Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b8648a1c-7eb9-469e-bf28-e1888ad89efb/9d13269987ea1fd9db6dcff80fb33c137d1627ba.roa
File:                     9d13269987ea1fd9db6dcff80fb33c137d1627ba.roa (raw, json)
Hash identifier:          BwreGHofZwl0t7omJz20ubmyHcDzU/1pvjg5jnGLDaw=
Subject key identifier:   BE:9C:90:56:E3:B0:CC:CD:33:D6:33:C6:60:8D:5E:6E:11:D1:34:BB
Certificate issuer:       /CN=429adc7117b5fb6c9be1a7cf4fa313e37ee185bf
Certificate serial:       27AB0C
Authority key identifier: A0:E8:AD:8F:6B:2D:6D:1F:3D:27:10:B5:A0:DA:EF:C6:56:07:17:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/429adc7117b5fb6c9be1a7cf4fa313e37ee185bf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b8648a1c-7eb9-469e-bf28-e1888ad89efb/9d13269987ea1fd9db6dcff80fb33c137d1627ba.roa
Signing time:             Mon 19 Feb 2024 15:20:51 +0000
ROA not before:           Mon 19 Feb 2024 15:20:51 +0000
ROA not after:            Thu 19 Feb 2026 15:20:51 +0000
asID:                     27925
IP address blocks:        186.37.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2599692 (0x27ab0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429adc7117b5fb6c9be1a7cf4fa313e37ee185bf
        Validity
            Not Before: Feb 19 15:20:51 2024 GMT
            Not After : Feb 19 15:20:51 2026 GMT
        Subject: CN=9d13269987ea1fd9db6dcff80fb33c137d1627ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:62:cc:ec:a4:eb:96:c5:95:d5:da:1f:db:b0:
                    7f:b3:5b:d4:b8:ce:7f:a8:31:bb:e2:27:96:51:5a:
                    2b:47:2b:fd:6a:9a:6b:88:ff:80:55:87:3c:76:22:
                    21:46:e9:a6:42:3e:88:93:aa:59:88:fa:1d:2e:57:
                    b1:fd:80:1f:2e:93:33:c3:4e:ef:76:ad:39:2b:2b:
                    cd:f6:4a:af:17:39:5b:03:a1:d7:09:51:da:f0:fc:
                    8d:54:71:a2:8c:1e:95:a4:44:33:0e:79:b1:b0:00:
                    bd:cb:bb:f1:b1:4d:48:cd:c3:8a:b4:a2:05:31:fa:
                    54:c7:4c:b7:d6:b4:48:7b:43:02:6d:b2:a1:11:78:
                    27:26:88:65:bb:78:21:86:1e:04:88:74:a3:f1:fc:
                    64:c9:19:21:e6:0d:72:ad:b9:54:95:33:99:45:d7:
                    37:9a:aa:32:1b:d9:31:ea:32:6d:8f:76:4c:43:e3:
                    47:c1:fa:93:a7:5d:4b:6e:26:58:d4:b8:6f:e8:3b:
                    f6:fb:c0:27:7c:d8:3d:9c:95:6f:91:24:fb:1a:fc:
                    45:c6:0f:bf:e5:3a:6d:bc:f3:64:48:f1:2d:03:49:
                    4a:81:8d:6e:1c:e9:54:f2:08:59:be:61:f9:1f:e9:
                    df:b5:ad:37:de:da:cb:c4:8c:da:31:14:e6:b9:3e:
                    08:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:9C:90:56:E3:B0:CC:CD:33:D6:33:C6:60:8D:5E:6E:11:D1:34:BB
            X509v3 Authority Key Identifier:
                keyid:A0:E8:AD:8F:6B:2D:6D:1F:3D:27:10:B5:A0:DA:EF:C6:56:07:17:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/429adc7117b5fb6c9be1a7cf4fa313e37ee185bf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b8648a1c-7eb9-469e-bf28-e1888ad89efb/9d13269987ea1fd9db6dcff80fb33c137d1627ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b8648a1c-7eb9-469e-bf28-e1888ad89efb/429adc7117b5fb6c9be1a7cf4fa313e37ee185bf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.37.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         65:1b:57:b0:11:ca:58:c5:80:fd:6a:9f:fb:db:ae:b4:2b:72:
         20:0a:13:23:96:d3:e5:ad:de:fe:f1:cd:ef:f4:07:0f:1b:03:
         c2:f9:f1:d8:6f:a1:26:40:51:2f:67:03:cb:f5:b0:f7:60:d2:
         38:41:4f:33:03:99:6c:c0:29:85:87:52:c6:32:ca:d5:85:9f:
         02:8d:97:23:95:cc:8a:0f:2b:4e:98:ab:ea:6d:f7:15:e0:53:
         b8:1e:43:2e:1c:b2:15:e2:fe:7e:68:cc:96:9d:c1:cb:6e:c0:
         f6:36:df:45:6c:63:63:fe:b8:82:02:07:33:9f:e5:74:f9:92:
         b7:be:46:51:79:f0:b6:89:8d:2a:71:07:1f:c5:00:92:9a:19:
         a0:62:6a:61:f3:1e:22:c0:e5:4e:b4:55:dc:f4:79:dc:b9:6a:
         68:0d:06:e0:c6:bd:d0:df:f7:07:d0:2d:fa:05:dc:66:d0:1b:
         e3:de:f7:94:d0:a0:b0:32:1d:79:73:86:45:d6:44:a8:cb:d9:
         e1:95:d0:52:c4:d1:10:e2:72:31:5b:5b:5b:3f:8f:be:2f:52:
         a6:20:76:e4:7a:47:cd:79:ac:8d:20:d0:46:45:6b:c9:a0:9c:
         a2:48:41:70:a8:77:74:2c:2f:be:3e:47:d4:7b:62:49:07:70:
         07:66:9f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:46 2024 by rpki-client on console-ams.rpki-client.org