Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/c531d94b54186bdf4f53e8c4d7aa544c0deb9161.roa
File:                     c531d94b54186bdf4f53e8c4d7aa544c0deb9161.roa (raw, json)
Hash identifier:          ngYr/MCbZooGSQhPwvfqzLBxdXcwo9hflTKFjN9b/4U=
Subject key identifier:   8E:80:DD:15:AB:5B:30:D1:7E:3D:A0:32:53:0D:49:94:1D:86:DF:4E
Certificate issuer:       /CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Certificate serial:       21BA49
Authority key identifier: 3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/c531d94b54186bdf4f53e8c4d7aa544c0deb9161.roa
Signing time:             Fri 09 Jun 2023 18:33:58 +0000
ROA not before:           Thu 08 Jun 2023 18:33:57 +0000
ROA not after:            Mon 09 Jun 2025 18:33:57 +0000
asID:                     13489
IP address blocks:        186.30.112.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2210377 (0x21ba49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7855197f590ff298b52ab358da08a0fdbfe6a883
        Validity
            Not Before: Jun  8 18:33:57 2023 GMT
            Not After : Jun  9 18:33:57 2025 GMT
        Subject: CN=c531d94b54186bdf4f53e8c4d7aa544c0deb9161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:37:6a:e2:35:da:b7:ce:42:f6:a4:8b:17:f3:
                    40:6b:8e:7b:ab:84:a8:20:d9:44:68:b3:de:85:4f:
                    1e:b7:c6:51:fb:f7:58:e6:f4:fb:d0:9c:92:3e:a6:
                    99:a0:f6:7c:56:d1:11:62:c0:44:fa:d2:df:e1:03:
                    45:f2:9e:c1:b7:00:2b:34:97:b2:11:ff:31:9f:39:
                    70:95:ae:88:d0:07:7b:ec:0d:97:85:c1:7c:44:d7:
                    b9:d7:24:4c:58:48:ba:19:15:de:3c:ed:bc:8a:17:
                    e3:11:6e:41:35:c8:2a:66:d4:02:7a:0b:e1:da:cf:
                    4e:96:3e:d0:11:41:77:af:76:ee:b1:ca:50:d4:e7:
                    ab:93:70:b4:59:f4:cc:7c:cb:c2:43:67:b1:6c:07:
                    ea:ed:d6:0b:eb:64:9d:4a:a4:5f:05:e3:a5:95:e8:
                    8d:bc:25:29:d0:4f:7f:9e:2a:c4:6c:1b:a1:c5:9a:
                    82:04:14:03:e8:e5:55:9c:62:d1:68:89:8b:ee:c8:
                    a4:5e:be:16:7b:6e:1c:63:2b:10:12:99:42:38:48:
                    7a:c2:29:58:22:04:8b:d8:54:2d:3e:e5:24:b8:51:
                    23:72:2c:4e:d6:9d:f0:8d:be:e7:ec:3b:e0:52:a9:
                    36:56:3a:b6:db:45:18:90:a4:9c:be:c3:24:7d:bd:
                    10:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:80:DD:15:AB:5B:30:D1:7E:3D:A0:32:53:0D:49:94:1D:86:DF:4E
            X509v3 Authority Key Identifier:
                keyid:3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/c531d94b54186bdf4f53e8c4d7aa544c0deb9161.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7855197f590ff298b52ab358da08a0fdbfe6a883.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.30.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:f4:48:da:cc:31:92:da:cd:16:e9:92:f3:1b:b3:f6:89:1a:
         8b:e6:f2:6d:06:89:10:9a:f1:90:e0:df:71:6c:fd:12:45:94:
         95:80:20:b6:98:11:17:22:df:8e:c0:cd:a2:a0:85:18:fc:43:
         84:ed:02:c2:08:87:8d:c9:39:ef:f7:2d:dc:f0:d4:20:d7:ad:
         4b:fc:55:fc:d4:d7:98:21:35:86:07:c7:ec:eb:43:cd:de:96:
         5a:ee:24:11:e7:31:d5:59:2e:27:06:79:77:4f:0f:a7:d1:b0:
         2d:14:6c:26:ba:09:ef:49:a1:e5:d6:3b:92:b7:a2:78:41:fa:
         a8:3a:63:04:c4:6d:5e:6f:5f:13:cb:ce:6d:08:e9:e3:d5:b5:
         e5:fb:1f:a1:82:57:20:1a:c5:88:b6:27:28:db:c0:9e:aa:5e:
         49:f8:2a:aa:e0:09:96:dd:82:a6:d3:cc:bb:7d:20:59:ec:64:
         b7:1f:da:18:54:fb:0e:b0:0f:9a:26:89:1d:99:42:e9:94:17:
         2f:f3:70:58:15:46:21:1e:1e:c8:23:99:70:47:3b:30:b8:71:
         9e:d0:99:86:ce:1d:29:85:0a:02:46:57:e3:a0:7d:b2:58:24:
         fc:4f:04:e5:8b:76:ca:e2:f3:0e:00:d3:4d:8d:a1:c8:ef:4b:
         f0:de:d3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:00 2024 by rpki-client on console-fra.rpki-client.org