Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c35a6c7f-6b17-4317-91e5-bd872fb0c19a/9ef663d8a6179ff7ac847241be239e4b1503a198.roa
File:                     9ef663d8a6179ff7ac847241be239e4b1503a198.roa (raw, json)
Hash identifier:          z8DGMPLYAvz8MVh0jV3anLT4Pbnltxyb0/UrfPxkCAo=
Subject key identifier:   A6:16:4E:C9:11:F0:83:EB:EC:6B:13:6A:1E:26:AC:5F:BD:5E:85:04
Certificate issuer:       /CN=415bbdadc090f33ec878e16eb6264e70c552a90c
Certificate serial:       24A5F7
Authority key identifier: 75:66:62:AA:0A:9F:9C:45:99:93:29:65:92:C3:1F:6A:6F:23:CB:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/415bbdadc090f33ec878e16eb6264e70c552a90c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c35a6c7f-6b17-4317-91e5-bd872fb0c19a/9ef663d8a6179ff7ac847241be239e4b1503a198.roa
Signing time:             Tue 26 Sep 2023 17:10:14 +0000
ROA not before:           Mon 25 Sep 2023 17:10:14 +0000
ROA not after:            Fri 26 Sep 2025 17:10:14 +0000
asID:                     19169
IP address blocks:        186.33.143.0/24 maxlen: 24
                          186.33.144.0/22 maxlen: 24
                          186.33.148.0/24 maxlen: 24
                          186.33.160.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2401783 (0x24a5f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=415bbdadc090f33ec878e16eb6264e70c552a90c
        Validity
            Not Before: Sep 25 17:10:14 2023 GMT
            Not After : Sep 26 17:10:14 2025 GMT
        Subject: CN=9ef663d8a6179ff7ac847241be239e4b1503a198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9d:ba:14:73:eb:6e:d4:95:27:a8:ab:8e:a4:
                    e5:7b:91:06:56:7c:32:5f:95:cd:17:2e:f6:0f:c9:
                    16:e0:1a:8b:ea:38:b3:66:be:d7:2f:6f:da:dc:4f:
                    68:bd:49:70:eb:b3:c5:c8:70:91:fe:aa:a4:b4:f6:
                    52:8e:50:3b:3c:22:79:5f:ce:56:bc:ec:b8:36:5b:
                    f7:f8:aa:7e:0d:d0:d4:36:3d:df:f9:25:d5:bb:7c:
                    f1:32:5b:7e:99:86:83:a1:eb:6a:90:c0:3a:ca:ac:
                    97:ca:70:43:ac:55:d9:88:84:68:0d:c9:01:8c:32:
                    e8:9a:fe:5e:fd:c1:5a:d8:4d:52:fa:5a:e3:05:41:
                    16:18:e1:15:d3:84:1f:64:10:c3:74:1b:6e:d1:56:
                    5e:00:f9:e5:b0:a9:02:0d:fe:e2:0f:fc:fb:94:76:
                    d6:44:e3:6c:8f:fd:05:07:db:5a:f6:41:27:f8:09:
                    c5:36:49:80:59:64:af:1a:b6:86:d3:fe:0f:00:6b:
                    dd:77:0c:bf:67:ea:b0:c6:b2:80:f6:e1:5b:ba:27:
                    be:1a:73:c9:06:28:ed:c0:b6:12:21:46:14:6d:f7:
                    64:19:a0:44:19:a7:92:3c:04:24:48:35:d8:23:b0:
                    11:81:06:0c:1b:26:ab:53:e4:3f:14:81:20:82:56:
                    1d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:16:4E:C9:11:F0:83:EB:EC:6B:13:6A:1E:26:AC:5F:BD:5E:85:04
            X509v3 Authority Key Identifier:
                keyid:75:66:62:AA:0A:9F:9C:45:99:93:29:65:92:C3:1F:6A:6F:23:CB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/415bbdadc090f33ec878e16eb6264e70c552a90c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c35a6c7f-6b17-4317-91e5-bd872fb0c19a/9ef663d8a6179ff7ac847241be239e4b1503a198.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c35a6c7f-6b17-4317-91e5-bd872fb0c19a/415bbdadc090f33ec878e16eb6264e70c552a90c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.33.143.0-186.33.148.255
                  186.33.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         14:be:91:24:15:a5:21:60:8a:8a:3f:d8:cc:ca:e6:7b:bd:4c:
         2b:20:9b:d2:36:a0:61:45:9e:1d:c6:db:18:56:d3:00:f5:61:
         cd:d9:02:52:7b:c9:d1:4d:01:63:67:19:96:39:14:f9:60:de:
         4c:5c:00:79:b8:13:6f:b3:72:34:be:25:4e:ab:dc:a1:37:6a:
         6c:d3:3f:df:65:92:c6:92:19:23:5a:28:a2:69:5d:e3:a7:52:
         6a:3d:cb:d5:f7:40:7b:ea:0d:57:71:1b:29:53:9d:c2:a0:3d:
         f3:f5:fb:ed:c2:b2:f3:46:95:a8:a1:ae:5f:7e:ad:21:c1:32:
         7c:3a:ae:4b:3a:b9:10:02:2b:9a:25:a7:26:ed:44:a2:4f:fa:
         a1:64:12:6b:20:bf:de:f3:5a:5b:fb:87:65:72:1f:ca:7c:42:
         a8:24:40:c6:40:53:a5:55:a8:1a:81:a1:5a:93:8b:c7:44:e2:
         b1:59:39:b5:89:08:1d:b1:8b:d3:b2:52:98:0f:67:8d:b9:5a:
         0e:b3:3a:8d:64:7f:ae:bb:7c:73:ab:d0:d9:db:f5:ff:64:2d:
         75:57:a9:b2:5a:6f:35:95:f5:7b:8c:e7:09:e0:e6:e7:4c:fb:
         f2:d5:1e:b2:72:9c:67:b5:64:a7:63:f3:ca:f9:7e:a4:30:c1:
         e2:69:36:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:47 2024 by rpki-client on console-ams.rpki-client.org