Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/0460c5a990df94804be1dab2e3bdb5bcad69c34f.roa
File:                     0460c5a990df94804be1dab2e3bdb5bcad69c34f.roa (raw, json)
Hash identifier:          q9ouVIvh8KQwV8gUyAH0uuqMfu36QzXi3uLOVwutmT8=
Subject key identifier:   AD:19:00:22:EB:EA:BD:0F:8E:6F:46:1C:FD:A8:59:15:90:4A:7D:94
Certificate issuer:       /CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Certificate serial:       0B3242
Authority key identifier: 8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/0460c5a990df94804be1dab2e3bdb5bcad69c34f.roa
Signing time:             Wed 09 Aug 2023 18:45:00 +0000
ROA not before:           Tue 08 Aug 2023 18:44:59 +0000
ROA not after:            Sat 09 Aug 2025 18:44:59 +0000
asID:                     22884
IP address blocks:        187.251.194.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 733762 (0xb3242)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
        Validity
            Not Before: Aug  8 18:44:59 2023 GMT
            Not After : Aug  9 18:44:59 2025 GMT
        Subject: CN=0460c5a990df94804be1dab2e3bdb5bcad69c34f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:31:82:e6:39:00:23:8e:40:8a:40:cc:fc:72:
                    95:31:eb:db:f8:8f:ee:b3:d9:df:39:9a:ce:75:36:
                    8a:d5:ec:45:92:33:c8:65:eb:6a:a3:32:c8:01:9a:
                    c3:69:ca:28:28:06:59:2f:b7:cf:b1:71:b3:b4:a6:
                    e1:3b:e7:79:9e:a3:10:45:6a:30:59:4d:11:92:ba:
                    2d:dc:2f:68:97:0c:26:d3:9c:84:8c:dc:97:72:1a:
                    76:42:da:ee:61:4f:2b:ab:59:94:3d:cf:45:d3:f9:
                    ad:c4:dd:94:15:f2:50:16:6d:bb:5c:17:a2:96:15:
                    83:ef:35:87:cd:24:a3:a3:63:59:b6:a4:20:30:b9:
                    f1:29:de:f9:69:56:66:a2:78:00:e5:94:07:13:43:
                    57:a8:7d:df:49:92:cb:80:f1:f7:62:96:83:eb:b9:
                    f0:2e:d4:d8:7e:58:92:b6:c9:ad:7f:99:7a:f1:d7:
                    d5:f4:c6:aa:95:b3:b9:4c:48:2c:f1:e2:6e:ee:9c:
                    59:cf:6c:1d:e3:22:c1:24:af:da:16:27:93:33:53:
                    ec:a8:08:b0:0d:ff:e0:cf:ff:f5:25:0a:2c:ed:e3:
                    db:b6:7c:61:06:73:8d:9f:9f:60:47:65:ce:fb:f9:
                    b1:ab:e7:c4:e5:c9:c1:50:a6:da:be:b4:b7:10:b3:
                    0c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:19:00:22:EB:EA:BD:0F:8E:6F:46:1C:FD:A8:59:15:90:4A:7D:94
            X509v3 Authority Key Identifier:
                keyid:8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/0460c5a990df94804be1dab2e3bdb5bcad69c34f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.251.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:c5:33:fc:0a:89:da:5f:1b:db:82:3d:75:12:a6:b5:ea:76:
         2f:6d:19:6f:27:9e:50:8d:e9:37:9c:f4:8c:cf:8b:b2:37:43:
         70:57:c1:c8:29:f7:43:ce:a1:db:11:a2:ae:85:dc:21:ac:82:
         5c:4f:de:f8:83:62:f7:b9:eb:a6:ac:fd:45:7e:d0:32:e6:04:
         9f:cf:36:b9:14:1c:fe:f8:92:a9:b0:92:e4:e2:af:1e:64:1a:
         b4:d8:e8:e6:71:2c:87:a7:a6:aa:1d:e4:6a:b2:6c:8a:86:6e:
         46:0b:ae:45:0a:1e:6c:cd:12:ff:76:f5:7f:10:eb:c7:47:fb:
         34:57:5d:0e:6e:e4:f5:fd:43:ac:e8:29:33:cb:6e:40:15:19:
         b3:2c:a6:bc:7f:8b:82:8e:24:60:e8:bc:03:d5:0f:fb:d8:37:
         d0:e3:44:3f:2e:f9:8c:b0:64:3f:0e:31:20:88:11:17:e1:d5:
         a3:f7:ce:db:35:48:ca:8a:ec:47:3a:f7:c6:2c:aa:23:9c:03:
         5d:e1:e1:a8:94:7c:1e:4d:97:c6:13:0c:a4:25:eb:fe:0c:83:
         38:e1:ac:7c:3e:b0:6f:04:4c:04:53:5d:03:c1:97:ba:af:d4:
         c6:d9:31:58:5b:fc:8a:bb:66:68:1f:72:85:a4:cc:61:e9:9b:
         5e:7e:97:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:33 2024 by rpki-client on console-ams.rpki-client.org