Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/3219e9f9fc9367fe6280ab482ac82e77554c1257.roa
File:                     3219e9f9fc9367fe6280ab482ac82e77554c1257.roa (raw, json)
Hash identifier:          OaKYZe+fCdiCZy0ygGYMZV1ycmB/iY20aFsXTQpVz9s=
Subject key identifier:   87:F8:1B:20:C0:96:6E:03:07:45:5D:8D:9F:22:BF:73:E3:E6:2C:25
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       26D7BE
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/3219e9f9fc9367fe6280ab482ac82e77554c1257.roa
Signing time:             Wed 30 Aug 2023 17:50:38 +0000
ROA not before:           Tue 29 Aug 2023 17:50:30 +0000
ROA not after:            Sat 30 Aug 2025 17:50:30 +0000
asID:                     27817
IP address blocks:        186.113.12.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2545598 (0x26d7be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Aug 29 17:50:30 2023 GMT
            Not After : Aug 30 17:50:30 2025 GMT
        Subject: CN=3219e9f9fc9367fe6280ab482ac82e77554c1257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:79:17:59:46:2b:df:c4:64:53:e7:22:be:af:
                    d1:a3:9e:30:c9:2c:fb:a4:e0:fc:e5:a9:45:4e:e0:
                    06:a4:b8:58:31:c1:44:38:6f:ad:67:81:5f:94:e4:
                    b2:47:70:13:4e:fc:b3:8f:92:91:3f:3f:22:ae:3b:
                    81:94:b8:96:83:e9:14:d5:d8:7e:60:f4:04:80:4e:
                    7d:51:25:fe:87:4a:2f:07:cb:86:85:a3:eb:2c:6e:
                    9e:32:4a:8c:49:f7:f1:bc:9c:f6:3b:da:33:07:bd:
                    01:80:37:1e:6c:a8:a3:f9:30:a6:dd:1d:84:dd:ba:
                    ff:80:39:b6:3d:d7:cf:a1:ff:f6:ca:28:75:4b:e3:
                    a5:e5:53:20:03:f0:cd:06:27:75:08:17:5c:70:47:
                    d6:95:ac:75:da:04:84:b0:92:25:6f:98:5e:5c:e6:
                    73:18:e2:18:97:92:62:39:03:6e:de:b2:1d:f9:30:
                    e7:c9:0f:97:d7:f6:9b:fc:34:02:d5:7d:a3:33:c1:
                    b2:5b:a6:6b:fb:73:e8:24:97:94:d4:6e:14:0f:38:
                    c6:75:ca:1a:fa:a5:7a:2c:09:e9:4a:10:2c:c7:08:
                    0d:4c:ca:95:07:07:9f:15:43:cc:96:c9:2b:e7:e7:
                    84:02:dc:8e:e5:33:67:48:74:3a:4e:da:18:11:15:
                    b7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F8:1B:20:C0:96:6E:03:07:45:5D:8D:9F:22:BF:73:E3:E6:2C:25
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/3219e9f9fc9367fe6280ab482ac82e77554c1257.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.113.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:41:57:41:95:b6:76:89:aa:02:93:98:e9:9e:87:3c:5a:69:
         7a:2f:47:63:fd:1a:cf:89:d7:f9:15:fc:67:d4:c4:80:20:b5:
         7c:62:46:9e:a1:fa:b1:82:46:ab:a6:68:cc:f0:83:0d:88:70:
         60:60:e6:4d:0b:37:05:95:38:b7:60:3f:e5:3e:19:bb:9e:c8:
         83:1b:53:5e:fb:57:a8:9a:d9:1d:56:e0:54:73:b9:87:eb:4f:
         18:1e:72:d2:52:21:c7:5b:95:6c:e6:19:6e:2b:e5:0b:9a:c1:
         49:4c:75:ba:96:ed:9c:8b:20:39:d0:e2:fb:a0:6c:4f:0a:69:
         94:a9:b1:aa:0b:9c:de:64:dd:a8:f1:99:64:fb:3f:fd:fe:83:
         a9:65:8b:03:6a:20:cd:13:f4:df:77:f1:34:5c:a1:4f:71:81:
         ee:85:92:bb:c2:68:67:87:66:d4:d5:2e:06:c5:8b:0e:01:0f:
         3c:af:30:96:8c:e5:64:e4:47:ba:eb:43:51:a7:10:5d:72:05:
         cb:d4:04:84:62:51:d2:31:bf:01:9d:a3:8a:4b:9f:3d:2c:35:
         41:38:5c:d4:0b:8d:41:e5:19:6f:6b:16:31:c3:ce:bd:12:18:
         03:95:6f:14:3e:91:ff:54:14:26:c5:b1:bc:95:df:6a:ee:1e:
         08:fa:05:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:30 2024 by rpki-client on console-fra.rpki-client.org