Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8273ed29-e2e8-47be-866f-61abf8cba30b/1b5ec8990221075cae45b776fd17348e39cb1244.roa
File:                     1b5ec8990221075cae45b776fd17348e39cb1244.roa (raw, json)
Hash identifier:          ur1PvcpsOSzdJWFCNjRPQYTNM8sn3xvArj60hXXPdqc=
Subject key identifier:   D5:79:F8:46:72:EA:27:7C:62:93:42:3A:C3:15:D7:78:6A:F9:3A:4F
Certificate issuer:       /CN=46769ac4edeccf5ef8d51d86ae34b0546e67293d
Certificate serial:       14F9B7
Authority key identifier: D5:C0:3B:18:85:95:E4:45:93:0F:AF:4B:97:83:57:52:8F:25:11:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/46769ac4edeccf5ef8d51d86ae34b0546e67293d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8273ed29-e2e8-47be-866f-61abf8cba30b/1b5ec8990221075cae45b776fd17348e39cb1244.roa
Signing time:             Mon 29 May 2023 16:42:34 +0000
ROA not before:           Sun 28 May 2023 16:42:34 +0000
ROA not after:            Thu 29 May 2025 16:42:34 +0000
asID:                     270068
IP address blocks:        187.86.164.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1374647 (0x14f9b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46769ac4edeccf5ef8d51d86ae34b0546e67293d
        Validity
            Not Before: May 28 16:42:34 2023 GMT
            Not After : May 29 16:42:34 2025 GMT
        Subject: CN=1b5ec8990221075cae45b776fd17348e39cb1244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a1:19:ad:e6:dc:aa:ef:ec:9c:a3:89:29:8d:
                    88:44:7c:18:e3:b4:f9:e7:45:5a:13:30:80:77:2a:
                    c3:da:fe:7f:f1:d5:59:d6:b9:dc:d6:a6:4b:47:f3:
                    69:33:ac:c4:a6:38:6f:af:06:70:4e:51:8b:fc:f1:
                    b3:98:d7:b8:a3:96:6f:c3:dd:1b:24:b8:55:0e:2e:
                    88:d8:ac:43:15:73:b7:39:39:24:ce:27:73:a4:d0:
                    db:76:0d:ab:6e:f6:22:d5:01:18:56:13:c3:9e:16:
                    6a:f8:4d:da:77:d4:63:52:02:d5:4e:d8:34:c2:96:
                    49:25:45:fe:b3:05:cc:fa:66:d6:6f:5e:e2:43:c2:
                    cb:72:e4:e5:bb:be:3e:12:b8:0a:03:1c:f3:66:1f:
                    ed:6c:8e:19:f9:da:89:a9:87:0a:c0:31:b0:9f:07:
                    9b:89:fa:e8:65:3f:84:6d:a5:96:2b:33:61:79:56:
                    d6:93:7d:b1:05:4f:01:49:30:58:5b:82:bf:de:a3:
                    a3:58:4f:b0:4a:ef:5d:6b:4e:bf:35:cc:0d:7e:7d:
                    9a:fd:fc:fc:88:e2:31:ea:b9:c1:2a:f0:86:07:a4:
                    59:d7:ae:96:9c:0c:0e:f8:4e:62:5f:77:62:81:08:
                    45:b7:4a:e4:55:59:18:1b:3a:62:62:67:70:25:02:
                    c4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:79:F8:46:72:EA:27:7C:62:93:42:3A:C3:15:D7:78:6A:F9:3A:4F
            X509v3 Authority Key Identifier:
                keyid:D5:C0:3B:18:85:95:E4:45:93:0F:AF:4B:97:83:57:52:8F:25:11:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/46769ac4edeccf5ef8d51d86ae34b0546e67293d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8273ed29-e2e8-47be-866f-61abf8cba30b/1b5ec8990221075cae45b776fd17348e39cb1244.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8273ed29-e2e8-47be-866f-61abf8cba30b/46769ac4edeccf5ef8d51d86ae34b0546e67293d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:08:05:25:09:f7:84:41:c2:15:0e:6f:90:71:94:05:6a:2a:
         d8:f5:d3:8a:85:9a:db:e8:4c:34:e7:d1:44:a3:1e:c6:cd:f4:
         86:ce:f1:77:5e:b1:56:cb:24:9f:11:49:b8:96:1e:2a:dc:8c:
         1b:8d:45:0b:34:7c:61:c1:13:35:f4:e8:9b:92:bb:0a:65:73:
         24:97:a2:29:cc:4e:8d:dc:5b:c5:ca:70:c2:32:f9:3e:b3:14:
         48:c7:2f:02:ab:b9:2b:01:7a:e0:cc:30:97:d0:e6:22:62:55:
         c2:98:03:55:a9:dd:85:52:7c:c2:fb:1b:da:0a:5c:36:ba:02:
         b3:f4:6b:22:30:0a:82:f0:a1:c7:b6:d8:d0:a5:76:33:3b:1f:
         5d:65:e9:95:12:8a:a9:ab:5a:62:93:33:7f:53:18:96:12:74:
         56:ab:a1:c8:ac:12:81:49:f5:69:9b:e5:ce:e6:14:a3:c8:f0:
         e2:7b:27:c6:05:12:5a:50:ad:e4:9c:d7:8a:43:8d:2e:fa:19:
         fa:d2:37:92:30:ab:4d:18:fc:9e:88:7a:9a:22:ba:ba:cd:91:
         6b:ae:1f:77:6c:6c:f6:49:5d:64:8f:ae:1f:94:23:99:24:b2:
         bb:77:cc:08:3a:21:78:22:3b:52:d0:ef:09:d1:30:6a:cb:2a:
         5a:e3:a4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org