Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b976380d-2e90-4e28-b0a6-4b3dfe1d8ad5/c648910522d90dd85fab0ea2a385a10e16400b2a.roa
File:                     c648910522d90dd85fab0ea2a385a10e16400b2a.roa (raw, json)
Hash identifier:          ZAwpWHHu131gPWXx1oogL7hRelQDh/CkTC/Dec+X1Us=
Subject key identifier:   4B:40:BA:6C:FB:D7:5E:DB:FA:0E:1F:7B:49:7F:EA:CA:21:56:45:F4
Certificate issuer:       /CN=ae85768adef6d4dde1ca45bae430571e45d9370a
Certificate serial:       258603
Authority key identifier: 19:6C:07:87:F8:83:DF:6F:A4:8F:29:4A:61:D0:34:D2:3D:EF:8C:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae85768adef6d4dde1ca45bae430571e45d9370a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b976380d-2e90-4e28-b0a6-4b3dfe1d8ad5/c648910522d90dd85fab0ea2a385a10e16400b2a.roa
Signing time:             Fri 19 Jan 2024 20:46:34 +0000
ROA not before:           Fri 19 Jan 2024 20:46:34 +0000
ROA not after:            Mon 19 Jan 2026 20:46:34 +0000
asID:                     27837
IP address blocks:        186.1.160.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2459139 (0x258603)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae85768adef6d4dde1ca45bae430571e45d9370a
        Validity
            Not Before: Jan 19 20:46:34 2024 GMT
            Not After : Jan 19 20:46:34 2026 GMT
        Subject: CN=c648910522d90dd85fab0ea2a385a10e16400b2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5e:57:0f:d2:7b:79:25:d9:fc:cf:83:25:59:
                    ca:7c:d5:fb:f4:31:c8:4d:96:72:6a:92:6a:fa:16:
                    e3:b1:75:30:0a:5a:d8:d1:fe:57:93:07:7b:ba:3c:
                    2b:33:1f:cc:cf:63:67:d5:00:75:6e:c0:d6:e6:68:
                    8a:94:0e:ae:49:91:14:5a:be:f8:1f:ee:7c:2e:fc:
                    cd:9b:77:31:74:6a:03:19:41:4d:bf:19:7b:a9:fa:
                    4b:eb:0e:fc:c0:c1:5a:c7:82:fd:2f:5c:b9:80:a1:
                    0b:e9:5b:d7:53:b8:66:88:84:01:7f:e4:3e:eb:b3:
                    af:d1:1a:0b:f8:e4:97:c4:88:9a:77:fc:d6:90:28:
                    76:40:88:a4:54:5a:c2:1d:25:1c:88:f6:f4:f6:2b:
                    01:bc:de:70:11:c9:84:09:85:80:f8:d4:fc:08:5a:
                    fc:c6:76:d4:59:99:4f:01:55:99:30:09:d7:25:aa:
                    39:01:f5:39:33:89:85:54:28:af:74:5c:d2:85:5f:
                    b6:64:a3:d0:5f:0a:f4:90:65:75:89:40:c5:2d:79:
                    00:d5:8a:91:7f:62:23:00:5d:eb:2b:45:38:e6:c2:
                    5f:8d:c5:00:2b:a6:d1:92:69:3b:e4:42:9b:77:5c:
                    cc:dc:00:35:c4:30:1f:b6:b2:92:87:13:45:91:a5:
                    18:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:40:BA:6C:FB:D7:5E:DB:FA:0E:1F:7B:49:7F:EA:CA:21:56:45:F4
            X509v3 Authority Key Identifier:
                keyid:19:6C:07:87:F8:83:DF:6F:A4:8F:29:4A:61:D0:34:D2:3D:EF:8C:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae85768adef6d4dde1ca45bae430571e45d9370a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b976380d-2e90-4e28-b0a6-4b3dfe1d8ad5/c648910522d90dd85fab0ea2a385a10e16400b2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b976380d-2e90-4e28-b0a6-4b3dfe1d8ad5/ae85768adef6d4dde1ca45bae430571e45d9370a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.1.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9b:f7:f0:ac:3a:ff:25:9f:4c:de:39:c2:2a:4f:5b:4a:c9:8a:
         78:d6:a1:fe:d4:16:57:b3:c0:54:e1:9b:b1:35:a2:8d:bb:74:
         26:c3:ef:fd:c8:62:ff:6e:8f:54:b7:2f:ad:3d:48:cc:fc:b6:
         ee:57:f1:dd:90:69:a8:bb:0d:78:cf:66:55:04:e9:52:79:cf:
         e5:f1:af:e2:ad:58:9c:a1:50:6c:a3:e7:84:eb:7b:83:8a:0f:
         9d:b3:1d:aa:9e:2b:1a:d6:0a:6b:22:98:09:d9:98:5f:a2:f3:
         42:88:c1:12:fd:95:a1:99:57:a5:66:24:7f:ff:80:89:3b:f8:
         83:8d:fb:ac:aa:4e:d0:72:71:30:aa:bf:aa:b3:4a:8a:1f:44:
         e7:f4:b6:51:b5:57:cc:e8:db:26:11:08:ea:e5:14:8a:cc:be:
         59:68:61:f2:cb:e7:7a:b8:46:89:ce:03:0f:0f:a5:d1:30:93:
         f7:39:fb:78:06:0b:64:f9:2d:8f:bb:18:ee:fc:44:e6:19:c2:
         57:71:10:21:28:a5:7b:e3:62:1e:8b:d4:35:c6:54:fa:3d:b4:
         72:f0:9a:f8:8c:b9:95:2f:4f:51:7e:34:05:1a:7c:ca:2a:df:
         1c:19:64:b8:6d:13:da:ff:4a:cd:b2:3f:0c:13:68:c7:e3:d7:
         21:a9:4b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:02 2024 by rpki-client on console-fra.rpki-client.org