Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7ce6e33e6db0e667f9602797e95e15bf16cd143d.roa
File:                     7ce6e33e6db0e667f9602797e95e15bf16cd143d.roa (raw, json)
Hash identifier:          L0x89i2v7ehsxyaIbkIxj9q/pbIvG2Mvp8HjOTKiZVM=
Subject key identifier:   0D:5E:18:AE:09:FE:5A:66:23:95:25:55:9A:BD:B7:21:71:44:64:D9
Certificate issuer:       /CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Certificate serial:       21D254
Authority key identifier: 3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7ce6e33e6db0e667f9602797e95e15bf16cd143d.roa
Signing time:             Fri 09 Jun 2023 18:34:27 +0000
ROA not before:           Thu 08 Jun 2023 18:34:27 +0000
ROA not after:            Mon 09 Jun 2025 18:34:27 +0000
asID:                     13489
IP address blocks:        186.30.112.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2216532 (0x21d254)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7855197f590ff298b52ab358da08a0fdbfe6a883
        Validity
            Not Before: Jun  8 18:34:27 2023 GMT
            Not After : Jun  9 18:34:27 2025 GMT
        Subject: CN=7ce6e33e6db0e667f9602797e95e15bf16cd143d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9d:13:1c:f9:d3:a1:82:26:ca:49:11:6e:eb:
                    40:cf:3a:33:6c:49:b1:38:cf:54:ca:09:ea:31:b3:
                    2e:f3:ad:31:1f:66:c8:ab:7d:03:0f:b5:d2:f9:e8:
                    b0:0c:03:ba:83:39:7d:a9:f9:56:15:a8:8d:94:d5:
                    9e:2e:d6:6d:7a:bd:20:b3:cc:c6:75:52:29:f7:b3:
                    f3:07:df:48:50:49:fe:ef:90:c3:3c:bb:51:b4:04:
                    5c:98:f3:a8:0b:be:29:9c:63:e0:c3:a2:c7:03:87:
                    27:35:ed:e9:cd:8d:7b:f6:ff:c2:ef:60:95:ca:75:
                    a2:08:e8:92:bd:f4:a0:0c:46:11:8b:66:99:73:f5:
                    6c:a4:3b:e9:3c:48:e8:03:d8:83:47:b5:19:4b:63:
                    6f:16:37:b5:2a:0d:04:94:3b:27:61:8b:14:9e:fd:
                    6f:6d:b5:f7:49:cd:64:3d:2e:d5:de:e8:18:5b:8e:
                    74:d9:27:08:a7:5d:58:e8:ca:3d:b8:39:e5:7b:32:
                    dc:82:53:1e:1a:ff:51:9c:15:3b:b5:30:a2:65:a5:
                    f9:12:74:97:28:46:94:65:91:f1:65:aa:79:b1:9b:
                    58:02:98:5b:9d:74:a9:12:f9:53:15:ab:29:1c:01:
                    bd:cc:eb:8a:b5:97:4e:8d:5f:73:6a:47:27:5b:01:
                    62:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5E:18:AE:09:FE:5A:66:23:95:25:55:9A:BD:B7:21:71:44:64:D9
            X509v3 Authority Key Identifier:
                keyid:3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7ce6e33e6db0e667f9602797e95e15bf16cd143d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7855197f590ff298b52ab358da08a0fdbfe6a883.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.30.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:5f:09:66:31:ee:cc:5e:15:2d:b7:80:a8:4f:29:d3:0f:dc:
         19:f4:9f:a1:99:65:03:d7:3c:7d:e3:67:11:b8:ec:3a:5f:04:
         cd:b3:af:df:16:b1:db:07:7e:11:e2:0e:fe:70:60:10:c1:71:
         1f:37:0b:85:24:28:bd:2e:e2:95:2b:56:3a:0b:6f:7a:48:a3:
         df:69:13:87:30:4d:28:64:93:f5:54:86:81:8a:3d:c9:f3:19:
         ab:c5:20:50:0a:7d:94:55:34:10:3e:78:6d:df:72:cc:73:dd:
         da:07:fb:dc:da:53:f5:bc:9c:5c:82:2a:ef:7c:d2:5e:64:48:
         1e:7c:a4:d1:31:3e:58:85:87:2b:25:ce:12:00:04:31:77:02:
         e5:3c:6a:e3:67:83:8b:25:2d:cf:40:db:48:db:29:ff:b8:1f:
         5f:04:01:6b:6c:5a:19:81:46:f6:a9:93:cd:de:dd:8c:e8:0c:
         36:cd:ee:8e:5d:f9:f9:2c:61:08:2f:c9:3d:08:18:6e:0e:ea:
         28:ab:8c:ad:d6:13:6a:b6:64:c8:84:ef:38:58:e8:4c:61:06:
         97:26:f9:57:0c:1e:a4:7b:7b:fd:24:2a:67:b4:ae:31:71:6d:
         1e:7b:56:5d:ed:13:d9:a6:c6:bc:d8:fd:a0:d5:49:ae:87:98:
         c8:88:5f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:28 2024 by rpki-client on console-fra.rpki-client.org