Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/5912c3659eb65b24f13541bd51859e14a428ec85.roa
File:                     5912c3659eb65b24f13541bd51859e14a428ec85.roa (raw, json)
Hash identifier:          AEnTvUMI7ZfYkMBxpZaG1YbZ7dw/h/NqoqYH1MXvxpo=
Subject key identifier:   6E:7C:E7:BF:78:D3:B3:28:58:DB:65:CB:77:9F:A4:86:F4:B5:DA:9A
Certificate issuer:       /CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Certificate serial:       0DA10D
Authority key identifier: 8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/5912c3659eb65b24f13541bd51859e14a428ec85.roa
Signing time:             Wed 18 Oct 2023 19:57:13 +0000
ROA not before:           Tue 17 Oct 2023 19:57:13 +0000
ROA not after:            Sat 18 Oct 2025 19:57:13 +0000
asID:                     22884
IP address blocks:        187.251.197.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 893197 (0xda10d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
        Validity
            Not Before: Oct 17 19:57:13 2023 GMT
            Not After : Oct 18 19:57:13 2025 GMT
        Subject: CN=5912c3659eb65b24f13541bd51859e14a428ec85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:bf:ea:2c:c8:77:82:e2:b8:5e:aa:ac:4b:f3:
                    90:c4:06:b8:59:65:f7:92:94:f5:01:54:ae:8d:df:
                    43:f5:23:8c:b5:96:7a:1d:95:85:e8:76:95:b1:25:
                    75:75:38:cc:f3:d6:0c:4f:02:da:bc:26:30:af:8c:
                    73:94:17:38:79:c6:4d:2d:ca:d6:54:1f:94:7a:d9:
                    e8:f9:a6:bd:33:b3:4a:c3:1c:b3:8b:57:93:d8:28:
                    3d:55:86:82:3a:05:98:ab:bc:55:46:b4:a9:e7:27:
                    51:3d:58:89:82:06:ef:25:db:57:5c:7d:5f:35:86:
                    e1:1c:e5:91:b7:9e:7d:ca:27:f4:eb:de:d9:f4:9f:
                    d8:0f:18:86:dc:85:df:06:53:6f:50:9c:4d:5d:f1:
                    e3:a9:58:d4:24:bc:c4:09:8e:2c:6c:81:84:28:d7:
                    50:b0:df:bc:94:8e:17:0b:d8:f5:30:f0:61:56:08:
                    10:b5:b7:82:a9:81:ff:14:03:db:db:fa:1c:04:1e:
                    07:76:16:03:5a:37:9e:4b:a7:2e:e6:e0:d8:4f:dc:
                    87:a0:98:fc:d4:14:59:15:30:a1:4d:8b:95:78:5c:
                    dd:a3:05:f7:41:66:81:71:63:b6:39:4d:2c:52:93:
                    0c:87:ee:fe:e8:01:cc:ef:c9:99:48:bf:37:32:5e:
                    f8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:7C:E7:BF:78:D3:B3:28:58:DB:65:CB:77:9F:A4:86:F4:B5:DA:9A
            X509v3 Authority Key Identifier:
                keyid:8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/5912c3659eb65b24f13541bd51859e14a428ec85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.251.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:24:a9:88:1e:0e:08:68:1e:b5:75:d2:a9:c1:cb:5d:4d:d4:
         76:8a:22:a7:ea:64:54:f1:79:4d:df:55:b8:51:14:7b:e2:6c:
         21:2e:21:0f:d2:19:43:74:c2:7c:b0:02:cb:9c:4e:62:f2:6a:
         54:e2:59:9c:56:4d:0a:c7:45:be:98:ed:f6:dc:c7:78:98:89:
         9b:7b:97:a4:4d:5e:ef:2d:96:0c:a6:2b:0b:bc:76:20:0c:fc:
         0f:b9:46:c2:a9:dd:2e:43:7d:55:69:fd:70:2f:22:9a:36:55:
         f5:bb:45:d0:41:82:4f:3c:18:84:d0:dc:f6:80:94:0f:97:c9:
         3d:2e:6a:4e:0a:87:a6:84:d7:d6:ba:4a:e5:47:79:1e:e4:ac:
         23:98:05:66:82:dc:67:b7:aa:5a:4e:68:0f:8b:59:83:eb:a5:
         62:3d:78:46:dd:b2:48:48:43:62:54:bc:5f:d3:19:a0:1a:00:
         34:8f:d5:5c:d6:cc:c2:82:c2:86:30:45:92:fd:86:5e:6a:47:
         bf:42:05:89:7f:4b:e1:cb:51:a7:b0:80:55:cd:3d:e5:68:e7:
         98:a5:c4:75:2d:3f:f5:c6:a4:af:f6:2a:95:ef:c4:d7:c9:0b:
         46:f0:32:47:f5:18:c8:d8:d0:74:61:e5:b9:22:89:60:8b:77:
         44:d5:8d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:48 2024 by rpki-client on console-ams.rpki-client.org