Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9c34294d-9ae6-49fd-8d50-84ea7e5c9a59/68393a8789f31a9eb4aad9f9443971530e7c166c.roa
File:                     68393a8789f31a9eb4aad9f9443971530e7c166c.roa (raw, json)
Hash identifier:          R+HGKxP+VcmgAwLdOZjoQv7cB8rNUbPgOwkaJExZ4b0=
Subject key identifier:   C3:D1:E2:08:44:69:5B:15:F8:15:35:D5:4D:13:35:C6:42:F4:C9:D7
Certificate issuer:       /CN=5cc8a7a5937d9d7077f00b2d98fc6901e063c7ae
Certificate serial:       2249AF
Authority key identifier: 75:77:AF:10:66:15:D9:6D:1C:24:42:60:6A:86:60:57:EE:9F:48:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5cc8a7a5937d9d7077f00b2d98fc6901e063c7ae.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9c34294d-9ae6-49fd-8d50-84ea7e5c9a59/68393a8789f31a9eb4aad9f9443971530e7c166c.roa
Signing time:             Fri 02 Jun 2023 13:31:07 +0000
ROA not before:           Thu 01 Jun 2023 13:31:06 +0000
ROA not after:            Mon 02 Jun 2025 13:31:06 +0000
asID:                     27735
IP address blocks:        186.0.216.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2247087 (0x2249af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cc8a7a5937d9d7077f00b2d98fc6901e063c7ae
        Validity
            Not Before: Jun  1 13:31:06 2023 GMT
            Not After : Jun  2 13:31:06 2025 GMT
        Subject: CN=68393a8789f31a9eb4aad9f9443971530e7c166c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a5:6c:ad:86:87:27:be:51:65:50:ed:81:a4:
                    c5:8a:f0:5e:cf:c0:84:a5:3e:b2:25:bb:4a:e5:4d:
                    62:22:e7:6d:3a:9d:52:eb:ea:f6:03:91:f2:ef:c9:
                    3c:47:2e:b2:b2:b5:0d:76:f8:d5:c0:e4:c8:bc:28:
                    b6:5d:03:78:e8:41:8f:bd:08:8a:d7:01:ec:0d:52:
                    1d:08:36:a3:97:7b:64:4b:aa:b4:d4:75:d7:20:56:
                    2e:69:40:8a:a0:0b:b6:ff:04:53:72:65:0c:59:d0:
                    ed:f3:eb:7a:e3:87:3e:e7:de:94:8c:94:5b:8d:b6:
                    e3:3d:80:73:bb:82:c2:76:44:b3:af:7a:fd:28:c2:
                    0b:91:30:31:1b:af:cb:e2:68:cf:e1:65:79:cf:9a:
                    b2:0b:0a:e3:41:61:21:dd:bf:cb:93:97:9a:1d:fc:
                    22:02:4d:26:29:e5:f8:c6:27:b1:24:6a:94:37:00:
                    38:8a:6c:92:16:0d:4c:ab:89:9b:8a:d6:db:2c:0e:
                    55:69:b6:de:a4:28:ce:e6:eb:1b:57:09:24:67:c1:
                    1c:2d:54:8b:14:97:fa:92:a7:ef:d2:54:9c:1b:15:
                    02:c3:9d:a4:c0:fb:0f:67:9e:4f:c4:16:38:cd:3b:
                    13:80:21:e8:76:af:31:48:c9:7e:ab:1c:c6:f7:49:
                    a7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D1:E2:08:44:69:5B:15:F8:15:35:D5:4D:13:35:C6:42:F4:C9:D7
            X509v3 Authority Key Identifier:
                keyid:75:77:AF:10:66:15:D9:6D:1C:24:42:60:6A:86:60:57:EE:9F:48:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5cc8a7a5937d9d7077f00b2d98fc6901e063c7ae.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9c34294d-9ae6-49fd-8d50-84ea7e5c9a59/68393a8789f31a9eb4aad9f9443971530e7c166c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9c34294d-9ae6-49fd-8d50-84ea7e5c9a59/5cc8a7a5937d9d7077f00b2d98fc6901e063c7ae.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.0.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:f7:68:ac:04:27:32:9e:1a:71:f3:b5:9a:e3:6f:d3:f4:5d:
         c5:67:e1:a4:f9:fb:6b:b7:df:c8:84:9d:a9:74:6d:fc:29:d9:
         21:04:79:df:c5:00:94:77:fe:6b:aa:98:8e:52:52:71:e5:9d:
         33:5b:ff:fa:9e:ce:03:6a:13:25:b9:79:64:0b:c6:40:69:c2:
         a9:1a:88:a5:27:27:28:82:c7:3d:cc:bc:9b:e5:c8:4d:43:3f:
         55:21:5c:bf:22:d8:58:aa:22:51:11:2e:c1:5d:94:87:92:9b:
         e9:7e:b9:86:be:df:b9:3d:43:cb:37:ad:40:01:78:4d:4b:fa:
         5b:88:93:ea:75:e1:a5:af:d5:c7:00:33:65:41:33:49:69:5f:
         d7:b7:1a:99:83:92:31:b0:db:91:02:8c:15:2b:f8:9f:09:4f:
         9d:e2:83:19:43:12:77:5a:51:0d:b2:7f:fc:a7:d5:bc:d9:b7:
         7e:ab:fa:58:98:f5:da:83:92:e4:8f:e7:ca:7b:e3:d0:82:df:
         62:08:39:48:31:3c:59:66:97:52:ba:43:eb:43:bc:e9:f7:a5:
         63:ba:6f:9c:09:1b:72:78:52:d5:ee:8b:41:8a:de:c3:e2:3e:
         0b:36:9d:68:e1:46:2b:80:6a:75:71:d0:99:53:dc:9f:7f:a4:
         df:1f:57:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:25 2024 by rpki-client on console-fra.rpki-client.org