Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b6e2f395-b648-4842-80a7-8d854912bf23/faf790582e877da6e8fb80fb9718d76345e96937.roa
File:                     faf790582e877da6e8fb80fb9718d76345e96937.roa (raw, json)
Hash identifier:          PLCAfkzvRupQgLx0/q83wR3D9jv2Qt4OKyWWslu05Oo=
Subject key identifier:   1C:0A:EB:F8:AF:46:7A:96:E5:F5:33:6D:0F:4C:28:C3:98:F8:B4:E6
Certificate issuer:       /CN=7daee1404660d04caeac4117f6572e478edbda00
Certificate serial:       1C028F
Authority key identifier: 97:9A:00:E1:38:42:91:5F:D5:A8:D7:8F:92:D0:F4:95:2F:8A:D8:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7daee1404660d04caeac4117f6572e478edbda00.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b6e2f395-b648-4842-80a7-8d854912bf23/faf790582e877da6e8fb80fb9718d76345e96937.roa
Signing time:             Thu 28 Dec 2023 18:40:41 +0000
ROA not before:           Thu 28 Dec 2023 18:40:41 +0000
ROA not after:            Sun 28 Dec 2025 18:40:41 +0000
asID:                     64123
IP address blocks:        186.148.224.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1835663 (0x1c028f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7daee1404660d04caeac4117f6572e478edbda00
        Validity
            Not Before: Dec 28 18:40:41 2023 GMT
            Not After : Dec 28 18:40:41 2025 GMT
        Subject: CN=faf790582e877da6e8fb80fb9718d76345e96937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:52:3f:0f:1c:e0:ed:ac:1b:b0:ab:ec:82:8d:
                    d7:c2:50:7a:05:c6:f2:cc:50:4f:51:3e:54:42:de:
                    5e:34:d6:0a:5d:6b:18:01:a1:05:f9:ab:9c:23:e7:
                    ae:71:df:ba:51:bf:d7:0f:00:bf:b0:79:1d:80:ea:
                    75:0a:a2:8c:af:8c:b1:6d:fd:ae:37:b3:26:a9:5e:
                    cd:9b:7c:63:83:c0:a0:17:c5:97:71:d0:65:c3:38:
                    66:e7:68:5a:32:3d:3b:ca:eb:7e:e6:91:b4:b5:1a:
                    6d:70:d0:23:b9:da:fb:00:5c:f9:2f:e4:cb:9e:0b:
                    51:7d:c3:b1:66:10:4a:37:21:c2:72:d4:d7:a4:dc:
                    4d:fd:9a:54:5b:35:22:9b:a8:59:29:21:38:1b:52:
                    68:18:d5:22:ec:aa:f3:df:7a:1d:c2:e3:86:21:cb:
                    23:97:de:0d:9b:ce:e4:ea:23:cf:86:af:e2:02:ec:
                    46:b7:de:f1:5c:8c:de:38:d6:bc:b1:10:8d:ab:54:
                    9f:0a:5c:30:b6:be:ed:39:92:06:94:dd:99:cc:7e:
                    3c:15:2b:85:fe:09:f8:d1:bd:1a:2b:6f:63:ac:f3:
                    fd:f7:d8:dd:d2:5f:63:d3:bc:a2:58:48:77:15:77:
                    a1:98:87:40:1c:c6:67:33:e3:e1:12:27:5e:c3:4a:
                    b5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:0A:EB:F8:AF:46:7A:96:E5:F5:33:6D:0F:4C:28:C3:98:F8:B4:E6
            X509v3 Authority Key Identifier:
                keyid:97:9A:00:E1:38:42:91:5F:D5:A8:D7:8F:92:D0:F4:95:2F:8A:D8:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7daee1404660d04caeac4117f6572e478edbda00.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b6e2f395-b648-4842-80a7-8d854912bf23/faf790582e877da6e8fb80fb9718d76345e96937.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b6e2f395-b648-4842-80a7-8d854912bf23/7daee1404660d04caeac4117f6572e478edbda00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:dc:e3:d0:31:9d:e8:8a:a6:29:ad:b5:bd:ee:74:88:02:65:
         d1:53:6f:8e:70:4b:3f:b6:65:ec:b6:9d:a1:56:3a:b9:fa:0a:
         64:9e:4e:7b:99:de:0e:d4:06:64:a2:bb:38:02:5a:5a:ba:f1:
         04:a6:b7:71:77:1a:f9:0c:34:57:19:07:96:4b:32:f3:9b:f6:
         30:64:55:e5:61:62:e2:f3:0b:87:0b:ef:d2:ed:20:58:25:9c:
         52:0d:2a:8b:31:0a:ec:46:6c:53:76:59:b9:fb:5a:f8:cc:5e:
         f1:9d:e1:99:15:75:23:9f:5f:37:84:7d:f9:92:ac:23:cd:2e:
         ef:74:32:89:d3:4a:8a:25:86:2e:64:cb:32:23:b9:88:25:98:
         16:2e:c3:3a:7e:54:82:50:99:c8:c3:c5:e7:68:96:7b:1d:c2:
         97:49:1f:6c:fd:6d:92:e5:e0:ee:9f:0e:72:7c:f6:50:a5:18:
         5b:eb:d3:87:a4:04:24:15:05:eb:62:e1:a7:30:40:1e:19:34:
         e2:e9:3e:14:27:3a:99:94:3c:ed:56:02:9b:f9:26:08:1e:d9:
         30:7d:2d:36:99:2f:f4:a7:15:e9:da:a8:2e:8f:23:9a:4c:e8:
         86:cb:f5:dd:d9:e6:92:e4:06:55:fe:26:e2:03:82:8f:3c:be:
         c2:ed:d5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:46 2024 by rpki-client on console-ams.rpki-client.org