Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c35a6c7f-6b17-4317-91e5-bd872fb0c19a/6cc74d0249585181e3b673b0c9b56ffdae263e00.roa
File:                     6cc74d0249585181e3b673b0c9b56ffdae263e00.roa (raw, json)
Hash identifier:          65fn8OKjF/9q5cMTd4yvKSnjTUBqTPE7tNcNVJOp4F4=
Subject key identifier:   1A:17:02:0E:DA:DA:50:94:5D:2B:EB:7D:22:4A:C7:E6:CB:02:2B:63
Certificate issuer:       /CN=415bbdadc090f33ec878e16eb6264e70c552a90c
Certificate serial:       0DC4F2
Authority key identifier: 75:66:62:AA:0A:9F:9C:45:99:93:29:65:92:C3:1F:6A:6F:23:CB:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/415bbdadc090f33ec878e16eb6264e70c552a90c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c35a6c7f-6b17-4317-91e5-bd872fb0c19a/6cc74d0249585181e3b673b0c9b56ffdae263e00.roa
Signing time:             Wed 24 Mar 2021 14:41:15 +0000
ROA not before:           Wed 24 Mar 2021 14:41:13 +0000
ROA not after:            Tue 24 Mar 2026 14:41:13 +0000
asID:                     27947
IP address blocks:        186.33.136.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 902386 (0xdc4f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=415bbdadc090f33ec878e16eb6264e70c552a90c
        Validity
            Not Before: Mar 24 14:41:13 2021 GMT
            Not After : Mar 24 14:41:13 2026 GMT
        Subject: CN=6cc74d0249585181e3b673b0c9b56ffdae263e00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:78:ca:fe:7b:b0:e6:39:d5:03:f8:c7:46:c3:
                    e4:4d:33:c4:8e:6b:ed:8b:3a:8e:dc:af:7f:31:cc:
                    ef:d8:5e:0e:2a:ae:cc:72:f2:8b:8f:fc:88:78:dc:
                    d3:58:6a:da:d4:73:ea:86:23:cc:ea:73:99:68:e7:
                    b8:64:9d:09:cb:e7:fb:89:11:67:6a:d3:e3:7f:59:
                    1d:40:1a:c8:33:82:0f:4b:b9:57:7e:04:35:7d:80:
                    59:09:8c:dc:9b:d1:90:a6:42:4a:fe:20:de:c7:2c:
                    94:2b:b7:36:e8:6f:98:a0:8b:66:8d:a1:e6:7a:ae:
                    f3:27:fb:7d:cb:44:65:33:72:ad:64:f5:ba:fa:e6:
                    78:26:5b:c2:3c:89:5f:87:8f:44:3f:ff:b3:e9:e4:
                    1a:9e:ca:32:f7:3c:93:7f:45:a4:ad:93:64:7b:77:
                    e4:4e:8c:21:ef:90:65:58:ce:d0:4f:d4:04:a3:25:
                    77:2c:81:a2:ea:48:a7:d4:b8:60:77:fb:4f:b7:87:
                    d2:eb:34:1a:d7:8c:bf:56:4a:84:30:9a:e5:74:88:
                    00:f3:6a:ec:22:9d:f6:f6:da:b6:35:21:42:dd:d5:
                    39:cd:59:3a:de:67:44:b0:af:e0:ff:a1:ff:d1:3c:
                    a6:37:25:97:34:ce:a9:e2:8c:6b:1c:69:e0:b6:b6:
                    64:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:17:02:0E:DA:DA:50:94:5D:2B:EB:7D:22:4A:C7:E6:CB:02:2B:63
            X509v3 Authority Key Identifier:
                keyid:75:66:62:AA:0A:9F:9C:45:99:93:29:65:92:C3:1F:6A:6F:23:CB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/415bbdadc090f33ec878e16eb6264e70c552a90c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c35a6c7f-6b17-4317-91e5-bd872fb0c19a/6cc74d0249585181e3b673b0c9b56ffdae263e00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c35a6c7f-6b17-4317-91e5-bd872fb0c19a/415bbdadc090f33ec878e16eb6264e70c552a90c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.33.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:49:b7:82:5d:e5:5e:c7:43:a1:87:ef:5d:ce:f9:16:5f:b5:
         8e:56:79:98:f5:39:32:e9:78:c1:e2:6d:59:51:6a:60:63:9f:
         fd:c3:6a:d3:13:52:81:e8:15:bb:40:3a:15:5d:63:ec:04:e0:
         03:52:17:bb:24:2f:01:08:f4:15:f7:dc:40:59:24:c9:44:17:
         bf:22:11:6c:d5:23:61:64:8c:e3:27:fd:31:1d:d3:35:be:84:
         73:99:6d:fb:c2:6f:f9:74:34:53:e5:65:3c:bd:92:9a:47:8c:
         c3:e3:57:b4:dc:7d:ed:b4:90:82:12:6d:53:0e:da:8a:11:3a:
         eb:24:dc:d2:c3:c7:12:b7:2b:31:92:35:20:bf:70:47:fa:a4:
         9f:4d:19:3c:2f:c0:15:09:34:1f:77:57:10:3d:6b:94:a4:ed:
         86:d0:8a:89:04:ee:42:2f:26:e3:fb:31:b5:55:76:8d:e0:db:
         9f:73:6a:c4:9e:70:cd:4e:b9:4d:35:14:94:6b:06:93:d7:f9:
         74:33:26:48:85:5e:7b:c9:76:7c:33:94:89:84:ad:c8:8e:77:
         92:d9:ef:e5:6e:dd:66:59:ca:46:2b:a2:87:3b:8c:c2:07:8a:
         02:eb:8c:3f:f7:56:3a:95:be:a7:fb:10:bb:b3:57:35:34:7a:
         7b:c3:ad:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:06 2024 by rpki-client on console-fra.rpki-client.org