Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/cfeb96970b72781e48bf341da7b433eb0352cca1.roa
File:                     cfeb96970b72781e48bf341da7b433eb0352cca1.roa (raw, json)
Hash identifier:          lzzpZcVsvckBNQ9G8ncvnR4/kTK2/6kH+cXn2h5qCvs=
Subject key identifier:   EF:41:35:1D:B6:F2:6E:C9:48:E6:B5:53:2C:0D:20:01:42:8E:6A:1A
Certificate issuer:       /CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Certificate serial:       0DA2B8
Authority key identifier: 8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/cfeb96970b72781e48bf341da7b433eb0352cca1.roa
Signing time:             Wed 18 Oct 2023 19:57:17 +0000
ROA not before:           Tue 17 Oct 2023 19:57:13 +0000
ROA not after:            Sat 18 Oct 2025 19:57:13 +0000
asID:                     28414
IP address blocks:        187.251.197.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 893624 (0xda2b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
        Validity
            Not Before: Oct 17 19:57:13 2023 GMT
            Not After : Oct 18 19:57:13 2025 GMT
        Subject: CN=cfeb96970b72781e48bf341da7b433eb0352cca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8f:24:56:2e:ed:32:3c:d7:00:72:16:be:99:
                    f6:ff:b1:8e:f0:24:f5:65:7e:e8:72:b0:2f:78:a1:
                    9f:99:20:16:be:ff:aa:84:80:1a:07:7f:18:0a:a2:
                    db:24:00:fd:ad:0c:f0:cc:94:70:7f:c6:af:50:7f:
                    8d:71:33:a2:26:aa:84:e3:c3:21:1b:7f:19:ca:39:
                    51:77:7e:8e:84:c5:46:a9:cc:00:1c:c1:32:63:de:
                    39:ee:b1:87:5e:03:87:98:5f:c8:53:f9:14:ff:a1:
                    6a:54:a7:60:a3:ea:f3:fd:84:28:d7:c3:0f:d0:76:
                    32:64:22:9b:50:97:c9:1d:f0:13:56:c0:2d:24:47:
                    58:9e:ce:95:88:fe:8c:85:36:ab:77:34:7e:db:c8:
                    f7:76:d5:ec:b5:80:78:eb:af:86:0e:dd:a5:45:01:
                    30:19:89:00:34:af:76:f6:20:af:b2:71:44:cf:af:
                    7e:d4:01:89:80:3b:a6:ad:9c:ff:6b:8e:92:2d:44:
                    c0:fc:8f:a6:49:54:69:a3:31:c3:ae:d3:94:af:39:
                    47:aa:79:8e:d0:08:de:35:3e:5e:70:1f:2f:e2:68:
                    39:4d:36:66:99:37:5a:a1:7f:d8:14:ba:69:15:e1:
                    a1:13:ff:36:a9:d0:82:5d:34:2f:dd:18:cd:e0:e3:
                    fe:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:41:35:1D:B6:F2:6E:C9:48:E6:B5:53:2C:0D:20:01:42:8E:6A:1A
            X509v3 Authority Key Identifier:
                keyid:8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/cfeb96970b72781e48bf341da7b433eb0352cca1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.251.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:89:58:d3:30:a8:21:09:28:9d:20:65:05:ba:d8:34:b4:9f:
         a4:c4:99:f6:db:64:9d:5a:78:eb:c8:50:1a:0f:f7:ff:05:c3:
         54:e3:ab:d0:d1:2f:4f:cd:61:88:31:27:dc:0f:3d:f0:0d:1b:
         ee:14:f2:d5:c5:db:e2:23:0f:99:68:90:f3:36:95:e2:13:78:
         ad:91:23:14:cd:ec:c2:0a:26:11:bd:69:6e:b3:00:8b:86:02:
         a5:99:e9:e8:43:6c:7d:20:d3:46:32:66:b7:36:49:85:20:18:
         2a:b7:a6:df:f1:3b:c7:85:eb:6c:17:fa:5b:d4:5d:1c:95:8c:
         ec:29:11:13:08:ee:22:3f:e0:fd:51:8b:44:e5:97:cc:97:ec:
         ac:6e:ad:69:19:0e:a5:9b:df:3a:5c:c0:f5:01:5e:8a:be:2e:
         1e:0c:2b:57:4a:5c:23:65:b2:81:93:8b:07:a9:e2:83:5b:17:
         e3:7c:da:c9:6c:18:bd:6e:29:7a:71:06:eb:44:52:81:66:29:
         59:e1:35:f8:d0:b7:a5:4b:75:8f:94:d7:d7:15:dd:56:e8:35:
         81:9b:0b:be:f4:7e:05:d5:be:29:81:31:40:b1:d7:9e:b0:5e:
         1e:7d:e3:8d:bd:92:2b:45:32:c3:45:50:6d:28:f8:5e:f8:2a:
         69:9d:11:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:48 2024 by rpki-client on console-ams.rpki-client.org