Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e06244f4-1f59-4182-8105-8d770ece2856/918a9c85cc7256aed9f4cf307393510b32ae77f4.roa
File:                     918a9c85cc7256aed9f4cf307393510b32ae77f4.roa (raw, json)
Hash identifier:          Yj4Ycy/c1pcjGpOl5BA/zkboVNrVSZouzrt6v4sYNDE=
Subject key identifier:   28:27:8D:6E:E8:15:33:FF:2E:69:92:17:30:E9:30:27:48:0A:3D:2F
Certificate issuer:       /CN=a5265fc51b7f5a9f0ec142aa30846e06015ca4ff
Certificate serial:       0D76D4
Authority key identifier: 7B:81:30:97:3D:07:EE:38:1D:BC:1C:6C:C9:D0:90:B0:10:92:A6:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5265fc51b7f5a9f0ec142aa30846e06015ca4ff.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e06244f4-1f59-4182-8105-8d770ece2856/918a9c85cc7256aed9f4cf307393510b32ae77f4.roa
Signing time:             Wed 24 Mar 2021 14:30:28 +0000
ROA not before:           Wed 24 Mar 2021 14:30:28 +0000
ROA not after:            Tue 24 Mar 2026 14:30:28 +0000
asID:                     52361
IP address blocks:        186.33.234.0/24 maxlen: 24
                          186.33.212.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 882388 (0xd76d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5265fc51b7f5a9f0ec142aa30846e06015ca4ff
        Validity
            Not Before: Mar 24 14:30:28 2021 GMT
            Not After : Mar 24 14:30:28 2026 GMT
        Subject: CN=918a9c85cc7256aed9f4cf307393510b32ae77f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6d:16:76:e6:85:cf:9f:38:97:e8:44:a8:6c:
                    1d:5a:cd:44:a4:29:ad:c1:8e:04:2c:82:f6:05:fc:
                    8f:28:5a:d3:07:aa:b3:6a:59:f2:99:3b:c8:64:02:
                    03:35:5f:50:14:80:55:34:2b:eb:0b:5a:7a:51:f0:
                    a8:73:30:80:29:41:57:07:3a:59:a1:4f:f6:83:2f:
                    aa:dc:23:c2:dd:31:34:91:ab:ad:eb:e6:ae:f5:33:
                    7b:3a:e6:88:fe:63:93:b3:cb:78:e8:d0:e4:c0:57:
                    82:99:0a:3b:90:cc:11:30:e0:34:cf:d0:79:0a:4c:
                    63:a7:10:8e:50:25:a0:2b:96:04:9e:c8:fa:38:a3:
                    ef:23:5c:ed:df:8b:60:b8:3c:20:58:29:b3:1a:f1:
                    59:01:51:03:00:48:66:f6:2f:50:72:b6:4d:45:79:
                    c7:73:5e:44:dd:f1:20:75:03:ef:3e:df:7d:97:6a:
                    f3:83:b2:37:cc:0b:b8:34:d3:3d:ee:b0:14:66:d1:
                    14:17:f1:8f:b2:23:83:41:42:02:11:86:34:27:03:
                    9a:9e:59:29:56:1f:91:54:41:30:f8:f7:f0:19:6c:
                    c5:fb:3d:03:37:7c:49:df:eb:f9:1d:07:40:3e:9c:
                    10:cf:ed:6d:63:83:ed:22:81:f0:f5:a6:22:70:84:
                    c3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:27:8D:6E:E8:15:33:FF:2E:69:92:17:30:E9:30:27:48:0A:3D:2F
            X509v3 Authority Key Identifier:
                keyid:7B:81:30:97:3D:07:EE:38:1D:BC:1C:6C:C9:D0:90:B0:10:92:A6:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5265fc51b7f5a9f0ec142aa30846e06015ca4ff.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e06244f4-1f59-4182-8105-8d770ece2856/918a9c85cc7256aed9f4cf307393510b32ae77f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e06244f4-1f59-4182-8105-8d770ece2856/a5265fc51b7f5a9f0ec142aa30846e06015ca4ff.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.33.212.0/24
                  186.33.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:da:d5:96:ba:4b:05:d3:f2:01:82:ff:4d:36:a4:a2:a9:45:
         3c:b9:1e:43:92:72:bd:89:a1:e0:84:ae:f0:ba:7f:93:9c:45:
         32:b5:93:87:4a:18:b5:73:1e:a7:67:81:95:2e:a0:db:9b:4b:
         e1:7d:51:c9:1c:62:0f:e3:2b:cf:ec:05:ae:e1:d6:19:dd:f6:
         90:41:d5:69:bb:95:70:78:e6:c1:a6:81:b5:b3:31:e6:a9:ed:
         59:57:71:94:65:e6:68:5a:85:19:da:0f:d5:7b:15:29:6f:ef:
         b3:2e:ea:40:45:80:7f:3e:05:7d:09:9d:dd:2c:f4:5f:d2:68:
         fb:01:ce:02:5e:72:80:66:a0:1b:66:6a:91:5a:f7:80:aa:0a:
         48:c6:74:7b:e9:82:f2:d5:54:de:1e:b7:9d:aa:8a:ac:0c:1b:
         38:2f:81:98:99:55:84:87:7e:38:80:79:6c:24:0a:77:ba:ca:
         c2:30:4b:6b:a9:61:a0:40:ea:b8:3d:ef:45:95:2b:04:3d:3d:
         91:11:2f:22:93:c6:29:be:4f:e3:96:ae:cf:a5:00:ed:1d:f4:
         7b:d9:fe:ef:37:06:9c:62:a4:db:64:88:4f:57:39:ae:5c:98:
         a1:43:11:e7:7a:c7:d7:3a:b1:78:67:28:9b:d5:34:cb:6f:6c:
         cb:00:fc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:37 2024 by rpki-client on console-ams.rpki-client.org