Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/6926a9bafedf108350bf83b7f42b01caf682fbd1.roa
File:                     6926a9bafedf108350bf83b7f42b01caf682fbd1.roa (raw, json)
Hash identifier:          zMvre5iE/nNK8vP7/u9gGtwtAWwe0FSZPAfCeV37r7A=
Subject key identifier:   B3:D4:D7:EC:E1:5B:BC:D4:B4:03:14:0C:22:D5:2C:FA:42:57:21:88
Certificate issuer:       /CN=78379cd71229f217b9f834bbc4e3fa24f7014f89
Certificate serial:       10F491
Authority key identifier: 8B:16:EF:2F:72:40:32:28:10:E8:F7:DF:61:65:96:BD:F4:1C:B8:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78379cd71229f217b9f834bbc4e3fa24f7014f89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/6926a9bafedf108350bf83b7f42b01caf682fbd1.roa
Signing time:             Wed 29 Nov 2023 23:28:08 +0000
ROA not before:           Wed 29 Nov 2023 23:28:08 +0000
ROA not after:            Sat 29 Nov 2025 23:28:08 +0000
asID:                     11315
IP address blocks:        186.140.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1111185 (0x10f491)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78379cd71229f217b9f834bbc4e3fa24f7014f89
        Validity
            Not Before: Nov 29 23:28:08 2023 GMT
            Not After : Nov 29 23:28:08 2025 GMT
        Subject: CN=6926a9bafedf108350bf83b7f42b01caf682fbd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ac:bf:a0:56:56:5a:91:d7:ca:a3:e6:8b:4c:
                    6b:60:15:93:ec:4f:7f:c0:ba:cc:90:b7:99:9c:4a:
                    50:70:5e:8e:90:ba:ed:3f:39:ba:2d:84:de:90:7f:
                    28:1a:d6:39:aa:b2:32:2c:44:45:70:4e:9d:05:d7:
                    72:30:24:f9:db:39:e6:c9:f7:6c:89:8a:30:8c:cf:
                    27:56:9d:c4:6c:3d:11:9d:eb:e3:25:7f:80:48:ab:
                    fb:73:ad:c6:e8:83:a3:24:3b:1c:6c:83:2e:f5:a8:
                    f4:0d:25:64:57:31:13:29:b1:7f:bf:6b:92:35:88:
                    f9:1f:b3:30:6d:13:1d:e9:72:a1:fa:60:8d:ae:02:
                    0e:bf:20:be:99:f8:35:85:a4:51:fb:fb:f5:a3:36:
                    89:b6:80:d6:94:e5:2e:37:43:00:50:64:83:4f:62:
                    34:42:18:4a:f5:24:20:63:37:38:a4:e0:6f:4f:f7:
                    b1:28:8b:04:da:23:ff:b2:27:9b:3b:b9:3e:a8:b2:
                    c3:44:0d:a1:5a:29:c8:8f:6f:72:f1:ae:f6:7e:fe:
                    76:56:c5:e3:c3:d1:73:17:03:94:2e:aa:85:bd:b4:
                    89:35:8f:ef:af:4b:a0:f8:d0:06:24:8e:07:f8:fa:
                    be:13:1f:19:cf:7e:64:d0:3d:93:95:3b:28:81:7e:
                    65:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D4:D7:EC:E1:5B:BC:D4:B4:03:14:0C:22:D5:2C:FA:42:57:21:88
            X509v3 Authority Key Identifier:
                keyid:8B:16:EF:2F:72:40:32:28:10:E8:F7:DF:61:65:96:BD:F4:1C:B8:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78379cd71229f217b9f834bbc4e3fa24f7014f89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/6926a9bafedf108350bf83b7f42b01caf682fbd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/78379cd71229f217b9f834bbc4e3fa24f7014f89.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.140.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         86:57:6c:f1:5f:4e:0b:36:cc:0a:1c:8d:12:84:f1:72:a0:e5:
         58:d8:f0:ac:d4:d7:8b:75:29:17:c9:54:69:17:24:43:e3:f9:
         c6:44:5c:58:b3:43:64:d6:9b:3b:c9:14:8d:d6:55:f7:c8:94:
         13:6e:78:0b:78:5b:e6:60:fe:02:f6:57:b5:e1:53:b7:0f:f4:
         2c:ef:fe:c1:49:31:dc:83:a2:13:64:49:0a:dd:cf:e7:e8:59:
         9c:d2:af:19:ee:6e:c4:84:97:05:9e:0a:62:b8:4b:56:8d:c9:
         7c:e1:a3:40:19:cd:a2:02:e1:d9:00:10:fc:91:90:2b:7c:29:
         ca:2c:9a:f3:b6:94:b0:a8:6c:4e:28:00:df:2a:2c:c1:fa:77:
         bc:0c:93:5f:2a:08:42:28:8f:b5:11:ee:60:2e:a3:d0:df:8e:
         a3:37:b9:42:ff:e7:78:27:87:9c:82:0c:95:2c:93:dc:52:78:
         5b:9b:87:b0:8b:0a:c2:f4:6e:1e:13:22:8b:d5:49:29:f8:fb:
         51:71:29:ca:99:a6:b4:f5:56:d8:0e:0e:9e:55:09:c5:0f:5f:
         09:5e:70:17:86:2d:5e:57:84:80:4c:0f:0f:a3:8a:79:ed:24:
         83:59:91:fd:0d:a2:f0:18:8f:ea:ee:ee:6b:e8:ed:b4:ec:ad:
         16:aa:39:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:40 2024 by rpki-client on console-ams.rpki-client.org