Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c35a6c7f-6b17-4317-91e5-bd872fb0c19a/b3916ef18cedec0d57ddc8b8f7d6f13c7f18a9e9.roa
File:                     b3916ef18cedec0d57ddc8b8f7d6f13c7f18a9e9.roa (raw, json)
Hash identifier:          Y53OB1UuErUIwi6yWzoOVCFuuq9mUxljFiSdJGvBnuE=
Subject key identifier:   B6:AA:C4:C4:B9:2C:F7:4D:8B:2D:6E:00:17:90:BA:C4:7D:91:6C:89
Certificate issuer:       /CN=415bbdadc090f33ec878e16eb6264e70c552a90c
Certificate serial:       0DB31A
Authority key identifier: 75:66:62:AA:0A:9F:9C:45:99:93:29:65:92:C3:1F:6A:6F:23:CB:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/415bbdadc090f33ec878e16eb6264e70c552a90c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c35a6c7f-6b17-4317-91e5-bd872fb0c19a/b3916ef18cedec0d57ddc8b8f7d6f13c7f18a9e9.roa
Signing time:             Wed 24 Mar 2021 14:41:14 +0000
ROA not before:           Wed 24 Mar 2021 14:41:13 +0000
ROA not after:            Tue 24 Mar 2026 14:41:13 +0000
asID:                     27947
IP address blocks:        186.33.128.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 897818 (0xdb31a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=415bbdadc090f33ec878e16eb6264e70c552a90c
        Validity
            Not Before: Mar 24 14:41:13 2021 GMT
            Not After : Mar 24 14:41:13 2026 GMT
        Subject: CN=b3916ef18cedec0d57ddc8b8f7d6f13c7f18a9e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b8:10:ee:0c:8c:54:ee:6b:c6:50:16:95:61:
                    46:b8:56:d5:5d:ee:50:6a:e2:02:0a:26:61:7a:a7:
                    08:87:25:4e:2b:16:47:b0:12:29:24:48:39:50:5b:
                    10:34:a0:04:54:fd:70:33:d4:80:e2:91:02:34:25:
                    b2:7d:d8:a9:32:fa:23:be:52:5b:18:82:2e:fe:c9:
                    ec:bd:3f:27:ee:01:50:c3:6a:56:a4:4b:8f:f9:de:
                    06:85:8a:b0:98:f6:5c:34:0f:b0:ed:77:3a:91:46:
                    71:24:8a:94:49:be:e5:31:b6:22:88:24:ee:e1:b8:
                    a7:8a:dd:31:a2:7d:8b:2a:6c:09:86:06:e8:ab:73:
                    a9:15:97:bf:40:05:04:b3:03:ae:f7:fe:51:90:34:
                    6b:dd:d6:86:7c:7e:5d:59:a2:05:9d:b4:3a:f1:01:
                    cb:6d:83:48:ce:5b:aa:15:9e:fe:bd:a8:f7:e4:c6:
                    e8:95:c8:3f:54:c4:7f:69:4d:61:8a:1c:56:38:9b:
                    38:f3:c6:df:06:b9:51:25:91:bc:26:dd:96:01:2c:
                    2b:c6:27:91:e1:6e:68:b1:18:fa:a7:52:c5:06:d6:
                    eb:f4:c6:49:01:e0:ff:67:fa:18:c2:e3:b1:4c:14:
                    0e:44:9e:aa:73:1c:ef:6a:e5:c1:3d:78:e5:38:ca:
                    a8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:AA:C4:C4:B9:2C:F7:4D:8B:2D:6E:00:17:90:BA:C4:7D:91:6C:89
            X509v3 Authority Key Identifier:
                keyid:75:66:62:AA:0A:9F:9C:45:99:93:29:65:92:C3:1F:6A:6F:23:CB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/415bbdadc090f33ec878e16eb6264e70c552a90c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c35a6c7f-6b17-4317-91e5-bd872fb0c19a/b3916ef18cedec0d57ddc8b8f7d6f13c7f18a9e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c35a6c7f-6b17-4317-91e5-bd872fb0c19a/415bbdadc090f33ec878e16eb6264e70c552a90c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.33.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         52:54:f5:cf:e5:54:0c:b0:f5:63:fb:e9:e7:71:b8:db:07:d1:
         5c:3b:bd:a8:a5:26:d1:64:c9:ab:21:2f:da:99:94:e3:d6:e3:
         94:8f:5f:78:ea:3f:b9:67:bb:cb:3e:14:54:cf:da:7a:62:ac:
         57:ac:90:5a:b9:7a:1f:37:5d:07:e4:21:7d:4a:7f:d9:01:2e:
         df:86:27:01:14:c3:df:fe:1f:e9:6e:e6:56:12:d3:f4:4c:8f:
         79:f7:12:ed:a7:5e:e1:90:ce:ff:49:99:69:9f:74:96:21:c0:
         03:28:9b:d3:e2:29:c6:8f:3d:2a:62:ea:63:2d:75:bd:ec:67:
         09:70:c9:a4:e2:6f:40:49:e1:e6:b8:9d:39:e1:c9:ba:6d:0c:
         3d:06:d4:a0:bb:84:ce:3f:9c:d4:a6:05:76:c4:6e:57:6f:ce:
         d2:ed:f5:6b:fe:b4:44:6f:45:47:3c:8b:d0:57:28:23:2b:e1:
         15:e4:bc:1b:35:41:1f:8c:2a:fa:5d:4d:38:93:48:ad:f1:93:
         c6:df:6f:7a:c1:26:31:e1:b1:00:23:67:a8:e1:0e:40:bc:3e:
         34:8a:99:df:59:ea:fc:65:c3:17:bb:a7:0a:8c:0c:ec:e6:dd:
         bc:b4:27:5e:9e:dd:56:c7:68:2a:e8:13:02:fb:f2:20:d4:ef:
         3c:d7:25:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:06 2024 by rpki-client on console-fra.rpki-client.org