Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/59aaa3363596e37e36a88d0c54df66fe6c23ece5.roa
File:                     59aaa3363596e37e36a88d0c54df66fe6c23ece5.roa (raw, json)
Hash identifier:          ToRKW218ZALsMkZoyew26nnLH+hXo86WXsLiQiY7/u4=
Subject key identifier:   7D:84:82:3A:B8:9D:75:90:9A:DA:2C:4F:97:24:25:B5:83:16:A9:DB
Certificate issuer:       /CN=da0cd30df4491331691a183f5b0a9260b7daadec
Certificate serial:       29322C
Authority key identifier: 21:83:18:7D:91:8F:F4:C5:B1:D9:9E:62:E6:F1:15:ED:BB:60:82:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/da0cd30df4491331691a183f5b0a9260b7daadec.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/59aaa3363596e37e36a88d0c54df66fe6c23ece5.roa
Signing time:             Tue 26 Mar 2024 06:14:38 +0000
ROA not before:           Tue 26 Mar 2024 06:14:38 +0000
ROA not after:            Thu 26 Mar 2026 06:14:38 +0000
asID:                     14754
IP address blocks:        186.151.112.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2699820 (0x29322c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da0cd30df4491331691a183f5b0a9260b7daadec
        Validity
            Not Before: Mar 26 06:14:38 2024 GMT
            Not After : Mar 26 06:14:38 2026 GMT
        Subject: CN=59aaa3363596e37e36a88d0c54df66fe6c23ece5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2c:20:12:73:0f:c2:94:79:3e:19:d9:c5:7e:
                    e5:34:30:7a:25:61:83:7e:71:25:29:62:bf:6f:a3:
                    d1:a3:4a:76:42:ee:66:7b:ef:ee:3e:ed:d0:29:83:
                    be:a2:93:cb:07:88:2b:80:12:bf:6b:35:4d:c8:5e:
                    e5:dd:a3:48:e8:c4:86:35:c4:20:e4:36:88:84:af:
                    d9:4d:8c:ad:f5:64:c1:2d:27:2b:2b:59:12:64:64:
                    79:fc:b0:aa:61:16:b8:42:7d:ac:60:61:dc:cf:c5:
                    10:73:87:c8:f0:93:09:5e:9f:ed:51:06:31:c6:6b:
                    44:1d:df:b1:4b:9d:42:9c:47:1d:2d:5c:a5:7a:d6:
                    1f:70:7f:ec:7f:ec:63:75:46:11:47:77:90:e4:82:
                    8c:6d:c1:3d:a8:fe:16:74:67:38:58:5e:b8:32:57:
                    0c:76:6f:cc:f7:16:6f:12:39:56:db:81:75:88:62:
                    5d:b9:e9:70:ff:a1:0d:fe:b8:2b:41:7a:28:16:4c:
                    ec:45:cb:d8:60:e7:e4:96:b2:76:31:f4:95:c9:b0:
                    8e:16:14:c8:4d:07:f0:0a:3b:19:a8:39:a3:91:38:
                    54:48:5a:cc:f5:92:b3:d1:20:95:fe:49:10:07:a3:
                    5f:70:63:4d:78:d0:27:0c:63:de:bb:88:c3:28:ee:
                    f4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:84:82:3A:B8:9D:75:90:9A:DA:2C:4F:97:24:25:B5:83:16:A9:DB
            X509v3 Authority Key Identifier:
                keyid:21:83:18:7D:91:8F:F4:C5:B1:D9:9E:62:E6:F1:15:ED:BB:60:82:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/da0cd30df4491331691a183f5b0a9260b7daadec.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/59aaa3363596e37e36a88d0c54df66fe6c23ece5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/da0cd30df4491331691a183f5b0a9260b7daadec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.151.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         82:56:72:46:7d:26:0f:3f:7c:25:bc:4e:5a:ca:bb:13:f6:2e:
         8a:4b:c9:6b:3c:ac:2e:82:2d:6c:c3:b3:bc:2b:18:6d:e1:8f:
         19:8c:b5:be:26:08:f8:23:e7:75:16:09:be:9c:16:49:e5:b0:
         63:87:0a:6d:cf:8d:07:e4:c4:8d:af:cb:5d:b0:53:50:0c:ac:
         07:a1:d5:64:db:54:f3:5b:1c:e4:76:fb:1a:51:a7:45:58:37:
         6f:eb:0c:df:71:9a:ef:0d:aa:8e:21:45:cf:37:08:47:e7:8b:
         e9:5c:66:54:16:21:5a:f3:23:c8:44:e6:80:6d:21:4a:78:12:
         e2:57:b6:9d:32:a4:3a:5a:c5:75:8c:9f:4b:3b:42:11:d1:a2:
         ad:8b:65:82:63:fd:59:ff:88:80:5e:b7:b6:5f:7a:4c:fe:dc:
         10:0a:cd:eb:4d:c3:d5:a1:2b:bd:93:5a:bc:13:02:d6:ae:49:
         dc:a0:f5:09:42:09:ec:ce:e1:99:af:39:73:2a:e0:85:2e:7b:
         43:cc:19:d7:77:23:cf:b3:88:c8:12:90:08:f5:fc:75:f1:4e:
         3c:d8:82:b6:a0:03:54:dc:c3:96:5e:7d:c9:40:7a:2a:76:e8:
         23:f7:0e:b4:43:9d:e1:91:91:57:57:5b:fb:38:25:c9:db:b5:
         77:ce:d3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:44 2024 by rpki-client on console-ams.rpki-client.org