Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/c1f6e827a297060e77211b4a8e22bb42e22ea6e4.roa
File:                     c1f6e827a297060e77211b4a8e22bb42e22ea6e4.roa (raw, json)
Hash identifier:          pJqxZiru0OSzdiAdCtMI0AAfG2t9RRlb2Rj9EhoHFag=
Subject key identifier:   62:42:96:8A:B1:1A:21:CA:4E:B2:C2:1F:16:8B:8B:9E:A1:3B:BC:BB
Certificate issuer:       /CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Certificate serial:       10F5B3
Authority key identifier: 8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/c1f6e827a297060e77211b4a8e22bb42e22ea6e4.roa
Signing time:             Fri 01 Mar 2024 02:10:48 +0000
ROA not before:           Fri 01 Mar 2024 02:10:48 +0000
ROA not after:            Sun 01 Mar 2026 02:10:48 +0000
asID:                     17072
IP address blocks:        187.188.17.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1111475 (0x10f5b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
        Validity
            Not Before: Mar  1 02:10:48 2024 GMT
            Not After : Mar  1 02:10:48 2026 GMT
        Subject: CN=c1f6e827a297060e77211b4a8e22bb42e22ea6e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:54:81:a5:c6:76:7d:b6:52:3d:7d:51:10:5a:
                    aa:15:11:ab:83:0d:bf:e8:8b:30:0a:64:d6:b2:11:
                    14:82:da:e6:da:38:31:2a:c1:fa:f7:87:6b:fd:9c:
                    f8:80:fa:a1:de:49:a8:4a:12:d6:b8:ed:a9:26:13:
                    df:c5:e6:ff:fe:ca:b2:ec:d0:c5:4e:3f:c0:78:0b:
                    4f:f1:c8:85:52:86:e5:28:4d:88:74:b9:14:a7:65:
                    0a:ea:3d:b1:b9:7f:12:6a:f5:c0:33:00:6c:a4:13:
                    8a:9a:a8:13:54:0d:48:c4:f8:08:f1:ca:fa:9f:ae:
                    af:65:6d:9b:19:e0:fb:43:73:b7:36:c6:d8:7f:02:
                    31:d6:28:c1:37:91:ab:6c:34:9d:ab:26:f5:3d:2d:
                    32:dc:58:0d:ff:bb:5a:2c:6f:36:ea:d0:e7:48:3b:
                    84:b9:88:93:e7:39:44:9f:60:a0:49:5c:77:fe:d5:
                    3d:81:61:9b:fe:c5:e5:82:cd:90:d9:b1:a5:5d:a0:
                    fd:28:b0:de:79:79:00:4c:55:d8:6c:55:ac:8c:51:
                    16:94:a6:fb:12:4e:6a:23:85:4e:23:0c:06:62:87:
                    1c:46:b3:03:83:61:b5:af:80:52:a4:ab:73:0a:d8:
                    25:02:af:71:bb:39:4b:42:5c:d7:5f:db:d6:e3:1b:
                    59:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:42:96:8A:B1:1A:21:CA:4E:B2:C2:1F:16:8B:8B:9E:A1:3B:BC:BB
            X509v3 Authority Key Identifier:
                keyid:8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/c1f6e827a297060e77211b4a8e22bb42e22ea6e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.188.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:53:ce:82:59:45:85:db:ec:53:40:d4:64:5a:dc:f2:c5:99:
         0f:c2:17:a6:89:54:5f:42:97:fe:9b:4b:4d:be:5b:aa:1a:d8:
         b7:1c:ce:8f:0b:89:78:b2:88:de:6c:9d:51:5e:f4:72:dc:16:
         c5:f7:b9:4f:5e:a7:c5:2d:90:47:03:1e:21:86:3d:a1:9c:8e:
         03:ef:ed:d0:02:e0:82:4c:ad:bc:6f:76:05:a0:02:9e:44:93:
         79:f2:5c:04:b7:ef:2f:90:a2:18:ae:b9:70:ee:b5:b5:b5:02:
         65:fd:ca:5d:e9:4c:de:ff:6c:06:08:26:3f:d0:66:98:25:42:
         85:7f:b4:6d:b9:59:1f:02:bf:76:75:6e:54:54:47:b6:d3:ad:
         be:23:f6:de:05:71:98:1c:37:6f:38:56:c5:81:6e:04:ab:3b:
         fa:4f:23:e6:00:54:0e:36:6a:a7:fe:d0:ab:61:a0:4f:1a:00:
         4f:77:fb:a4:3d:2f:88:63:41:cb:2c:cb:59:27:42:6b:c3:17:
         63:b4:60:e2:ad:0b:89:9e:a4:6e:69:9c:bb:c7:80:c4:a8:45:
         af:dd:6f:19:31:e1:28:d2:6b:71:8c:ab:76:53:a5:d1:99:2f:
         a2:6c:bb:47:29:db:44:75:e1:67:c4:a6:c4:83:36:9d:04:91:
         49:e5:7d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:31 2024 by rpki-client on console-fra.rpki-client.org