Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/701365c5b005d5720fb8f8aadf60e99f35def7bf.roa
File:                     701365c5b005d5720fb8f8aadf60e99f35def7bf.roa (raw, json)
Hash identifier:          6qrrAjFe/gsaEQS5uwmhijSRwatCkgksYdEtiXV809s=
Subject key identifier:   F8:89:5C:8E:3B:EF:96:E8:41:CB:52:C5:B5:88:50:60:7B:FA:31:F3
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       187637
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/701365c5b005d5720fb8f8aadf60e99f35def7bf.roa
Signing time:             Tue 31 May 2022 15:15:37 +0000
ROA not before:           Tue 31 May 2022 03:00:00 +0000
ROA not after:            Fri 31 May 2024 03:00:00 +0000
asID:                     263804
IP address blocks:        186.112.128.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1603127 (0x187637)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: May 31 03:00:00 2022 GMT
            Not After : May 31 03:00:00 2024 GMT
        Subject: CN=701365c5b005d5720fb8f8aadf60e99f35def7bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:58:41:f9:03:06:0a:8f:87:5b:06:ea:d2:8a:
                    a7:9f:0d:63:8d:02:29:2b:d5:ba:33:23:80:c4:cc:
                    54:30:98:41:07:37:cc:ba:10:f5:e9:5a:ef:be:19:
                    68:bd:5d:0e:18:7e:d8:80:e9:55:8c:dd:d1:f6:ff:
                    f0:be:12:0f:84:35:99:09:34:3d:5f:30:ab:07:4e:
                    a8:bc:a3:aa:38:69:60:1a:b9:50:c3:34:61:45:10:
                    44:36:f1:04:c3:67:e6:11:aa:fb:ce:e1:b1:42:81:
                    24:82:e2:e2:62:7f:66:91:a3:80:2d:a4:e1:2a:17:
                    cd:70:e3:98:98:80:f5:5d:b2:3f:84:83:42:1b:30:
                    9f:62:9c:db:2d:5c:36:fe:9d:0b:02:fd:fa:64:92:
                    37:e7:29:d6:7a:06:a2:43:ad:0f:81:a2:d1:c6:3b:
                    bc:2e:84:5c:a4:a2:d1:e3:0b:25:66:7f:d5:8e:bf:
                    77:1c:f3:e1:d8:43:41:49:b0:a5:58:3f:a3:7a:d8:
                    70:8b:e8:b3:cc:c8:64:7d:5a:7a:92:ba:29:4a:e5:
                    37:6d:08:35:2b:e1:8a:67:d1:cd:ed:63:af:be:bd:
                    ab:cc:ed:34:f5:9f:70:a8:ac:fd:6d:35:dc:8d:1d:
                    95:5b:2b:02:e9:ce:b9:79:e7:4e:8e:bf:c3:a2:43:
                    f5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:89:5C:8E:3B:EF:96:E8:41:CB:52:C5:B5:88:50:60:7B:FA:31:F3
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/701365c5b005d5720fb8f8aadf60e99f35def7bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.112.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:da:8d:b3:e6:df:4e:e0:9a:1f:0d:0d:98:95:59:ad:5a:98:
         d5:c5:bb:e8:9b:5e:67:ad:57:f6:5e:7d:ac:23:89:6a:8b:45:
         07:2e:33:71:2c:af:7a:33:25:e1:6a:2f:a6:6c:fc:74:44:32:
         ca:6f:62:c0:73:a6:ef:aa:e9:fc:3c:ec:2a:f3:e2:8d:64:cc:
         16:66:fd:83:b3:fa:a4:6c:8f:02:23:3c:82:a7:80:a8:11:6e:
         ec:dd:ab:7c:15:3d:29:1a:bd:73:75:c7:15:bd:63:ba:9c:83:
         ab:33:a3:66:a8:c8:cc:ad:73:69:4a:4c:8c:b8:80:de:51:e0:
         ab:45:9f:34:c4:ec:2c:bf:f8:4a:66:f5:d4:bd:7a:61:9c:99:
         c4:a3:a0:e7:f9:1d:4e:15:c6:39:4d:65:7b:53:fd:f0:27:9e:
         95:07:55:09:d7:f4:99:15:42:12:ee:a9:c7:30:59:49:77:a3:
         3b:15:88:7d:7d:35:a6:90:49:05:e1:00:a0:79:be:d6:69:04:
         ee:83:29:4b:70:5f:fd:01:42:a8:55:e1:31:7e:35:1e:b6:a3:
         ef:69:9c:25:ff:c3:8e:42:8a:fb:33:6a:a8:97:9d:5d:4f:b0:
         78:93:ff:fb:65:22:48:6a:99:06:b1:79:c1:e6:d6:64:65:36:
         32:12:7f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:06 2024 by rpki-client on console-fra.rpki-client.org