Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/f9e72261cf412ca4dd01d8ca384f3223d4a043b5.roa
File:                     f9e72261cf412ca4dd01d8ca384f3223d4a043b5.roa (raw, json)
Hash identifier:          +L2ndmax11soInGd9B9Db9b5HEenmWEpannOpKODp70=
Subject key identifier:   D7:2F:96:36:49:A4:45:91:22:A9:27:BE:6C:0A:1F:59:7C:8E:05:72
Certificate issuer:       /CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Certificate serial:       21040D
Authority key identifier: 3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/f9e72261cf412ca4dd01d8ca384f3223d4a043b5.roa
Signing time:             Fri 19 May 2023 08:30:00 +0000
ROA not before:           Thu 18 May 2023 08:30:00 +0000
ROA not after:            Sat 17 May 2025 08:30:00 +0000
asID:                     13489
IP address blocks:        186.30.112.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2163725 (0x21040d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7855197f590ff298b52ab358da08a0fdbfe6a883
        Validity
            Not Before: May 18 08:30:00 2023 GMT
            Not After : May 17 08:30:00 2025 GMT
        Subject: CN=f9e72261cf412ca4dd01d8ca384f3223d4a043b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:70:c7:20:fc:95:78:66:97:ae:ed:d9:ff:d6:
                    52:a6:6d:30:75:72:22:08:36:89:b6:17:9a:db:a8:
                    f5:d4:92:dc:0b:84:a9:35:b8:b2:17:72:ae:bd:fa:
                    da:65:92:b5:03:92:a2:56:3b:4e:cd:84:5a:d5:8c:
                    2e:1b:86:06:5f:fe:c5:e9:af:b7:40:f8:c6:63:6a:
                    1f:54:55:1b:77:7c:fd:b0:bb:6f:5b:38:db:cf:fd:
                    d6:9c:4f:a2:87:27:be:a9:0c:f9:be:7f:da:46:7c:
                    7a:82:8a:36:09:43:f8:70:4f:dc:4d:e0:94:70:84:
                    88:2c:89:77:d1:45:16:bb:3d:d0:3e:64:f8:b2:81:
                    f8:e6:5d:37:e7:a1:7e:ad:4b:61:3c:e1:e3:32:8b:
                    fc:9f:7d:c9:c5:23:b6:33:39:d3:02:25:7d:09:9c:
                    ee:5e:ab:51:81:78:81:51:25:b3:9a:cb:27:ef:9f:
                    07:f8:75:6c:13:bf:d9:1b:be:09:43:af:e9:6a:f0:
                    db:42:e5:c4:17:5e:84:91:29:4a:e3:e6:89:f6:82:
                    7a:18:01:02:ac:3d:0d:a4:93:02:5f:cf:89:1e:3f:
                    c0:14:1d:b3:30:65:32:bd:04:4b:c0:ac:f4:42:40:
                    89:e7:eb:04:de:9a:b5:bf:95:af:44:d9:6a:73:c0:
                    e8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:2F:96:36:49:A4:45:91:22:A9:27:BE:6C:0A:1F:59:7C:8E:05:72
            X509v3 Authority Key Identifier:
                keyid:3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/f9e72261cf412ca4dd01d8ca384f3223d4a043b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7855197f590ff298b52ab358da08a0fdbfe6a883.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.30.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:42:dc:40:87:3a:98:06:21:ad:78:7c:cf:d5:19:b0:e5:40:
         98:1f:a6:cd:8c:d7:b9:0c:90:6e:b5:f4:12:fb:6f:95:51:c9:
         bd:43:aa:c9:03:2a:2f:90:eb:d8:e0:18:e3:76:a0:c9:71:c7:
         1d:79:c9:3a:3d:16:62:aa:30:4c:c2:45:4f:de:33:01:e4:52:
         95:55:f7:c7:de:5c:cf:36:c7:86:11:c5:2e:48:10:0b:fa:2b:
         be:b9:0c:38:f7:4a:05:19:6e:14:ce:0f:7c:5a:9c:8a:38:0e:
         52:15:6c:c4:c1:ad:3d:c5:ae:e2:b0:90:a2:f4:bf:33:ca:9a:
         cc:3f:a8:4c:05:bb:cd:d1:be:82:ae:ce:ee:54:a8:ea:24:99:
         e4:44:d3:91:61:66:5b:23:00:49:5a:60:7f:4a:9c:54:3f:eb:
         19:10:c1:98:b4:4e:5b:2f:72:6c:72:5f:63:ef:8b:97:33:c4:
         d5:dc:83:c0:01:0d:58:06:65:1f:18:ad:fc:a3:1b:85:62:b4:
         04:e1:2b:34:96:7a:36:fd:40:3c:ee:ed:ad:11:2c:59:f2:bf:
         cc:f7:93:3e:01:af:76:31:7f:a9:91:fc:87:52:a6:6a:7f:44:
         48:57:07:44:ad:2b:5b:17:ff:df:78:93:58:c6:ff:f4:11:a9:
         d7:03:0d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:20 2024 by rpki-client on console-ams.rpki-client.org