Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/bcc647776c771890537d3d24097cd30c7af88c25.roa
File:                     bcc647776c771890537d3d24097cd30c7af88c25.roa (raw, json)
Hash identifier:          8iipiTBmWqyRu8qpgzOHX5MF0PRLxw3Q+D/otDYt5/g=
Subject key identifier:   18:07:18:B4:4E:B2:2E:1F:07:DC:07:E5:1A:08:10:AB:51:E2:78:AC
Certificate issuer:       /CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Certificate serial:       110F8C
Authority key identifier: 8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/bcc647776c771890537d3d24097cd30c7af88c25.roa
Signing time:             Tue 05 Mar 2024 01:28:47 +0000
ROA not before:           Tue 05 Mar 2024 01:28:47 +0000
ROA not after:            Thu 05 Mar 2026 01:28:47 +0000
asID:                     17072
IP address blocks:        187.188.33.0/24 maxlen: 24
                          187.188.34.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1118092 (0x110f8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
        Validity
            Not Before: Mar  5 01:28:47 2024 GMT
            Not After : Mar  5 01:28:47 2026 GMT
        Subject: CN=bcc647776c771890537d3d24097cd30c7af88c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f7:79:f4:af:9d:9d:d5:4e:4f:c1:b4:ca:2f:
                    9c:e0:15:36:ce:90:19:67:30:a9:5e:70:fd:e1:db:
                    61:b5:f3:f8:08:dc:4d:0e:83:16:e7:9a:49:a5:5c:
                    af:d0:65:50:78:02:f1:96:c0:4a:93:0e:23:a2:1e:
                    1e:0a:a0:b5:5e:51:34:84:00:9b:7d:ff:ee:8a:9b:
                    31:02:16:af:a5:f1:e0:21:64:89:f9:52:27:8a:93:
                    c6:5a:81:71:1b:74:2d:04:9f:36:e9:7d:5e:3a:20:
                    ae:42:3c:27:a6:39:c2:f9:03:c4:7d:fb:44:02:99:
                    b1:c3:94:0d:d7:18:dc:a2:f8:3d:a4:14:02:6e:70:
                    38:61:9b:c2:30:db:ae:b4:e2:30:ca:ae:3a:a4:87:
                    4c:ba:55:c3:b9:c8:7c:8a:71:8c:3d:8d:83:9e:52:
                    30:81:da:39:b0:7d:d3:44:42:77:6c:7f:27:f6:c6:
                    ac:98:b4:f7:32:a4:14:b6:a6:6c:26:09:78:c2:6b:
                    67:1a:30:21:61:c6:ca:85:e8:da:2f:c4:d4:5f:18:
                    83:e1:a6:17:47:bb:53:7a:b9:af:21:fa:96:a4:70:
                    cd:00:62:c9:e8:ec:ef:60:96:c1:26:5b:18:64:59:
                    70:fd:ee:cb:a3:12:e6:a6:5f:87:e2:cf:93:73:20:
                    9a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:07:18:B4:4E:B2:2E:1F:07:DC:07:E5:1A:08:10:AB:51:E2:78:AC
            X509v3 Authority Key Identifier:
                keyid:8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/bcc647776c771890537d3d24097cd30c7af88c25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.188.33.0-187.188.34.255

    Signature Algorithm: sha256WithRSAEncryption
         79:95:d9:01:ef:af:32:1d:c9:09:87:42:3e:0d:12:36:ec:39:
         64:fe:2c:46:1e:9b:2a:15:78:6c:a0:d0:43:4d:9f:06:59:00:
         46:d4:9a:bc:d3:b2:9c:9f:86:f4:74:f5:6e:2a:82:10:b0:05:
         da:15:89:5f:96:52:38:b5:7d:aa:d1:45:51:b0:a2:f1:af:b3:
         2b:4b:9b:08:49:82:6c:74:42:22:16:12:0f:88:f1:0c:70:be:
         66:62:7c:65:9b:7d:35:d3:63:83:c5:a9:82:05:ed:aa:04:fe:
         0a:3f:a2:f0:0f:15:a5:7c:85:15:57:21:96:84:aa:52:66:87:
         f1:38:ce:9e:f1:df:b5:fa:e9:a6:de:b6:fe:7a:4e:af:b6:ee:
         f0:3a:98:57:e9:21:c1:75:98:cf:a2:dc:a6:38:50:e1:2c:cb:
         eb:eb:74:25:d1:35:b9:5d:42:bb:17:3b:b6:2c:60:22:22:b8:
         47:be:c6:82:fa:13:63:36:12:83:40:96:f6:ea:e5:c5:30:1d:
         7b:3c:68:3a:4c:c4:08:3c:0d:86:1f:c7:96:48:2c:20:c1:e3:
         46:e6:b3:00:00:5a:c6:83:a3:ce:5d:5b:50:ce:2f:82:9b:07:
         d1:f5:2a:41:82:11:5b:59:2b:61:8e:e0:58:c4:82:b9:c6:f9:
         09:d5:d3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:31 2024 by rpki-client on console-fra.rpki-client.org