Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/8a62a43b12a176619f6dff803fa23f489e83b787.roa
File:                     8a62a43b12a176619f6dff803fa23f489e83b787.roa (raw, json)
Hash identifier:          AH8eOCsAaX+JsNNXdNKTukNzHgxuHO8pPOr0mT2NMM0=
Subject key identifier:   2E:C7:3E:EF:26:AB:E3:FC:96:79:A8:96:3A:BE:57:98:44:AD:13:8C
Certificate issuer:       /CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Certificate serial:       073CF3
Authority key identifier: 8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/8a62a43b12a176619f6dff803fa23f489e83b787.roa
Signing time:             Mon 13 Mar 2023 20:04:47 +0000
ROA not before:           Sun 12 Mar 2023 20:04:22 +0000
ROA not after:            Thu 13 Mar 2025 20:04:22 +0000
asID:                     17072
IP address blocks:        187.251.194.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 474355 (0x73cf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
        Validity
            Not Before: Mar 12 20:04:22 2023 GMT
            Not After : Mar 13 20:04:22 2025 GMT
        Subject: CN=8a62a43b12a176619f6dff803fa23f489e83b787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3e:1c:e2:91:01:ea:8c:36:aa:c7:38:c7:09:
                    38:03:f7:98:39:bf:67:84:44:49:23:82:9a:3a:3a:
                    24:c4:05:86:8b:94:fc:8a:92:6c:fd:24:eb:e1:e2:
                    13:71:75:af:ec:f0:57:fd:07:6c:17:ba:3b:40:88:
                    ab:78:6c:d2:7f:85:2d:60:f9:76:76:af:34:be:eb:
                    8b:d9:14:54:61:4f:a0:71:ee:45:c2:06:0d:2b:ed:
                    8b:c7:1a:d9:05:5d:a8:e2:03:17:aa:d3:5a:32:8b:
                    8b:c2:98:f1:20:6d:9a:79:d9:6d:87:83:1d:e0:e7:
                    c1:6d:b1:12:58:2a:61:4c:21:e5:b5:7e:73:a2:47:
                    b8:5b:e3:c5:28:9a:eb:75:d9:86:1c:08:65:1c:c9:
                    3c:c6:33:81:31:eb:d4:15:ad:c7:32:b1:e9:ab:0c:
                    37:fe:83:ed:23:a2:7f:88:1b:3f:de:2a:69:0e:20:
                    e0:5a:3d:35:d1:15:ab:7e:52:2c:9e:2c:7d:ac:7d:
                    46:8a:ed:74:bf:94:db:e5:36:90:cc:60:03:04:cc:
                    74:73:43:01:80:d0:b2:ac:6d:e2:73:d1:92:c5:08:
                    8a:ce:ac:12:de:18:91:3b:f7:2a:76:f8:6a:e9:bc:
                    e9:28:0a:e6:67:33:17:2b:33:6d:ef:b7:67:3c:83:
                    fa:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C7:3E:EF:26:AB:E3:FC:96:79:A8:96:3A:BE:57:98:44:AD:13:8C
            X509v3 Authority Key Identifier:
                keyid:8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/8a62a43b12a176619f6dff803fa23f489e83b787.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.251.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:b8:d7:8d:28:1d:51:5e:18:ad:e4:1d:a2:02:99:12:85:fb:
         34:67:ba:53:6d:2b:d1:af:3d:05:b2:d5:4c:8a:5b:7d:00:d5:
         a8:a8:aa:d4:cd:a7:5e:d7:5a:b8:65:a4:ab:24:c1:44:24:b5:
         76:9d:90:57:ab:9e:95:52:2d:99:bd:e2:f1:c9:65:95:eb:ef:
         c1:26:76:20:3e:02:a3:d5:5f:63:2c:9f:14:a4:de:57:4e:2b:
         29:28:47:9f:b9:88:18:21:a2:5e:cd:79:98:03:6e:76:cf:30:
         4f:8a:14:c2:7e:e5:0e:7b:54:8e:b6:74:e3:6c:c1:62:d0:23:
         6e:ee:e5:77:b5:23:8f:ab:af:13:e9:fd:d4:48:f5:1c:19:f1:
         7a:f8:7b:53:03:7e:fc:62:56:67:6d:bf:74:8f:83:a7:56:01:
         e9:b9:d0:23:42:99:6f:ae:7b:a4:c3:6b:ed:4e:7a:d0:04:ef:
         2c:ce:28:4f:b8:13:b1:f5:ca:ef:70:fb:7c:6d:01:ef:8e:b9:
         8b:ee:24:73:ee:ce:89:f6:c8:a6:f2:12:8b:76:33:32:0a:47:
         16:de:40:fe:44:4f:54:26:45:d5:db:d2:b6:47:d5:5c:4f:08:
         7c:bf:84:3d:e3:91:04:84:54:4a:a9:30:d8:ea:90:d7:f6:d2:
         8c:6b:8e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:07 2024 by rpki-client on console-fra.rpki-client.org