Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b8648a1c-7eb9-469e-bf28-e1888ad89efb/d8c9c9833540400864684abfc430b65a1be4d8a0.roa
File:                     d8c9c9833540400864684abfc430b65a1be4d8a0.roa (raw, json)
Hash identifier:          JNYYih4B6b0Os6KpwpkcgNpj/edG0IeovSUvoe2oTNk=
Subject key identifier:   7B:54:F4:17:53:29:B7:84:F8:59:BA:90:E7:1D:D9:33:37:17:FA:2C
Certificate issuer:       /CN=429adc7117b5fb6c9be1a7cf4fa313e37ee185bf
Certificate serial:       27563C
Authority key identifier: A0:E8:AD:8F:6B:2D:6D:1F:3D:27:10:B5:A0:DA:EF:C6:56:07:17:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/429adc7117b5fb6c9be1a7cf4fa313e37ee185bf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b8648a1c-7eb9-469e-bf28-e1888ad89efb/d8c9c9833540400864684abfc430b65a1be4d8a0.roa
Signing time:             Mon 12 Feb 2024 19:41:44 +0000
ROA not before:           Mon 12 Feb 2024 19:41:44 +0000
ROA not after:            Thu 12 Feb 2026 19:41:44 +0000
asID:                     27651
IP address blocks:        186.10.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2577980 (0x27563c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429adc7117b5fb6c9be1a7cf4fa313e37ee185bf
        Validity
            Not Before: Feb 12 19:41:44 2024 GMT
            Not After : Feb 12 19:41:44 2026 GMT
        Subject: CN=d8c9c9833540400864684abfc430b65a1be4d8a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ba:bc:a4:6b:1d:8f:36:16:ac:3d:27:bb:e3:
                    82:e2:40:54:60:46:ba:a1:f8:6d:f1:09:aa:11:b9:
                    5c:d3:c7:65:e1:b4:b6:c4:3e:84:4f:eb:22:7b:39:
                    ed:47:55:31:e5:c0:d5:70:1d:98:e5:91:fa:11:18:
                    a7:45:b4:a8:d1:ee:8e:c3:79:f4:9d:6b:64:8f:4f:
                    b6:77:14:e9:cb:e0:d6:51:ae:f6:8d:7e:f4:7d:5f:
                    d7:72:8e:3f:d6:49:6a:34:c1:bd:65:52:01:30:68:
                    07:e6:7a:23:b3:94:50:ff:0f:03:fe:b8:47:ed:1c:
                    3c:0f:31:0a:91:e6:03:7b:7b:16:30:79:0e:a5:0c:
                    ca:b0:9f:cf:8c:a1:ce:77:aa:29:6f:f5:a9:ef:cd:
                    db:86:4d:44:c4:3e:7a:51:f5:7b:f3:95:d6:c7:c1:
                    2c:b7:3f:9a:70:94:17:f6:01:e8:a7:5d:e0:65:d7:
                    a6:80:3d:8b:cd:c1:cf:77:bc:b8:9a:ab:5b:a5:f0:
                    1f:e7:51:6d:2a:43:2e:ff:3f:0f:7e:59:84:03:f1:
                    c7:63:72:60:22:4b:f5:b0:ca:91:02:1b:a4:08:8a:
                    6a:dc:20:d1:d8:33:8b:3e:9e:d7:5d:1a:d0:03:ce:
                    84:00:ca:33:df:ee:bd:23:e5:5c:f5:4c:8f:5d:bc:
                    c3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:54:F4:17:53:29:B7:84:F8:59:BA:90:E7:1D:D9:33:37:17:FA:2C
            X509v3 Authority Key Identifier:
                keyid:A0:E8:AD:8F:6B:2D:6D:1F:3D:27:10:B5:A0:DA:EF:C6:56:07:17:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/429adc7117b5fb6c9be1a7cf4fa313e37ee185bf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b8648a1c-7eb9-469e-bf28-e1888ad89efb/d8c9c9833540400864684abfc430b65a1be4d8a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b8648a1c-7eb9-469e-bf28-e1888ad89efb/429adc7117b5fb6c9be1a7cf4fa313e37ee185bf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.10.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         52:11:06:23:6c:b7:59:a3:f0:08:f9:b3:e4:41:41:48:cf:b8:
         4e:b2:67:74:92:f2:df:8e:2e:b9:bd:fb:24:dd:92:1b:40:0f:
         cd:9d:2a:3d:b3:d2:2e:7f:d3:cc:95:de:ba:d0:c5:21:c9:16:
         bb:f7:63:e7:22:98:67:2b:30:8a:3d:8c:23:2e:41:be:e4:1b:
         b7:24:e9:d5:64:46:dc:76:23:4b:95:8b:d4:e9:54:43:71:fc:
         78:b4:d4:39:ba:1c:6e:4c:bf:af:ef:18:78:e7:87:a1:70:07:
         96:4d:a7:0b:45:da:17:bc:70:32:86:e1:ae:3d:f1:dd:bd:50:
         81:04:7b:9f:72:24:85:57:c8:db:ea:dd:d9:57:2f:24:d4:36:
         b8:01:8c:cf:5b:f8:fa:bb:e2:af:c3:64:72:d7:bb:30:0d:ce:
         46:81:c6:ee:b4:a7:34:4a:ec:4a:7e:84:eb:55:85:1b:af:64:
         fe:04:f9:b2:e7:65:92:19:db:b8:07:e4:db:8f:94:c1:75:a2:
         ca:8a:1c:af:34:20:03:90:16:74:82:23:c4:94:af:0e:13:22:
         a6:13:b8:a9:08:a1:4b:8b:68:06:ba:8b:29:50:c7:ce:c3:ef:
         ba:59:01:63:7d:2c:db:27:2b:cb:11:a3:f5:44:19:1e:f0:d2:
         db:58:b0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:02 2024 by rpki-client on console-fra.rpki-client.org