Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/acd913f1-4827-4d25-b5c2-f390b8ee9e44/dbabffbf2c7a1e9e3194df4a5852526a9fde77ce.roa
File:                     dbabffbf2c7a1e9e3194df4a5852526a9fde77ce.roa (raw, json)
Hash identifier:          I+pGlSPZjQnRlmqUC5Rxw7RyopXNeJzOtDr3W3sPMW4=
Subject key identifier:   00:31:39:75:D6:C7:78:21:BF:C2:85:C4:68:92:02:D4:40:E4:C9:47
Certificate issuer:       /CN=50b2a8065c6a80ac82efdd878d9239a66cdd0356
Certificate serial:       0D674B
Authority key identifier: 0E:DE:97:DD:69:CE:E7:82:39:D8:22:2E:2D:0D:FC:3F:BB:7A:1F:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/50b2a8065c6a80ac82efdd878d9239a66cdd0356.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/acd913f1-4827-4d25-b5c2-f390b8ee9e44/dbabffbf2c7a1e9e3194df4a5852526a9fde77ce.roa
Signing time:             Wed 24 Mar 2021 14:42:19 +0000
ROA not before:           Wed 24 Mar 2021 14:42:19 +0000
ROA not after:            Tue 24 Mar 2026 14:42:19 +0000
asID:                     262146
IP address blocks:        186.96.252.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 878411 (0xd674b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50b2a8065c6a80ac82efdd878d9239a66cdd0356
        Validity
            Not Before: Mar 24 14:42:19 2021 GMT
            Not After : Mar 24 14:42:19 2026 GMT
        Subject: CN=dbabffbf2c7a1e9e3194df4a5852526a9fde77ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:14:e5:92:6f:3e:75:6a:d4:44:50:02:28:eb:
                    83:b9:2a:e6:be:ab:65:44:48:03:7b:23:d5:0b:8a:
                    e5:18:55:27:ee:ba:1c:a9:c6:61:b5:c5:33:36:93:
                    7c:43:46:c4:69:8f:fc:dc:02:f2:9b:f6:01:64:d8:
                    48:3b:b0:d4:93:94:f4:31:c4:c6:24:be:59:44:ce:
                    b3:bb:19:2d:0f:aa:9c:91:af:a5:27:b1:f6:e1:e6:
                    a4:40:9c:c4:7d:3b:c4:e9:19:28:e3:3d:ce:a0:42:
                    b2:18:b2:a9:c6:47:af:4b:ca:b0:60:fd:3d:51:48:
                    00:17:bc:08:df:33:6b:90:38:66:45:37:a0:c4:31:
                    29:4a:88:cd:30:42:16:79:53:88:5e:4d:c7:1d:2b:
                    7f:1d:e6:e3:ce:ce:81:c9:67:8d:35:ea:b7:9a:52:
                    ce:46:80:24:c6:89:e6:d7:b1:f9:64:4e:ad:3e:ee:
                    32:ff:7d:45:f4:af:58:bb:cf:ee:5e:85:2e:95:2d:
                    51:35:25:1f:56:8d:86:38:40:8c:74:a7:1a:73:c6:
                    a3:8e:5e:53:cf:d3:f4:51:38:23:ae:6d:a3:4c:57:
                    6b:0e:67:6a:37:47:d6:f7:b9:25:82:cc:14:11:28:
                    6b:d6:ee:c8:2c:db:0a:58:0b:c9:a7:29:02:73:8d:
                    49:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:31:39:75:D6:C7:78:21:BF:C2:85:C4:68:92:02:D4:40:E4:C9:47
            X509v3 Authority Key Identifier:
                keyid:0E:DE:97:DD:69:CE:E7:82:39:D8:22:2E:2D:0D:FC:3F:BB:7A:1F:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/50b2a8065c6a80ac82efdd878d9239a66cdd0356.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/acd913f1-4827-4d25-b5c2-f390b8ee9e44/dbabffbf2c7a1e9e3194df4a5852526a9fde77ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/acd913f1-4827-4d25-b5c2-f390b8ee9e44/50b2a8065c6a80ac82efdd878d9239a66cdd0356.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.96.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:f5:8c:4b:b9:33:f3:f6:5b:23:52:88:fc:8a:42:d5:b3:a5:
         68:47:58:c7:23:f3:99:09:68:b9:61:49:5e:ac:8c:a2:13:59:
         78:8f:46:c5:dd:c5:b4:1c:3a:f1:a7:5f:e1:df:f8:e6:78:f5:
         71:3f:2a:e1:eb:bc:d0:90:43:0b:1c:d7:c8:24:79:d3:dc:d2:
         cd:91:91:4c:30:f3:34:87:a6:43:e7:93:5d:53:d9:8b:6b:36:
         a3:de:da:29:99:06:2a:6c:05:d3:11:18:b4:64:a9:9a:11:a7:
         33:50:99:50:b2:80:30:8e:7a:c6:ae:c5:5b:83:6e:77:c9:74:
         17:f3:4a:81:17:e6:45:20:70:68:db:56:a7:73:7f:57:86:51:
         cd:b9:54:6f:d1:aa:75:b8:84:30:c9:b9:7e:24:ba:44:4c:2f:
         2a:6c:e0:2d:cd:db:9e:68:2d:d5:db:d4:2b:9d:b1:96:e1:b6:
         a6:8d:60:b1:0b:8a:d2:78:0e:b5:79:8a:c2:2e:61:68:8e:fb:
         f6:41:a5:fc:15:13:7f:f4:53:00:97:0c:24:60:59:ef:c9:dd:
         52:f4:fd:c1:f5:82:77:d3:81:e6:0a:33:29:69:a1:b6:5a:5d:
         0b:22:25:db:7f:c2:48:45:9f:0e:2e:d5:e7:bb:74:87:01:3d:
         46:18:a2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:01 2024 by rpki-client on console-fra.rpki-client.org