Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9e8a9feb-35e3-46dc-89bc-e27abb36c982/e8bc4910c86ed77248ef30b6a77826325d65f88b.roa
File:                     e8bc4910c86ed77248ef30b6a77826325d65f88b.roa (raw, json)
Hash identifier:          DhZVqT1Vgp1lRC9z3Orwx8P1ZbmP3K2OoJLTtx57jMs=
Subject key identifier:   AA:05:E1:AC:4D:32:E3:85:3D:B7:3E:31:2B:EB:AA:F1:22:5F:CA:52
Certificate issuer:       /CN=76545a659787ef675b6f53cc99f874699199cb6d
Certificate serial:       7B45
Authority key identifier: 39:C6:74:D7:F6:77:47:97:EF:A5:24:A5:CD:13:EA:0B:0E:9C:19:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/76545a659787ef675b6f53cc99f874699199cb6d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9e8a9feb-35e3-46dc-89bc-e27abb36c982/e8bc4910c86ed77248ef30b6a77826325d65f88b.roa
Signing time:             Fri 28 Apr 2023 16:31:44 +0000
ROA not before:           Thu 27 Apr 2023 16:31:44 +0000
ROA not after:            Mon 28 Apr 2025 16:31:44 +0000
asID:                     52372
IP address blocks:        186.5.228.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31557 (0x7b45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76545a659787ef675b6f53cc99f874699199cb6d
        Validity
            Not Before: Apr 27 16:31:44 2023 GMT
            Not After : Apr 28 16:31:44 2025 GMT
        Subject: CN=e8bc4910c86ed77248ef30b6a77826325d65f88b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a7:1b:07:0b:dd:cf:88:d3:02:cf:05:cf:b1:
                    42:6a:f2:7b:6e:45:95:5e:85:47:8d:81:fa:90:87:
                    73:32:f1:73:ee:72:c5:21:f0:3b:d6:d8:c5:c9:93:
                    81:c9:92:80:80:f0:2a:5f:db:4f:3c:4c:19:9b:e9:
                    b9:cc:11:5f:31:7c:e6:fa:9a:1b:b8:8a:5b:ab:49:
                    20:2f:5d:a1:3c:6c:4a:66:b9:fe:7d:f1:ec:fa:ec:
                    48:1d:ab:64:50:11:c4:cd:e4:f4:50:eb:aa:e6:8b:
                    16:6e:b4:c1:04:35:c8:b4:fe:e0:bc:28:d9:da:4b:
                    7c:70:76:28:c4:4f:b8:11:c3:b8:c8:98:3a:4c:c5:
                    c8:36:eb:ac:ce:25:e1:22:c6:6e:16:35:37:14:3b:
                    c3:8c:4b:01:69:3a:52:a2:c7:ba:7f:7a:83:c1:85:
                    0c:b9:f8:2d:f1:07:03:d3:c3:31:0b:af:28:23:98:
                    5c:20:03:fc:18:b9:9d:8d:2b:32:0c:38:11:d7:ce:
                    a4:de:8c:d6:4e:9a:6d:6e:79:54:0f:d3:df:da:83:
                    19:46:52:60:9c:f9:40:18:61:c2:c7:3e:1b:50:e9:
                    45:d8:01:57:c6:a3:bb:0e:9a:8b:9b:70:06:fe:11:
                    a2:9f:60:ba:5f:37:c7:ba:2b:a9:bf:ea:10:8f:ef:
                    b2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:05:E1:AC:4D:32:E3:85:3D:B7:3E:31:2B:EB:AA:F1:22:5F:CA:52
            X509v3 Authority Key Identifier:
                keyid:39:C6:74:D7:F6:77:47:97:EF:A5:24:A5:CD:13:EA:0B:0E:9C:19:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/76545a659787ef675b6f53cc99f874699199cb6d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9e8a9feb-35e3-46dc-89bc-e27abb36c982/e8bc4910c86ed77248ef30b6a77826325d65f88b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9e8a9feb-35e3-46dc-89bc-e27abb36c982/76545a659787ef675b6f53cc99f874699199cb6d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.5.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:cf:f0:43:ee:bb:65:18:07:bb:da:1b:14:b1:b1:ff:20:3c:
         e3:20:f0:2a:a6:71:be:70:e7:44:c2:5b:8d:81:c3:d4:6f:b6:
         3e:eb:63:47:2c:a5:e4:7d:42:83:9d:59:c6:8e:6e:66:f6:2a:
         88:9b:c9:d4:66:70:b7:33:0c:4e:a7:8a:cd:4c:bd:57:a6:59:
         e3:d1:5f:f9:f4:e4:49:6a:50:d2:ff:81:da:81:1e:eb:d7:29:
         cf:c0:d9:58:25:d5:b9:15:e3:fa:8c:e8:d9:0d:a0:69:06:1b:
         81:76:fe:f1:f9:7d:2d:af:65:c3:ba:20:d5:be:5c:13:b3:af:
         bf:27:68:24:ef:40:3a:f5:97:44:08:52:3d:0a:8f:9f:68:94:
         5b:b2:85:b3:df:f2:05:89:fb:8b:39:7d:7e:22:a4:60:c2:45:
         44:a8:18:fe:c0:c8:48:18:67:5f:0d:61:c7:0e:b7:8e:27:97:
         82:ad:76:00:da:59:d0:8f:8c:66:2a:94:fd:95:c0:a7:37:3e:
         e4:35:0c:97:40:b6:eb:ee:54:2f:c6:32:ed:73:9e:7e:1a:5d:
         19:31:df:8b:df:98:c7:66:21:38:64:25:d3:dc:b4:a8:e9:51:
         f7:89:dc:92:26:1a:a8:68:e5:34:c3:a3:cf:8a:8a:ea:f1:54:
         98:e6:0f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:42 2024 by rpki-client on console-ams.rpki-client.org