Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/086915106622df016fde2355380c95d247d91dc5.roa
File:                     086915106622df016fde2355380c95d247d91dc5.roa (raw, json)
Hash identifier:          o+SiJ87gyFOZvZttNdu2QMyCRUhkTADrylBETwxMIpc=
Subject key identifier:   9C:EE:83:7E:30:2F:16:94:3F:53:46:BC:01:E2:67:A4:67:7E:97:DC
Certificate issuer:       /CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Certificate serial:       1C3483
Authority key identifier: 3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/086915106622df016fde2355380c95d247d91dc5.roa
Signing time:             Thu 10 Nov 2022 22:31:47 +0000
ROA not before:           Wed 21 Sep 2022 20:17:05 +0000
ROA not after:            Sun 22 Sep 2024 20:17:05 +0000
asID:                     265705
IP address blocks:        186.31.128.0/22 maxlen: 22
                          186.28.176.0/22 maxlen: 22
                          186.28.184.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1848451 (0x1c3483)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7855197f590ff298b52ab358da08a0fdbfe6a883
        Validity
            Not Before: Sep 21 20:17:05 2022 GMT
            Not After : Sep 22 20:17:05 2024 GMT
        Subject: CN=086915106622df016fde2355380c95d247d91dc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a6:94:45:7e:b8:5b:2e:87:7c:ce:5b:1c:0b:
                    20:b7:85:6d:55:95:b6:3b:8f:b6:56:3e:21:29:66:
                    8e:9c:da:7f:4d:77:36:f4:2e:f8:99:9c:27:3a:3f:
                    b7:1f:3e:6c:ad:03:83:9a:66:9a:1e:03:a1:4a:4e:
                    89:ed:16:ff:2d:81:08:c0:09:aa:cd:f5:ca:ba:c3:
                    56:b5:d1:79:2d:c5:3a:0f:f3:ae:e8:33:44:f5:55:
                    b2:f0:7f:f9:e8:91:86:1b:7d:24:31:6c:56:df:33:
                    cf:3b:7d:be:67:d1:69:54:b8:39:1f:6c:e8:cb:e6:
                    7f:0a:78:65:5a:73:72:f1:5d:a3:59:de:ba:9c:94:
                    c3:d7:43:e0:ca:be:48:69:84:97:06:70:8b:23:ea:
                    75:ee:73:09:46:b1:f4:bc:c0:95:15:1f:18:cf:12:
                    a6:91:ac:77:a6:5a:20:2b:6b:46:8e:3c:b2:1c:6f:
                    0f:2e:eb:2f:97:41:00:05:03:e6:ab:8e:80:b4:5d:
                    5b:3d:a0:80:a7:49:c8:ac:a7:fc:46:51:38:17:38:
                    41:a4:69:ba:e5:23:33:40:ec:9b:33:8b:4a:c4:b1:
                    5a:a4:c3:c6:85:2c:92:53:00:f5:0f:e7:50:68:1a:
                    32:3f:1a:0a:41:0a:c3:e9:97:1d:1c:c7:d0:a2:57:
                    fd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:EE:83:7E:30:2F:16:94:3F:53:46:BC:01:E2:67:A4:67:7E:97:DC
            X509v3 Authority Key Identifier:
                keyid:3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/086915106622df016fde2355380c95d247d91dc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7855197f590ff298b52ab358da08a0fdbfe6a883.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.28.176.0/22
                  186.28.184.0/22
                  186.31.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:e9:a0:8f:1b:9b:3b:c3:81:6f:51:06:79:ac:b3:6f:09:79:
         f1:af:6b:a3:2e:5b:6c:fb:2b:1c:58:77:c0:21:87:b3:14:7b:
         b9:96:b4:3c:57:57:62:cb:70:49:44:68:df:f6:94:fc:29:90:
         29:ec:57:2b:be:fc:d4:86:1f:52:ea:6f:e4:e8:98:ea:fd:a1:
         2b:52:4b:ac:ce:f1:ff:33:89:bb:75:6d:24:c5:ae:cb:e1:7f:
         2c:d8:9f:a6:c2:2d:72:e2:c6:7c:93:3c:66:74:31:99:b5:a7:
         33:26:61:37:f9:e4:08:00:41:6e:26:7b:fa:e1:a6:18:70:fe:
         04:1b:49:b7:32:aa:b6:24:e7:d7:6c:36:b4:3a:d0:b3:3f:66:
         90:02:6a:07:1a:59:4a:5b:be:10:3c:96:c5:40:92:35:4f:52:
         fb:97:03:56:55:e4:4c:de:e1:b1:17:fe:e0:23:5b:74:59:3b:
         a8:56:12:0d:35:40:0b:49:59:65:c0:13:6e:f4:d7:e7:31:6a:
         b5:a6:7e:5e:b5:bc:7d:34:c7:69:b8:aa:2d:89:75:ad:94:40:
         cb:a3:c0:38:48:8a:f8:1a:31:84:57:28:d8:3e:c3:8e:40:00:
         55:5d:37:0a:38:9c:f1:b6:df:6e:76:1f:f3:18:9e:07:72:be:
         7f:85:27:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:00 2024 by rpki-client on console-fra.rpki-client.org