Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/afc1ab59c16d52b2e2863c693ac4fdd244871f12.roa
File:                     afc1ab59c16d52b2e2863c693ac4fdd244871f12.roa (raw, json)
Hash identifier:          xlOBCi8hKD/MRB9QuDidLUklG+Zlm6v5taQIrTJaYuQ=
Subject key identifier:   8C:9C:C6:59:29:E8:89:4F:A0:0A:80:69:68:99:B0:BA:87:F3:3C:F5
Certificate issuer:       /CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Certificate serial:       0D92F9
Authority key identifier: 8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/afc1ab59c16d52b2e2863c693ac4fdd244871f12.roa
Signing time:             Wed 18 Oct 2023 18:42:18 +0000
ROA not before:           Tue 17 Oct 2023 18:42:18 +0000
ROA not after:            Sat 18 Oct 2025 18:42:18 +0000
asID:                     28414
IP address blocks:        187.188.110.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 889593 (0xd92f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
        Validity
            Not Before: Oct 17 18:42:18 2023 GMT
            Not After : Oct 18 18:42:18 2025 GMT
        Subject: CN=afc1ab59c16d52b2e2863c693ac4fdd244871f12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ea:34:cd:20:47:39:10:70:4e:ba:ef:d6:c1:
                    18:0e:79:90:5a:ee:32:57:d2:b6:e9:98:12:bd:20:
                    c7:54:7f:b9:f1:a7:b0:8e:ce:f5:f7:d7:b7:57:67:
                    5e:2c:af:87:19:f9:25:59:8d:29:fb:d2:3a:db:bf:
                    4c:2d:f8:6b:88:7c:a8:98:e1:0c:12:e8:7c:66:dd:
                    fb:29:8c:66:e7:a6:df:28:07:64:69:22:98:bb:da:
                    c2:66:72:35:cd:0f:5f:2a:29:f6:45:22:85:af:e8:
                    5c:6a:5e:57:c9:e3:37:53:34:22:cd:f8:db:1c:59:
                    30:23:a8:15:1c:8d:44:de:26:83:b2:e9:34:92:d5:
                    e9:1c:b3:e2:9e:d0:0c:66:43:54:8a:e7:89:c6:4b:
                    06:02:b9:53:f3:5f:9e:25:64:43:04:39:67:fb:7e:
                    c5:dd:9d:a7:81:6d:70:a2:af:17:1b:ae:e4:5a:9f:
                    f6:27:35:e4:03:9e:8a:d0:57:33:2a:42:9b:37:29:
                    73:7f:8f:66:af:46:5c:28:1c:cf:86:54:2a:f0:41:
                    0d:93:71:26:ce:97:f3:8d:a1:05:ed:56:ed:93:7b:
                    b4:c5:fa:a3:47:1e:e7:91:5a:cf:d8:7f:72:30:8b:
                    4a:11:bd:f0:78:74:58:f7:05:f1:70:e1:c4:e9:48:
                    6d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:9C:C6:59:29:E8:89:4F:A0:0A:80:69:68:99:B0:BA:87:F3:3C:F5
            X509v3 Authority Key Identifier:
                keyid:8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/afc1ab59c16d52b2e2863c693ac4fdd244871f12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.188.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:9a:39:ae:8c:10:f8:79:14:c2:1e:b9:05:39:b1:92:ab:92:
         e2:c2:af:30:05:dc:0e:2d:c5:bf:ec:9c:16:83:1b:aa:e5:d2:
         70:58:76:51:32:43:ab:af:63:e4:cc:15:78:1d:33:d5:fb:a3:
         94:07:21:02:7e:c2:65:9b:a1:3c:28:9d:de:9a:fa:23:6a:af:
         16:2c:e8:d1:66:c0:c6:e5:8a:7c:fa:bb:72:95:bc:a9:a3:d2:
         6e:86:60:87:29:e8:b8:97:26:a3:ff:b9:1b:49:3f:c2:10:ef:
         6a:ec:0e:6a:85:5a:31:ef:41:dc:c7:ba:23:f7:7f:8e:5b:fd:
         e5:01:0b:e7:44:c5:74:1e:8a:d4:e3:f7:6f:99:ef:8f:93:01:
         25:ac:68:ec:35:dd:3c:6c:c1:13:08:6c:fa:3f:dd:68:cc:b4:
         63:c2:b9:60:b1:b7:0d:9f:5a:b0:df:86:fe:6f:4c:1a:a1:c0:
         87:42:81:ab:d4:c3:aa:24:ce:20:b0:6a:0c:c9:de:1e:ff:4d:
         93:ea:d0:a9:2a:f9:13:d3:6f:5f:2d:08:3a:07:60:9d:49:ee:
         c0:86:1a:54:38:53:1e:6c:f2:b8:46:bf:22:ba:cc:e6:0c:41:
         0e:d6:06:80:d0:19:70:55:eb:f7:49:6b:bf:ad:52:63:5d:38:
         f1:09:8e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:31 2024 by rpki-client on console-fra.rpki-client.org