Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/8e56d815be77ea33d5de02600088a3eb0d32969a.roa
File:                     8e56d815be77ea33d5de02600088a3eb0d32969a.roa (raw, json)
Hash identifier:          xGqVj64mXhehGsRwn3xNfuB9KVj1PhCNjYpSW3KMSQA=
Subject key identifier:   50:08:9A:02:55:94:4A:9E:EE:3F:21:7E:FD:DA:64:44:D0:C2:99:C8
Certificate issuer:       /CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Certificate serial:       06ACB8
Authority key identifier: 8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/8e56d815be77ea33d5de02600088a3eb0d32969a.roa
Signing time:             Fri 24 Feb 2023 19:11:25 +0000
ROA not before:           Thu 16 Feb 2023 18:25:05 +0000
ROA not after:            Fri 21 Feb 2025 18:25:05 +0000
asID:                     17072
IP address blocks:        187.251.194.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 437432 (0x6acb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
        Validity
            Not Before: Feb 16 18:25:05 2023 GMT
            Not After : Feb 21 18:25:05 2025 GMT
        Subject: CN=8e56d815be77ea33d5de02600088a3eb0d32969a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e0:da:90:16:80:73:01:f8:d4:af:84:36:c9:
                    a0:ba:c6:43:61:9d:99:d1:b2:40:23:97:fe:1c:37:
                    93:cd:5c:2a:50:71:2a:2a:5f:19:10:d9:3a:9a:64:
                    d0:de:10:00:91:f0:38:52:14:ea:85:33:b7:01:50:
                    41:dc:ae:da:60:aa:ea:44:4f:46:c6:8a:d6:a2:23:
                    fa:49:2c:c6:04:b0:ed:16:2c:87:7d:cd:b0:0d:5b:
                    0b:39:47:32:2b:b1:84:08:22:a2:4e:e6:31:79:2b:
                    dd:de:04:cf:75:30:61:9f:9f:a7:11:f1:a4:1d:29:
                    82:f8:40:4a:1b:d8:5c:c6:d8:03:94:a2:7e:a1:be:
                    07:ce:a9:40:a2:81:5e:f1:44:89:67:15:b8:99:0d:
                    1c:65:f7:7a:eb:cc:c9:3d:6c:09:e9:d7:8c:5f:bd:
                    60:bf:86:c1:6e:fd:76:7d:39:84:f5:44:5c:b4:f8:
                    d2:c6:4f:a2:c1:0e:fa:d3:c1:7e:4b:e2:8e:2d:7b:
                    a2:45:35:ba:64:9f:8c:21:1d:84:25:b5:a5:c9:79:
                    93:31:43:25:db:de:9e:b0:13:ab:2c:79:d5:47:ef:
                    d4:57:c6:a7:63:cf:a1:70:4c:89:b9:a9:5e:83:c4:
                    7d:62:3e:6e:74:ff:21:4e:9c:22:60:3f:29:e6:ff:
                    7f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:08:9A:02:55:94:4A:9E:EE:3F:21:7E:FD:DA:64:44:D0:C2:99:C8
            X509v3 Authority Key Identifier:
                keyid:8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/8e56d815be77ea33d5de02600088a3eb0d32969a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.251.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:b4:1f:84:a6:b3:b8:8b:bf:29:73:79:51:5a:e0:1e:6b:ee:
         53:d0:78:f3:6c:06:d3:df:f8:68:27:17:49:87:e2:a2:1e:31:
         35:7d:ea:b5:57:94:7f:fc:fa:ff:11:e3:e7:70:37:a6:24:64:
         51:f9:df:36:89:4b:27:20:1d:e8:e0:ac:c3:f3:88:36:79:6b:
         77:1e:5f:81:34:01:4a:6f:af:b2:08:09:49:a1:bd:95:18:be:
         18:8a:f5:a1:4a:41:cc:76:9b:71:22:a3:a6:ba:41:0d:33:09:
         af:6b:87:c6:c2:7b:ea:11:1e:7b:c8:60:90:a6:21:f0:e3:06:
         1a:88:d8:88:88:83:a8:09:13:75:5a:9c:08:b1:d4:13:50:2e:
         80:49:43:5a:b3:d3:5b:34:42:0e:d3:a2:6e:bd:d0:5b:9f:f9:
         a8:d0:4b:e8:39:f6:65:85:7d:6f:e1:ed:ca:f0:d7:d2:05:2a:
         0d:6b:fc:d0:f4:e0:9f:a9:f0:60:6e:14:27:f1:2c:de:2b:6e:
         1c:03:00:bb:f0:82:5a:c3:a5:6c:0e:20:7e:7f:ea:6c:10:84:
         bd:ee:ce:10:cb:92:bc:83:87:c0:65:b2:80:78:b9:57:50:c8:
         0e:ac:5b:8a:aa:87:8c:ea:72:4b:5f:be:96:05:f7:c1:85:52:
         37:2e:40:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:07 2024 by rpki-client on console-fra.rpki-client.org