Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/c81007435952eeade7b4339c96a32d6c757a40db.roa
File:                     c81007435952eeade7b4339c96a32d6c757a40db.roa (raw, json)
Hash identifier:          fO3fPcesxzpHEqFoaiWLeBUqefTRcYHMlrlxppG0/54=
Subject key identifier:   5C:53:46:80:48:21:E5:C2:48:E2:9D:FB:4F:48:3B:DF:80:52:9B:5D
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       1D0EA3
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/c81007435952eeade7b4339c96a32d6c757a40db.roa
Signing time:             Fri 30 Sep 2022 02:15:13 +0000
ROA not before:           Wed 24 Mar 2021 14:34:57 +0000
ROA not after:            Tue 24 Mar 2026 14:34:57 +0000
asID:                     32787
IP address blocks:        186.113.14.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1904291 (0x1d0ea3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Mar 24 14:34:57 2021 GMT
            Not After : Mar 24 14:34:57 2026 GMT
        Subject: CN=c81007435952eeade7b4339c96a32d6c757a40db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:12:72:d4:5f:e5:b5:3f:a5:2f:4d:fe:68:10:
                    59:2a:40:9f:c6:07:b8:29:77:bd:66:5b:40:b1:1d:
                    6e:9c:b8:d1:ec:fa:6e:1e:e3:7c:14:ee:45:e6:82:
                    aa:53:63:54:11:32:4c:d2:19:b7:10:f8:21:aa:90:
                    f3:64:fd:42:a5:49:9e:a4:d7:40:a8:96:04:89:85:
                    52:42:39:ed:78:bd:55:d1:27:1c:35:e0:20:e4:83:
                    9f:68:b3:66:d0:8c:eb:0f:70:9b:41:92:2f:cd:1f:
                    9d:35:bb:93:ad:0e:dc:6c:f5:a3:fa:c2:07:45:4b:
                    b5:06:53:52:2c:b5:64:81:41:da:19:37:fd:4c:24:
                    9a:a1:49:a9:61:3a:11:a9:0c:5d:7c:5a:7d:2c:51:
                    d6:8a:7a:29:cb:44:00:43:a0:d2:44:0e:d9:9f:ff:
                    8f:ac:8a:af:76:ee:e2:0c:e8:50:bf:5e:60:6f:eb:
                    88:3b:3e:7d:84:ac:e9:8a:4a:d4:72:41:e2:70:90:
                    e7:40:fd:9b:f1:ba:c6:96:ff:de:e8:81:03:3c:a6:
                    75:f1:63:2d:46:ce:02:ea:6c:b6:01:c4:55:6b:01:
                    59:c2:dc:31:c2:6f:10:30:a6:88:ea:23:ef:94:4e:
                    04:c8:4f:44:bf:84:72:41:a3:e4:73:0f:eb:b1:c5:
                    2f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:53:46:80:48:21:E5:C2:48:E2:9D:FB:4F:48:3B:DF:80:52:9B:5D
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/c81007435952eeade7b4339c96a32d6c757a40db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.113.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:b4:2e:95:c3:3f:6d:03:07:64:2b:4d:d4:f3:f1:f4:70:63:
         c6:59:88:7f:64:cd:ef:8c:15:5e:25:96:b1:4a:87:59:f8:7a:
         0f:a8:2a:d8:ae:7c:f8:b2:bf:0a:db:02:fe:e3:8a:fb:55:55:
         c5:c4:0c:89:08:07:76:71:9a:ce:4a:4a:82:e2:f3:37:01:4a:
         c3:d4:77:6a:96:f5:84:50:28:6e:c4:5e:bd:34:d6:4c:5d:e3:
         f2:60:03:ae:f5:2d:7c:62:6e:5f:e0:45:78:c3:c3:50:19:3d:
         88:25:71:4c:02:a9:83:6f:04:13:06:22:91:f9:68:04:4b:ed:
         32:7c:93:f6:85:71:28:22:54:ff:d3:78:f8:20:50:ec:ab:05:
         3c:62:45:bc:51:c0:f8:7e:c7:4c:9e:79:52:51:00:ab:7c:d9:
         4f:9c:79:59:26:56:e6:59:38:af:f3:db:1d:f5:af:32:b8:82:
         99:7e:7f:c0:ce:d8:c2:61:60:82:1f:15:d7:5b:e0:7b:ed:b7:
         1f:39:45:4c:f9:5c:b6:87:6d:03:d4:50:5b:20:08:e1:31:23:
         51:75:83:26:ec:36:ee:de:9f:b2:42:11:18:e3:b6:50:aa:89:
         0e:1f:bf:2b:85:f1:47:c5:e2:6b:ae:7c:fa:4f:05:6e:e2:e8:
         85:ba:b1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:06 2024 by rpki-client on console-fra.rpki-client.org