Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/b6967fd0ff839cdd3299cb4fc417bbd383c7f999.roa
File:                     b6967fd0ff839cdd3299cb4fc417bbd383c7f999.roa (raw, json)
Hash identifier:          X0DSCz/+RTygd7KxADuwpxMfRUYmWq2xrFLQWF2napY=
Subject key identifier:   21:DC:44:CE:D1:99:A7:5D:30:3A:35:C0:CE:81:A1:CC:64:D7:BC:33
Certificate issuer:       /CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Certificate serial:       0707D5
Authority key identifier: 8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/b6967fd0ff839cdd3299cb4fc417bbd383c7f999.roa
Signing time:             Tue 07 Mar 2023 19:12:08 +0000
ROA not before:           Wed 15 Feb 2023 18:25:05 +0000
ROA not after:            Fri 21 Feb 2025 18:25:05 +0000
asID:                     22884
IP address blocks:        187.251.194.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 460757 (0x707d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
        Validity
            Not Before: Feb 15 18:25:05 2023 GMT
            Not After : Feb 21 18:25:05 2025 GMT
        Subject: CN=b6967fd0ff839cdd3299cb4fc417bbd383c7f999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5a:d5:7b:41:36:be:88:8f:0e:d2:de:bf:2a:
                    2f:09:09:f7:a6:65:d3:0b:a0:7b:1f:6f:ac:c0:94:
                    d6:0a:56:a8:3e:f8:ad:e8:61:9b:02:e8:34:b7:65:
                    70:fc:56:91:0e:3f:15:34:29:82:d7:51:d4:f2:be:
                    82:9b:da:ec:80:5e:af:bd:1a:4c:05:cb:54:d4:bd:
                    40:a0:55:b0:04:65:5f:ae:50:e0:c6:ae:25:6e:10:
                    e8:78:74:65:89:93:47:42:b6:49:bb:c6:e5:36:a9:
                    fd:c4:46:f3:d3:32:51:81:dd:08:50:bd:aa:b4:4f:
                    af:2e:85:25:47:22:fd:80:62:42:5e:b2:18:55:ab:
                    f4:f6:88:ee:11:b4:54:6e:de:32:1d:f2:5b:2f:2d:
                    5e:99:ac:a8:b7:3f:73:15:bc:fd:b4:d2:c1:be:d6:
                    b4:f0:5b:3d:61:c4:c8:6a:08:d4:b8:80:72:77:08:
                    cd:fb:c2:27:b2:b5:60:c3:fe:9d:16:05:61:48:d7:
                    2e:e8:97:1a:a8:92:51:e2:e3:31:37:96:ba:cd:47:
                    49:de:bd:82:f5:34:4c:d8:63:b9:de:33:6b:a7:7e:
                    90:1f:8b:6d:d7:12:0c:c5:f2:06:be:96:5d:7f:0e:
                    ad:cd:5b:bb:5f:03:3b:7a:ba:26:af:c4:0c:6d:99:
                    4c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:DC:44:CE:D1:99:A7:5D:30:3A:35:C0:CE:81:A1:CC:64:D7:BC:33
            X509v3 Authority Key Identifier:
                keyid:8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/b6967fd0ff839cdd3299cb4fc417bbd383c7f999.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.251.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:9c:ae:8c:a1:ab:df:2d:9b:1b:fd:a3:fe:1c:29:fb:37:7c:
         a4:6b:e6:99:89:b5:35:cc:a2:be:d6:39:41:f7:95:56:cf:d4:
         aa:b3:6d:15:7d:3f:a5:d5:34:a6:08:8c:e0:16:27:e1:94:42:
         ca:40:8a:64:b1:8f:df:5d:93:bb:a9:cb:d3:c2:66:4d:4e:71:
         2b:c0:d9:0b:d3:25:4e:95:34:28:b4:e6:70:0d:72:26:a8:5d:
         49:d8:f5:43:d1:ac:32:e5:02:c5:7f:ff:e1:66:0a:76:9a:e2:
         67:db:83:e1:5c:fd:f5:04:8b:48:21:48:71:81:90:39:d7:4f:
         94:d9:0e:fb:ae:04:42:15:b1:bb:42:fe:ba:04:8c:81:68:94:
         2b:27:8a:a1:52:b6:23:f0:e2:81:79:cf:f0:dd:47:cc:fd:44:
         47:88:7f:46:7f:f9:1c:bc:59:bb:91:5b:2b:1f:6a:5c:bd:8b:
         ea:e6:2d:2d:3d:4f:6d:9a:4b:a0:ef:ef:10:5b:a6:27:cc:3c:
         b1:e7:48:b1:c3:89:26:a2:d0:c4:ce:e1:b4:15:25:7f:51:9c:
         69:ad:4d:30:d3:7c:af:67:8c:01:cd:9d:58:72:c2:4c:1c:90:
         6c:66:d6:be:fc:c9:2c:b8:69:b2:6a:f0:27:fb:0c:7d:00:58:
         0f:fe:f0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:07 2024 by rpki-client on console-fra.rpki-client.org