Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/53e8d046ac3d089f63c4e8b5c4f8e89d5f6e57b3.roa
File:                     53e8d046ac3d089f63c4e8b5c4f8e89d5f6e57b3.roa (raw, json)
Hash identifier:          ohf0xMTk2B/2rUBIcaYqNde9N+Zb7MWFzrFB5GSSqHo=
Subject key identifier:   E3:4B:4E:A6:FB:5A:E1:39:28:6C:F2:D1:CC:45:5B:5C:DC:1D:E7:F5
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       1EF0B2
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/53e8d046ac3d089f63c4e8b5c4f8e89d5f6e57b3.roa
Signing time:             Mon 28 Nov 2022 12:51:44 +0000
ROA not before:           Sat 26 Nov 2022 12:46:52 +0000
ROA not after:            Thu 28 Nov 2024 12:46:52 +0000
asID:                     262182
IP address blocks:        186.118.186.0/24 maxlen: 24
                          186.118.187.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2027698 (0x1ef0b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Nov 26 12:46:52 2022 GMT
            Not After : Nov 28 12:46:52 2024 GMT
        Subject: CN=53e8d046ac3d089f63c4e8b5c4f8e89d5f6e57b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:aa:22:71:2f:17:ce:1b:f1:48:a5:91:30:38:
                    e4:bf:a9:58:57:0d:33:b7:d5:92:ad:84:10:e8:41:
                    e1:72:78:c4:aa:43:d8:b6:84:da:03:27:06:14:ca:
                    4f:a5:e2:3a:eb:8f:76:8f:46:21:9b:eb:ab:6a:39:
                    77:e4:ce:a3:36:fc:03:1e:29:41:8c:29:6a:e8:56:
                    27:d0:52:29:42:53:e9:c3:1c:72:0f:2d:e9:22:ea:
                    34:c3:09:e4:fe:a1:43:1a:43:78:06:c8:ca:eb:2e:
                    87:d1:fd:22:d4:b9:4d:a5:be:08:32:71:b6:b4:1f:
                    ac:ee:16:36:17:0d:dc:e0:99:5c:00:cb:31:43:51:
                    e2:31:40:9b:a9:fa:32:85:4c:fa:05:fd:87:6b:43:
                    14:34:ef:38:da:d1:b7:3d:72:bf:83:9a:7a:ea:f5:
                    ef:c6:84:aa:15:f0:6f:e3:50:9a:a1:32:b3:62:96:
                    e0:bc:22:63:61:4c:72:ae:d8:59:de:d6:b0:4c:04:
                    e4:80:7f:98:5b:f8:f6:5a:ce:2e:a4:c9:3a:aa:46:
                    bf:14:9a:53:c2:ab:e9:76:9c:20:3e:a8:16:88:5c:
                    6b:55:37:ae:9f:6b:19:8f:38:71:6d:17:65:9e:df:
                    78:92:5a:ba:c4:49:6a:ba:24:39:f7:96:de:d1:07:
                    82:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:4B:4E:A6:FB:5A:E1:39:28:6C:F2:D1:CC:45:5B:5C:DC:1D:E7:F5
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/53e8d046ac3d089f63c4e8b5c4f8e89d5f6e57b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.118.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:13:58:bf:b9:a9:56:91:ae:7d:43:3e:ad:70:59:20:2e:f3:
         6e:7b:32:42:d1:d3:7c:b4:39:33:ae:bb:e9:83:5e:b3:ad:e2:
         6f:63:42:f8:05:14:87:2a:63:7c:7e:29:4c:d6:19:7f:04:1e:
         30:d3:14:da:97:66:8a:e3:04:c7:e4:b7:57:ee:b6:21:59:34:
         e0:e3:7a:34:71:a1:ed:09:72:e0:d1:32:09:58:2b:46:a1:d4:
         e6:5d:2e:bf:54:4a:32:0a:0b:f7:c1:bb:9d:06:3b:b5:07:78:
         8f:7d:b4:6e:50:3e:fd:1a:a2:c7:20:c8:74:86:ff:c4:25:b1:
         75:1f:da:21:7f:93:fe:02:6e:74:84:f9:82:b7:10:ae:6c:38:
         66:09:8c:21:cf:e2:b4:1e:64:46:a6:cd:99:4c:75:21:c5:ed:
         19:90:cf:c0:f9:80:9b:99:cd:5f:1f:a8:1c:c1:fe:79:41:9b:
         d8:85:66:24:86:76:a7:ae:3f:69:08:de:34:34:a2:f2:92:27:
         12:28:2d:49:b9:1c:f5:c6:40:de:de:5b:05:0d:0c:cf:39:02:
         81:c0:81:22:15:e6:20:be:41:6e:41:01:00:13:91:29:a4:b1:
         20:41:d1:3a:52:1e:da:d0:09:c0:e3:e0:4f:79:68:91:4e:18:
         bd:b8:62:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:06 2024 by rpki-client on console-fra.rpki-client.org