Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/f2bca539f3f30646533627e39003debae3d56dda.roa
File:                     f2bca539f3f30646533627e39003debae3d56dda.roa (raw, json)
Hash identifier:          gwvJOh1KZwSlwN57tryDvwKYJpfwKa2iu/IhYyTBo8w=
Subject key identifier:   1D:3F:2C:B2:F1:93:81:F0:52:A7:83:E8:49:11:D9:B6:B8:F1:E7:27
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       2885F5
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/f2bca539f3f30646533627e39003debae3d56dda.roa
Signing time:             Fri 03 Nov 2023 14:18:33 +0000
ROA not before:           Fri 03 Nov 2023 14:18:33 +0000
ROA not after:            Mon 03 Nov 2025 14:18:33 +0000
asID:                     3816
IP address blocks:        186.103.64.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2655733 (0x2885f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Nov  3 14:18:33 2023 GMT
            Not After : Nov  3 14:18:33 2025 GMT
        Subject: CN=f2bca539f3f30646533627e39003debae3d56dda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ba:35:81:37:e4:71:20:68:6c:d5:98:2c:9b:
                    ff:7a:fb:74:8f:34:23:df:34:a2:30:81:f8:e6:d5:
                    c6:f9:2b:2f:4b:73:34:c9:fd:11:95:4e:9f:19:0b:
                    6b:17:6a:de:96:15:77:ba:e1:0e:9d:8e:39:b2:5c:
                    2f:d2:dc:25:b8:15:c3:87:05:47:9d:bc:4c:ee:8e:
                    2b:4e:6b:91:31:3a:a8:04:15:59:ff:20:ae:89:6c:
                    17:b9:8c:f6:b5:92:22:7b:d3:41:b3:38:fd:59:79:
                    8c:3b:f3:0c:15:18:18:cf:64:88:12:c4:9e:ab:b9:
                    e5:7f:b3:e2:e3:c4:52:d8:49:07:11:2c:6c:45:68:
                    4c:ae:d2:d4:59:30:fa:85:c5:67:5a:cf:e3:1a:c9:
                    fa:21:2c:1d:52:a7:c9:fe:11:ca:fe:55:2c:cf:4b:
                    84:dc:1d:7c:c7:56:82:9a:56:be:9a:2c:0f:cc:5d:
                    3e:4c:c7:19:49:09:63:3f:d4:43:97:22:38:ce:8c:
                    07:69:f5:24:fc:00:9b:84:e3:f2:bb:16:66:21:38:
                    6c:ab:9a:38:78:3c:54:0f:1a:6a:a4:22:bc:2a:da:
                    a5:58:28:f9:34:e0:27:8d:46:45:a6:c7:e8:d2:0d:
                    e2:1f:31:8e:34:f7:6f:f4:7a:5c:79:e1:d7:5b:d1:
                    d2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:3F:2C:B2:F1:93:81:F0:52:A7:83:E8:49:11:D9:B6:B8:F1:E7:27
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/f2bca539f3f30646533627e39003debae3d56dda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.103.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1f:65:5a:c0:d2:6b:22:ea:76:bf:32:3f:f2:47:54:04:3e:c2:
         90:08:16:0e:aa:01:c1:32:5a:8a:bc:05:bc:a1:8b:91:cb:9f:
         79:df:96:72:6c:00:ba:0b:97:f0:5e:73:b7:51:75:fc:71:0e:
         ad:32:d8:6c:f4:b2:4c:eb:00:02:2c:59:f2:ff:76:60:69:ba:
         0e:5c:b4:79:18:11:d5:e0:14:b5:8b:c6:fa:83:10:9c:35:a5:
         95:71:26:0c:08:c4:ea:a1:08:09:15:a8:04:6f:16:32:21:c0:
         15:04:95:6d:72:ec:e8:ca:3b:22:3f:7f:e4:24:70:c0:80:6e:
         02:4f:8c:3a:c0:a3:32:bb:c2:fc:cc:34:f8:c3:dd:4e:fb:66:
         0a:01:b7:38:8b:bf:0f:17:f8:f0:0b:09:ae:23:bb:8d:f2:45:
         01:67:02:a4:e8:20:8b:c2:95:a1:d3:cf:e1:bf:53:51:95:93:
         29:ee:0c:8a:4f:dc:ae:ff:57:f4:f8:94:20:c9:6a:23:ad:17:
         9c:2a:a3:2b:83:ed:79:7e:31:10:d2:c7:c5:a7:19:ea:0c:d7:
         4d:a7:b6:60:41:63:8b:80:0e:88:c9:60:69:dd:1f:48:5c:b7:
         c8:c9:7e:d8:4d:4e:f4:b9:ce:a7:b6:25:32:39:43:81:f2:09:
         27:56:4d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:47 2024 by rpki-client on console-ams.rpki-client.org