Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/7373334fb895b0d098e5e08390dedce99690ef34.roa
File:                     7373334fb895b0d098e5e08390dedce99690ef34.roa (raw, json)
Hash identifier:          zgEAObds4S81qiVz2mGJkO9tLUyjN3Ae1k8I/9ZztpE=
Subject key identifier:   89:56:A8:61:D6:AA:E1:3E:39:0A:C2:86:79:EC:C6:9E:E0:80:14:D9
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       268839
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/7373334fb895b0d098e5e08390dedce99690ef34.roa
Signing time:             Wed 30 Aug 2023 17:36:29 +0000
ROA not before:           Tue 29 Aug 2023 17:36:22 +0000
ROA not after:            Sat 30 Aug 2025 17:36:22 +0000
asID:                     263804
IP address blocks:        186.112.128.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2525241 (0x268839)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Aug 29 17:36:22 2023 GMT
            Not After : Aug 30 17:36:22 2025 GMT
        Subject: CN=7373334fb895b0d098e5e08390dedce99690ef34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a9:1b:cb:2b:ce:49:cf:fd:e5:c9:27:e8:e6:
                    d5:11:58:b1:6e:7a:5f:7e:55:cd:77:48:a6:15:99:
                    a1:e9:40:b9:07:e9:cb:cd:f5:8a:29:df:7f:c5:86:
                    05:bf:8e:1a:48:c2:a9:42:05:75:0d:fc:ea:40:c5:
                    f5:f5:d3:b2:8d:50:83:0c:21:7e:a4:6d:f8:12:1b:
                    3b:8b:0b:32:30:2f:65:14:3b:3e:c0:b7:68:52:47:
                    b9:49:64:77:47:56:6d:90:b1:7d:d5:22:d1:b9:12:
                    34:5a:6b:b1:2b:8c:be:ce:aa:4a:9b:e5:a6:85:5b:
                    1d:68:95:7b:45:0b:9a:62:f9:f4:2e:28:c1:68:29:
                    81:94:3c:ee:af:2b:44:4a:e2:41:75:57:d1:1a:25:
                    77:6e:c2:2e:e3:5c:69:18:8b:51:e1:57:e0:b1:64:
                    86:92:71:75:a4:46:61:c9:18:fe:37:ba:f5:5b:2b:
                    fe:aa:b5:77:b5:3a:a6:dd:18:7f:77:f2:4e:24:8b:
                    b6:91:e2:46:04:ac:75:c7:ff:2a:3d:11:39:6d:3b:
                    b8:82:44:50:d9:5c:80:b0:fd:1e:3e:11:80:95:dd:
                    56:19:5c:d4:6e:1c:64:5c:6a:c4:70:5a:68:eb:06:
                    8b:e2:8a:ec:74:15:de:46:1a:80:5d:e0:75:6a:af:
                    a3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:56:A8:61:D6:AA:E1:3E:39:0A:C2:86:79:EC:C6:9E:E0:80:14:D9
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/7373334fb895b0d098e5e08390dedce99690ef34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.112.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:b9:65:10:f6:64:62:e9:56:ef:a0:b9:68:ce:7f:68:1a:fc:
         c8:b1:6e:e9:18:5b:e3:7b:a4:c1:8b:d1:9b:97:28:31:f1:fb:
         16:d3:94:ad:81:d4:82:09:12:5c:29:38:fc:a6:8d:63:fa:35:
         b3:9c:b4:4b:18:6c:d2:70:75:40:6f:39:99:76:f5:ef:e6:ae:
         34:79:82:46:44:04:a0:cf:88:6c:d5:36:56:2a:b0:77:04:33:
         37:5e:a1:f4:bf:3c:12:ef:6b:e2:c9:06:61:5b:46:81:9f:2e:
         a8:87:b7:2b:b3:ce:c2:5f:a6:09:14:83:20:a7:74:13:14:49:
         ba:cd:fd:96:c1:6a:11:fb:56:26:c6:b8:ab:82:a1:2c:63:b9:
         df:d1:40:f0:df:96:e6:8e:f0:85:c1:28:56:17:46:f2:58:77:
         fa:46:f9:2e:ae:4a:be:2f:3c:e3:f7:e0:45:c8:dc:e7:97:e6:
         61:76:b5:00:d1:ca:09:53:ad:f5:1c:20:8f:60:7c:68:10:7c:
         7b:4d:bf:d6:dc:17:f3:9c:82:0b:49:bf:bb:46:fa:76:1a:e3:
         8b:63:8d:91:c2:03:72:49:e1:62:61:64:21:0a:ab:14:93:ed:
         d2:9e:45:f2:ea:9d:83:0d:5a:34:aa:c6:be:21:da:b1:04:58:
         19:63:85:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-ams.rpki-client.org