Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/09a6973943548a595e3570d77fbb12da9816d906.roa
File:                     09a6973943548a595e3570d77fbb12da9816d906.roa (raw, json)
Hash identifier:          YuibrN0F/bPRAX77rJC9SuGQOp+CCmMGqBQmT5iIlW4=
Subject key identifier:   DF:5E:4D:7F:3C:46:CD:BA:CB:77:93:2F:94:EF:B5:E0:46:EA:6D:9B
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       0DD346
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/09a6973943548a595e3570d77fbb12da9816d906.roa
Signing time:             Wed 24 Mar 2021 14:34:58 +0000
ROA not before:           Wed 24 Mar 2021 14:34:57 +0000
ROA not after:            Tue 24 Mar 2026 14:34:57 +0000
asID:                     34991
IP address blocks:        186.113.13.0/24 maxlen: 24
                          186.113.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 906054 (0xdd346)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Mar 24 14:34:57 2021 GMT
            Not After : Mar 24 14:34:57 2026 GMT
        Subject: CN=09a6973943548a595e3570d77fbb12da9816d906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:22:53:fb:d7:c1:dd:de:61:4b:56:a9:7c:b4:
                    46:bd:b8:53:0c:a7:49:44:0d:e5:88:34:bb:cc:21:
                    3f:45:6a:74:db:42:85:a6:5f:c0:a2:3d:c1:1c:95:
                    32:df:c1:4b:c7:b1:f4:be:cf:66:63:1e:84:e9:7b:
                    22:d6:dc:c1:e1:24:5a:0a:4a:b1:29:e4:c2:c5:e6:
                    91:ca:7d:fc:a1:14:14:15:a0:6c:65:7d:d2:a7:bd:
                    c1:50:29:19:d7:d1:42:9c:be:9a:24:0f:d0:38:02:
                    11:7a:ae:fe:67:30:b5:11:6a:c9:5c:fc:25:41:d1:
                    6d:84:12:2e:0d:57:eb:53:76:2e:a1:05:a1:b7:61:
                    c3:76:ff:ab:98:46:77:a9:20:cd:b6:56:38:a4:28:
                    31:26:3e:b9:7d:54:95:1f:fc:75:df:b7:68:3b:04:
                    9f:77:99:32:55:c2:db:ef:7b:5c:db:4d:e4:ab:e9:
                    0e:27:a8:e4:1b:0d:d5:ad:1d:b2:61:44:63:b8:ff:
                    96:db:b0:ce:98:7d:36:90:50:db:79:7a:f6:79:46:
                    6d:d0:57:7d:b9:2a:54:fe:57:c9:c9:58:5e:f8:fe:
                    a8:a7:d6:9c:ad:31:16:d6:22:e2:66:97:6c:6d:03:
                    31:bf:67:49:f4:fa:25:18:fa:c2:4a:ac:de:32:98:
                    4f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:5E:4D:7F:3C:46:CD:BA:CB:77:93:2F:94:EF:B5:E0:46:EA:6D:9B
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/09a6973943548a595e3570d77fbb12da9816d906.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.113.13.0/24
                  186.113.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:36:7d:fb:17:55:bd:56:2f:6a:22:2e:8f:93:3a:dd:cf:2c:
         d7:39:9c:25:a7:ec:8b:ed:f0:70:90:20:df:2c:ba:17:8a:79:
         50:09:9b:dc:f5:e8:6c:43:2d:af:85:b7:a7:e7:23:f3:ba:26:
         2d:7b:5a:df:f7:13:dc:0d:b1:fd:e4:a4:bc:5a:ef:bd:96:6f:
         25:4b:7b:9b:9a:8b:9a:d0:32:74:9f:28:68:0b:bc:0f:a7:dc:
         06:e6:09:ef:03:11:53:fa:9d:1e:01:a5:44:32:8f:c3:18:a9:
         33:e3:c7:1c:17:4b:6a:04:80:dd:e8:7c:c6:48:08:d7:f2:26:
         94:79:30:79:ad:a4:d2:b9:91:72:9f:95:0a:b7:f1:6c:31:f5:
         be:27:4a:fd:35:4b:ca:e9:18:44:ee:9e:7e:23:e3:5d:d8:20:
         a8:aa:c6:a5:97:02:b7:92:9b:0b:4e:77:96:f6:51:cd:4e:37:
         88:8c:8b:98:cc:0c:07:41:09:86:2c:44:cd:7a:b9:d9:d4:2f:
         41:be:4c:a4:4e:b9:65:a2:d6:d9:7e:e8:da:bf:62:66:10:ee:
         22:f9:06:90:8c:25:05:d6:67:11:18:d3:86:42:06:9a:b3:24:
         b0:4c:2d:58:4a:a6:ea:ec:41:ec:34:70:ba:a5:0c:80:2d:4e:
         6b:9c:e3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:06 2024 by rpki-client on console-fra.rpki-client.org