Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/53bacee2eedbcf98e5d0dc65a8c235cf54b3cb9c.roa
File:                     53bacee2eedbcf98e5d0dc65a8c235cf54b3cb9c.roa (raw, json)
Hash identifier:          9Uw9Hahl8muBYA1O+BptDUNYGtoRgnILP8vwBx/Yd54=
Subject key identifier:   3D:B6:D5:91:73:41:FC:11:C1:62:65:17:F1:0C:78:54:81:0A:B0:1F
Certificate issuer:       /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial:       03FD38
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/53bacee2eedbcf98e5d0dc65a8c235cf54b3cb9c.roa
Signing time:             Tue 08 Aug 2023 13:31:14 +0000
ROA not before:           Mon 07 Aug 2023 13:31:14 +0000
ROA not after:            Fri 08 Aug 2025 13:31:14 +0000
asID:                     7004
IP address blocks:        186.103.156.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261432 (0x3fd38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
        Validity
            Not Before: Aug  7 13:31:14 2023 GMT
            Not After : Aug  8 13:31:14 2025 GMT
        Subject: CN=53bacee2eedbcf98e5d0dc65a8c235cf54b3cb9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d8:eb:ea:d5:00:1c:fc:2d:9d:8e:ca:02:e0:
                    d9:20:4b:57:2d:75:33:78:72:40:bc:fd:a8:31:a1:
                    65:40:9a:22:cd:a1:e8:4a:c2:5e:04:75:dd:13:97:
                    f5:ed:9b:f3:8a:48:67:88:55:b0:9d:45:e3:bf:33:
                    a1:04:88:95:d7:63:aa:ea:be:fc:b0:66:f8:06:85:
                    16:9e:76:99:90:86:4e:84:4e:cf:53:bc:c8:83:ad:
                    70:13:e0:21:bc:25:ea:9f:90:37:27:4b:a5:25:d3:
                    d7:cf:c7:d3:33:24:a6:99:ce:e5:d4:bd:f5:6c:46:
                    f1:d3:0e:4e:1f:8e:df:ed:f9:7e:28:15:26:81:e8:
                    af:f0:b7:5c:9c:9a:72:2b:ec:d5:44:c3:4f:23:65:
                    fc:2e:ce:24:9d:e7:32:3b:d4:d6:10:7f:e5:1e:4d:
                    f9:37:34:d6:ca:f9:3e:d8:33:37:a9:d3:7a:56:8c:
                    09:b9:9d:69:f4:d6:c9:c8:61:15:ea:6d:11:2b:14:
                    f5:9c:63:17:9e:67:40:2c:43:4f:b9:38:42:03:5d:
                    d1:3e:2d:3f:8d:bf:b6:d6:51:fc:78:23:33:c9:a7:
                    6b:1b:b3:70:28:00:23:3b:cf:14:44:72:bf:e6:01:
                    55:73:84:d4:3f:6e:af:6a:2d:35:68:2f:32:12:17:
                    ff:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B6:D5:91:73:41:FC:11:C1:62:65:17:F1:0C:78:54:81:0A:B0:1F
            X509v3 Authority Key Identifier:
                keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/53bacee2eedbcf98e5d0dc65a8c235cf54b3cb9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.103.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:d0:90:12:8b:f0:20:07:96:cb:14:67:e8:f3:b6:c8:25:3b:
         6d:94:03:84:b8:13:08:ab:13:9a:9c:a7:f9:65:64:7d:d0:e0:
         84:18:38:4e:75:93:1c:5f:0f:c6:32:71:96:19:75:77:ef:be:
         70:56:76:1d:cb:f1:0e:97:54:64:c3:35:c3:a5:5a:59:c1:0d:
         8e:13:8a:c1:00:da:42:21:ad:f8:f8:38:c7:ce:d5:27:56:f4:
         a9:f4:cd:7a:89:3f:15:07:25:f6:55:be:2b:7f:0c:3e:11:34:
         d2:cc:b7:92:c0:6e:58:f0:ec:32:28:7f:5a:8c:6b:ad:a3:4c:
         b8:ce:21:5d:4f:dd:32:59:36:7a:4f:6f:86:c7:9c:00:39:38:
         80:66:ba:5e:ac:fa:54:0d:9e:81:46:0f:85:e1:8a:2e:68:4a:
         08:ab:65:ed:05:8a:ef:9c:dd:8b:9d:eb:ef:e6:5b:63:3e:b4:
         76:90:f9:f8:a0:e0:01:aa:39:42:aa:c1:a7:08:41:de:5a:01:
         4e:0c:58:03:3e:18:90:a7:44:33:35:71:09:2a:68:2f:3c:2c:
         54:14:f9:95:c3:61:4b:ad:b6:45:97:8f:cc:e3:bf:8e:2e:e1:
         2e:e4:86:c3:e5:64:50:fa:5d:62:5d:d6:b9:e8:c4:2b:cc:07:
         3d:9e:0d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org