Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b7b80272-4202-4b7f-ae27-d52e3f5261e3/0f18602eb019bac891d56358f1bbf2e8d03892a9.roa
File:                     0f18602eb019bac891d56358f1bbf2e8d03892a9.roa (raw, json)
Hash identifier:          igxF82OaSiBh90ZYSJT5FhVbUT/Ru8DMALVxKXLExi4=
Subject key identifier:   50:F5:94:84:9F:91:EC:17:8E:58:42:1B:90:44:ED:A2:A9:5C:B9:C5
Certificate issuer:       /CN=86c528546bf53999041dc15403a09ad96a063d2a
Certificate serial:       265728
Authority key identifier: 47:F2:74:9F:9D:94:1C:51:58:F9:20:F8:41:A7:A0:13:81:73:D6:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/86c528546bf53999041dc15403a09ad96a063d2a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b7b80272-4202-4b7f-ae27-d52e3f5261e3/0f18602eb019bac891d56358f1bbf2e8d03892a9.roa
Signing time:             Wed 27 Dec 2023 20:40:43 +0000
ROA not before:           Wed 27 Dec 2023 20:40:43 +0000
ROA not after:            Sat 27 Dec 2025 20:40:43 +0000
asID:                     265699
IP address blocks:        162.12.197.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2512680 (0x265728)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86c528546bf53999041dc15403a09ad96a063d2a
        Validity
            Not Before: Dec 27 20:40:43 2023 GMT
            Not After : Dec 27 20:40:43 2025 GMT
        Subject: CN=0f18602eb019bac891d56358f1bbf2e8d03892a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:46:ff:15:67:ff:a1:67:3b:2f:22:bc:ea:0d:
                    1b:32:e4:e0:af:4b:49:79:4a:1d:e1:f9:5c:60:28:
                    09:5c:3e:a6:a4:ba:6e:ef:29:32:16:97:ff:d4:fa:
                    07:72:c5:23:d8:9f:a1:01:e1:0d:e3:53:ed:c8:55:
                    c8:91:af:8b:91:cc:6c:e6:26:10:5b:3c:a2:40:d9:
                    30:f7:82:4f:f9:e5:a2:0d:55:f1:93:76:d5:1f:48:
                    44:17:df:ef:03:c6:96:0b:75:1a:e5:c3:f0:e6:7c:
                    e5:60:4e:7b:9b:cf:e4:8d:22:a3:6e:46:da:c0:18:
                    96:23:6f:f4:b0:ee:a9:4f:6f:88:4e:49:19:05:96:
                    60:53:1c:52:60:e6:bc:9a:ff:07:6c:11:da:87:3e:
                    76:cd:97:f2:60:39:10:eb:91:6e:1a:62:60:4e:f3:
                    2f:dd:9e:24:df:75:75:d7:67:b4:a3:74:70:1e:7d:
                    cc:18:a1:a6:3f:4c:ac:99:a7:e2:f5:fc:4f:92:19:
                    16:16:0e:67:7f:7b:69:1b:c4:47:cd:8f:57:1b:4e:
                    f9:34:b8:c4:34:ea:2e:11:97:77:d3:d5:49:a4:e4:
                    77:95:23:c6:38:fe:7a:17:73:48:22:8c:aa:65:70:
                    ee:8b:41:d1:42:71:b8:f6:42:59:87:6e:d3:4a:5c:
                    6f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F5:94:84:9F:91:EC:17:8E:58:42:1B:90:44:ED:A2:A9:5C:B9:C5
            X509v3 Authority Key Identifier:
                keyid:47:F2:74:9F:9D:94:1C:51:58:F9:20:F8:41:A7:A0:13:81:73:D6:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/86c528546bf53999041dc15403a09ad96a063d2a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b7b80272-4202-4b7f-ae27-d52e3f5261e3/0f18602eb019bac891d56358f1bbf2e8d03892a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b7b80272-4202-4b7f-ae27-d52e3f5261e3/86c528546bf53999041dc15403a09ad96a063d2a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.12.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:12:0a:9e:d0:b8:a6:87:da:76:7f:13:b2:a8:e9:7d:69:3e:
         6b:f9:82:37:30:70:d4:96:2a:02:79:ff:a7:25:08:fe:9f:f3:
         34:99:46:4b:9d:87:ce:18:46:a4:8e:19:63:66:8c:7e:ce:54:
         c8:40:8e:f3:80:c5:de:a7:5d:d1:06:7f:1b:d3:43:8a:49:f1:
         c9:3e:64:57:f0:e7:19:ff:38:9b:92:f6:70:86:a9:e3:e5:de:
         46:35:0f:e8:29:c2:90:77:fb:9f:2e:41:fe:55:ae:49:da:d2:
         fd:7a:b6:89:14:c0:81:81:c3:72:08:f1:7e:be:46:9d:17:35:
         e4:51:96:90:cf:b9:0e:0e:9a:df:18:d4:b6:fc:31:23:bc:74:
         e9:b6:ef:0d:76:95:d5:77:10:52:d3:b5:e1:29:9f:f4:b7:7b:
         9c:9d:e6:8d:5d:7e:a6:fa:62:30:60:21:12:92:b0:f0:5f:17:
         10:12:5b:d5:90:33:92:43:dd:48:c6:cb:85:2c:6a:e4:b3:a6:
         40:a9:33:a3:5e:ae:32:46:a0:4d:42:59:7f:9d:6e:ee:a7:ec:
         74:30:08:96:d1:09:a9:cd:80:31:79:8e:be:7a:ec:33:fa:07:
         20:a5:28:32:eb:86:e4:3f:05:e2:17:e1:2d:b9:a1:26:2a:96:
         d0:03:73:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org