Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/f311f1a565c40423e697488446042a56d8703494.roa
File:                     f311f1a565c40423e697488446042a56d8703494.roa (raw, json)
Hash identifier:          d7lcpQvtJEPgEI0czsHj5oxo21N9RFDHiha4POhtDhY=
Subject key identifier:   D8:79:25:C3:F1:C2:F4:86:84:01:AE:7C:F4:8D:8C:76:71:A8:4F:D6
Certificate issuer:       /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial:       0408C8
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/f311f1a565c40423e697488446042a56d8703494.roa
Signing time:             Tue 08 Aug 2023 13:33:45 +0000
ROA not before:           Mon 07 Aug 2023 13:33:45 +0000
ROA not after:            Fri 08 Aug 2025 13:33:45 +0000
asID:                     7004
IP address blocks:        186.103.240.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 264392 (0x408c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
        Validity
            Not Before: Aug  7 13:33:45 2023 GMT
            Not After : Aug  8 13:33:45 2025 GMT
        Subject: CN=f311f1a565c40423e697488446042a56d8703494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:77:eb:8f:f9:aa:05:f8:ba:8e:77:b7:cd:3e:
                    60:87:a8:c6:9b:b7:75:ce:54:a9:35:40:11:7c:1d:
                    2f:26:cc:a1:63:63:8c:a4:c4:03:de:d7:42:09:5f:
                    c4:e0:57:e5:46:f4:8d:35:00:6e:fa:bf:f7:b5:a9:
                    6e:d3:0c:99:87:89:1d:5b:6e:f2:3c:94:a5:4f:7f:
                    da:76:4c:76:43:03:23:ce:86:80:c9:7c:90:a6:9d:
                    b9:07:b5:8c:b7:0b:5d:0c:a5:59:b1:73:af:d0:a7:
                    e1:08:cb:cf:fc:b6:58:69:d7:91:b4:1a:0f:e2:c4:
                    33:1f:8a:9d:8f:17:8e:5c:7a:18:8d:5c:9a:cb:34:
                    c5:c9:1b:e1:b1:47:f6:25:4a:ca:1b:51:6d:aa:f3:
                    85:d9:a8:77:63:26:d1:d6:6a:15:39:df:10:94:3c:
                    40:5e:da:12:53:71:84:99:63:d1:48:ae:b8:a8:45:
                    1a:24:be:13:85:02:50:7e:72:6a:c9:ec:69:08:b9:
                    76:91:ec:d9:aa:ec:11:49:98:1e:ea:fe:6b:82:0f:
                    8e:3f:19:46:c9:f5:55:38:c4:ec:b6:69:3a:93:5d:
                    9e:14:3d:d6:21:30:9b:e1:42:90:af:90:6c:dc:87:
                    e9:7f:b6:2e:53:96:0b:64:ff:9c:f4:e9:f9:ec:1e:
                    ab:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:79:25:C3:F1:C2:F4:86:84:01:AE:7C:F4:8D:8C:76:71:A8:4F:D6
            X509v3 Authority Key Identifier:
                keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/f311f1a565c40423e697488446042a56d8703494.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.103.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7f:1f:38:96:2d:1a:65:2f:9f:04:9b:39:c6:d9:77:9b:63:2d:
         af:13:45:f6:d8:e8:7e:28:e0:7b:cf:0c:46:d8:67:d3:17:3e:
         1a:b5:c5:39:04:e8:69:ae:20:b5:79:1c:86:53:f9:f7:f8:89:
         5a:43:6a:2d:59:d3:03:e9:4b:5f:10:7c:ba:45:1f:d2:27:61:
         f6:73:5a:9e:a2:93:ab:dc:d1:d9:d4:0e:a6:80:83:ab:be:06:
         6f:3e:61:3b:e2:f1:e4:b4:5f:91:c6:36:bc:af:dd:a0:0e:fe:
         d1:36:64:93:45:b3:31:d2:2c:0d:48:b8:4c:ca:96:a4:ed:74:
         5a:91:e4:c8:b2:5a:29:b4:0d:e0:32:22:ca:a3:2c:4b:c4:c5:
         36:83:21:83:a6:ac:f6:f8:ca:d1:aa:de:1b:bc:0e:49:89:7b:
         24:59:de:2a:9c:e7:ef:be:36:09:d4:6a:03:72:84:59:83:0f:
         39:66:c7:2f:d6:ee:b6:bc:0e:a3:e9:fc:5b:e0:24:53:b3:ae:
         b8:37:08:44:b4:16:17:58:03:dc:b3:cc:ce:13:c9:24:79:9f:
         3d:b3:25:ff:e1:b1:b3:47:0f:7a:94:eb:5d:f6:46:62:4e:2d:
         ff:e4:66:50:9e:d5:60:b2:e9:35:87:0e:c8:99:ab:dc:2e:1e:
         84:1c:38:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org