Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9c34294d-9ae6-49fd-8d50-84ea7e5c9a59/21898352fb0424bc5598425e3ee3a7165a14cc30.roa
File:                     21898352fb0424bc5598425e3ee3a7165a14cc30.roa (raw, json)
Hash identifier:          VYSGrIBFYCsEJfFLKxJvCUPlPgjh8rODZh0B8LwIrxs=
Subject key identifier:   EC:A6:7E:EF:82:D0:F1:81:9E:50:87:77:7C:F9:F7:EC:61:F1:FB:CA
Certificate issuer:       /CN=5cc8a7a5937d9d7077f00b2d98fc6901e063c7ae
Certificate serial:       28FC13
Authority key identifier: 75:77:AF:10:66:15:D9:6D:1C:24:42:60:6A:86:60:57:EE:9F:48:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5cc8a7a5937d9d7077f00b2d98fc6901e063c7ae.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9c34294d-9ae6-49fd-8d50-84ea7e5c9a59/21898352fb0424bc5598425e3ee3a7165a14cc30.roa
Signing time:             Tue 20 Feb 2024 12:32:08 +0000
ROA not before:           Tue 20 Feb 2024 12:32:08 +0000
ROA not after:            Fri 20 Feb 2026 12:32:08 +0000
asID:                     264701
IP address blocks:        186.0.198.0/25 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2685971 (0x28fc13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cc8a7a5937d9d7077f00b2d98fc6901e063c7ae
        Validity
            Not Before: Feb 20 12:32:08 2024 GMT
            Not After : Feb 20 12:32:08 2026 GMT
        Subject: CN=21898352fb0424bc5598425e3ee3a7165a14cc30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4c:2f:cc:c3:aa:61:fd:fd:d8:26:5f:aa:42:
                    f7:48:64:b4:c1:de:a6:62:d3:99:f7:f6:89:f5:83:
                    b6:84:37:3c:42:41:ca:97:42:09:65:b8:64:19:dd:
                    cc:55:5a:05:c5:90:25:da:d2:b4:07:c4:09:f2:80:
                    94:eb:bb:50:94:eb:6b:3a:21:16:4f:05:cf:ad:76:
                    86:2f:85:6c:b2:e0:36:94:39:a9:08:46:9c:17:6e:
                    76:22:71:c3:8b:e1:6c:30:de:97:d2:da:63:87:f3:
                    cd:d0:16:2d:4b:83:55:ab:48:54:b4:0a:50:ab:c8:
                    24:4b:74:d0:03:48:e6:3d:ac:5e:2b:20:83:24:a4:
                    75:f4:7f:4e:2c:1b:d3:96:4b:f9:97:9a:71:db:58:
                    1f:4f:a0:ca:d9:8c:e7:59:f7:af:06:bd:44:5a:19:
                    d6:11:be:cc:31:8e:11:b1:06:61:14:ae:c9:22:32:
                    93:e9:e7:45:d5:9e:c0:d0:a6:5e:82:d3:fe:f9:27:
                    5d:b9:56:d2:c0:51:37:56:1f:f9:70:ef:29:53:20:
                    8f:95:c4:bd:80:81:e5:d2:41:fa:ee:5b:bb:b7:1d:
                    f0:6b:34:c6:bb:86:e8:dd:6a:ac:17:65:cb:1b:74:
                    ad:4b:a3:2e:bb:62:db:fb:d8:e3:05:3f:2a:59:e6:
                    45:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A6:7E:EF:82:D0:F1:81:9E:50:87:77:7C:F9:F7:EC:61:F1:FB:CA
            X509v3 Authority Key Identifier:
                keyid:75:77:AF:10:66:15:D9:6D:1C:24:42:60:6A:86:60:57:EE:9F:48:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5cc8a7a5937d9d7077f00b2d98fc6901e063c7ae.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9c34294d-9ae6-49fd-8d50-84ea7e5c9a59/21898352fb0424bc5598425e3ee3a7165a14cc30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9c34294d-9ae6-49fd-8d50-84ea7e5c9a59/5cc8a7a5937d9d7077f00b2d98fc6901e063c7ae.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.0.198.0/25

    Signature Algorithm: sha256WithRSAEncryption
         77:ae:57:f8:66:cd:31:87:95:9d:11:fe:80:65:12:5d:f3:18:
         15:a6:0a:98:74:0b:30:3d:2f:50:15:c8:41:9e:bb:a2:7c:4c:
         7d:b9:1c:f0:ee:96:7c:a5:f0:a6:e4:68:32:c4:d7:73:70:92:
         95:54:3a:18:8d:df:11:7a:c7:b6:14:51:23:c0:af:f1:78:c6:
         e1:8a:f9:61:fb:64:75:98:1b:4b:f4:8c:19:ea:27:3f:0c:76:
         42:23:e2:dd:82:69:07:ce:67:47:55:15:b1:69:f2:4d:57:da:
         5c:40:8f:d6:43:7e:3d:11:b9:38:4b:38:fd:9e:f6:bb:a0:56:
         ac:65:f1:4b:4b:b0:3c:07:46:73:f1:14:7b:5f:07:ae:f6:e0:
         64:94:3d:2d:f5:74:e7:c3:a6:9c:ad:11:7a:93:b2:09:87:2c:
         32:da:c8:8f:38:26:55:d5:7d:07:c4:f8:f2:80:92:ec:56:6d:
         34:a2:d7:c3:3c:37:df:2e:46:42:8f:5c:78:2f:bc:7e:f2:38:
         e1:d9:14:b4:9b:c1:9d:43:65:1a:40:2a:62:7a:71:88:0f:6d:
         a7:8a:f0:68:6a:41:cc:2d:df:14:33:2b:47:c8:00:24:f7:ee:
         89:ab:a6:8e:53:10:a2:4f:35:2a:c6:df:00:48:20:6d:2a:63:
         56:13:8a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:42 2024 by rpki-client on console-ams.rpki-client.org