Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/d39882afd476933133b83b0dc3a0a2dc48d8c709.roa
File:                     d39882afd476933133b83b0dc3a0a2dc48d8c709.roa (raw, json)
Hash identifier:          ldZuXUzNEJsu2fPjyj8Ii89jk/XebbgEovySgrIjdqQ=
Subject key identifier:   CF:9E:09:AF:0E:6F:CE:78:08:70:AD:16:BE:EF:08:A2:DD:C3:F4:CD
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       1D7A74
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/d39882afd476933133b83b0dc3a0a2dc48d8c709.roa
Signing time:             Mon 03 Oct 2022 14:22:43 +0000
ROA not before:           Tue 31 May 2022 03:00:00 +0000
ROA not after:            Fri 31 May 2024 03:00:00 +0000
asID:                     263804
IP address blocks:        186.112.128.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1931892 (0x1d7a74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: May 31 03:00:00 2022 GMT
            Not After : May 31 03:00:00 2024 GMT
        Subject: CN=d39882afd476933133b83b0dc3a0a2dc48d8c709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:85:29:be:78:95:15:c6:01:e2:a9:32:9b:99:
                    63:93:95:c0:fe:d8:9f:d7:bd:aa:9c:f7:98:f8:e7:
                    02:83:6c:af:ec:5f:4e:4d:de:4a:8e:4f:fe:b0:41:
                    74:9f:b5:8d:2a:16:36:27:9a:f9:1a:a2:8a:a6:33:
                    e5:04:f2:3e:14:2b:1b:70:d1:43:e0:75:48:e7:4f:
                    ba:f2:18:02:17:5a:94:99:d4:5f:61:ff:00:f6:26:
                    31:ae:22:00:86:22:6c:07:cd:dc:71:70:0c:03:8c:
                    de:7e:61:f2:47:ab:1e:45:83:d3:b5:6d:48:cf:dd:
                    d8:8d:71:10:ab:5d:30:e0:f9:d6:7a:7c:69:d1:5b:
                    cc:81:9a:87:26:c9:0c:a7:96:2b:1f:5e:af:37:6d:
                    be:e8:0b:8c:5a:0f:04:1f:95:4e:b4:5e:f7:03:7d:
                    ce:db:8a:5c:78:b8:ac:5f:0f:f4:9a:42:54:bf:0b:
                    fd:67:33:37:66:73:67:43:e2:65:74:fc:2a:62:70:
                    82:44:a0:69:4f:1d:72:4a:bb:1f:90:fa:b4:6f:f9:
                    32:0e:9c:eb:65:46:49:cb:f0:67:88:f9:07:9b:95:
                    2b:92:a8:7c:87:85:39:2d:bb:24:45:9b:bb:58:94:
                    7a:ee:3c:7b:5b:2f:27:39:b3:79:91:d8:09:59:2e:
                    80:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:9E:09:AF:0E:6F:CE:78:08:70:AD:16:BE:EF:08:A2:DD:C3:F4:CD
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/d39882afd476933133b83b0dc3a0a2dc48d8c709.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.112.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:73:99:94:d7:be:7c:d9:33:4d:19:5d:53:9a:88:28:a9:6d:
         4d:2d:d7:1b:f7:74:4a:91:7b:48:8e:96:46:1a:2b:4a:ac:70:
         9c:3b:82:28:a9:b4:d1:12:d7:ab:66:f7:e9:95:66:1c:dd:9b:
         04:0e:ec:3f:81:16:db:9b:a0:da:43:76:3a:9f:f5:93:09:ae:
         4b:e9:90:07:c9:e3:58:95:18:f4:73:e7:f3:34:2e:9e:b3:c9:
         e8:ac:9c:fd:6f:da:00:ff:0d:c9:d8:1a:08:07:a2:fd:9b:3c:
         a3:81:3f:65:1f:31:a9:dc:a0:bb:fd:09:ea:c7:27:df:09:5c:
         0a:59:f2:13:99:25:af:3e:92:13:c8:cc:b0:73:a0:9e:c0:29:
         4e:94:ec:64:61:bc:0e:83:3e:5a:94:66:72:26:e0:ab:3e:fd:
         9d:ea:36:70:50:80:9e:04:1b:78:48:b4:1d:7a:38:88:c3:71:
         4e:02:d2:aa:09:0e:2f:56:b6:28:d9:e0:42:2a:f8:09:bd:8c:
         d0:3f:ba:3b:47:53:61:b1:9b:bb:16:08:03:be:7b:84:ce:53:
         36:0a:85:b8:92:6e:8b:15:33:28:52:73:4d:9e:c4:7d:53:08:
         24:ae:bf:97:cd:ee:87:7f:1a:8e:73:5f:a7:37:e1:a7:a0:38:
         a6:5d:d1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-ams.rpki-client.org