a7db00fab553c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.65.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         11:c4:3f:5b:a6:a7:e0:ea:c9:60:14:fe:f6:1a:37:40:7b:25:
         75:be:97:50:d3:f2:e1:ab:a8:b5:19:66:90:2c:5d:f8:5f:08:
         e6:a7:50:4b:89:e5:6d:4d:39:38:bb:bf:ac:c6:0b:e7:c2:ab:
         2b:5e:da:53:44:57:09:4f:5e:b2:71:9e:05:6a:2f:ca:1e:6d:
         89:0a:7b:d0:3f:5a:80:23:ce:36:be:2d:94:69:9d:c3:a5:57:
         92:23:c1:6a:b1:f5:1b:b5:81:c9:4a:1a:33:dc:c7:84:ef:69:
         95:a2:d0:8e:ec:79:54:2d:89:8f:81:60:c3:15:17:2e:7a:dc:
         f1:66:75:65:0d:1b:e4:41:6a:ee:0e:11:75:69:7c:7d:10:e8:
         23:3d:2d:be:a6:fb:5f:05:18:eb:e7:60:24:27:6c:21:4a:c2:
         48:c9:84:6d:33:24:8e:27:af:c4:c7:6a:98:ce:40:9c:ab:9d:
         60:71:e3:84:55:dd:9a:50:1a:7a:cb:d1:24:34:70:7a:ad:f0:
         9a:cf:18:35:86:5d:fb:0a:0c:03:62:e1:2e:ce:bf:3d:61:81:
         25:ef:a6:6e:08:2f:d0:fa:57:27:3f:63:64:e7:e1:35:9f:d9:
         5d:d4:d6:d0:af:10:d9:4a:a5:89:e3:dc:d2:65:d1:31:4e:18:
         45:e8:43:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org