Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e348bdf3-6c2a-4e7f-9deb-ebcd2c56f245/ef9827a4cf654c1796abad277545b570c7f306bc.roa
File:                     ef9827a4cf654c1796abad277545b570c7f306bc.roa (raw, json)
Hash identifier:          qfTZT2Ge4vkpLIBN60554bPHMTQ3CqY8xl7opNRiwWw=
Subject key identifier:   D1:10:B7:BB:DA:CE:9B:2A:5C:C0:D1:5E:69:CC:3B:F6:C7:C4:DB:07
Certificate issuer:       /CN=eb6de066f1c70b82f75b54d19209c0e03f1f0279
Certificate serial:       216A63
Authority key identifier: 76:12:49:46:59:CF:CF:F8:19:4B:DD:87:76:20:C2:55:68:E0:EA:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eb6de066f1c70b82f75b54d19209c0e03f1f0279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e348bdf3-6c2a-4e7f-9deb-ebcd2c56f245/ef9827a4cf654c1796abad277545b570c7f306bc.roa
Signing time:             Mon 12 Jun 2023 23:46:42 +0000
ROA not before:           Sun 11 Jun 2023 23:46:39 +0000
ROA not after:            Thu 12 Jun 2025 23:46:39 +0000
asID:                     17079
IP address blocks:        186.32.96.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2189923 (0x216a63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb6de066f1c70b82f75b54d19209c0e03f1f0279
        Validity
            Not Before: Jun 11 23:46:39 2023 GMT
            Not After : Jun 12 23:46:39 2025 GMT
        Subject: CN=ef9827a4cf654c1796abad277545b570c7f306bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:4e:08:88:c3:17:ff:8a:a4:e8:86:a1:6f:6e:
                    43:34:08:92:cb:1f:1f:9e:2e:80:76:64:b4:f8:e5:
                    fe:cf:0d:b8:7e:53:d4:34:2f:5f:5f:f1:30:66:4d:
                    fd:93:c1:5d:2b:bd:4c:fb:8c:a2:cf:8f:44:70:4c:
                    b3:d8:9d:5e:e0:b1:d7:bd:d7:71:b5:bf:12:de:11:
                    12:c3:3e:a8:60:f3:de:fd:9a:f8:5e:c7:1f:29:df:
                    18:34:31:e6:0d:12:e9:36:97:6b:45:bd:de:7b:10:
                    99:6f:73:a8:af:23:a6:9f:3e:a7:36:6b:e7:83:ba:
                    eb:5c:c8:c9:23:9d:71:5b:01:f8:a7:42:25:c1:f9:
                    a7:dc:69:3d:24:37:f4:a8:96:6a:e9:45:45:77:f0:
                    97:34:ec:80:1e:06:df:6b:e0:fd:d4:7a:df:d7:ae:
                    5e:88:5f:68:80:c8:af:40:0a:45:01:c4:d5:fe:72:
                    18:88:52:c0:c4:35:ca:17:6e:5d:a2:8a:f6:da:95:
                    39:67:3b:4c:74:4b:12:fb:18:2b:4d:b7:97:66:ad:
                    82:5d:2c:54:70:de:07:80:bf:85:67:b5:af:0e:77:
                    04:40:bd:2c:ce:1c:c7:e7:87:c4:04:b1:00:9b:b7:
                    2d:a1:4c:9b:ac:58:ad:20:2d:d8:f8:15:95:5a:4c:
                    23:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:10:B7:BB:DA:CE:9B:2A:5C:C0:D1:5E:69:CC:3B:F6:C7:C4:DB:07
            X509v3 Authority Key Identifier:
                keyid:76:12:49:46:59:CF:CF:F8:19:4B:DD:87:76:20:C2:55:68:E0:EA:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eb6de066f1c70b82f75b54d19209c0e03f1f0279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e348bdf3-6c2a-4e7f-9deb-ebcd2c56f245/ef9827a4cf654c1796abad277545b570c7f306bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e348bdf3-6c2a-4e7f-9deb-ebcd2c56f245/eb6de066f1c70b82f75b54d19209c0e03f1f0279.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.32.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:39:c9:59:97:4e:84:5f:47:c5:66:ff:7e:4b:9a:90:b3:d7:
         d0:b1:55:89:f1:ef:85:03:57:c9:3c:70:c5:d0:c2:12:dd:4a:
         4e:8e:d2:0d:f3:b5:6b:3b:cf:1d:7d:d0:99:af:64:3e:18:c7:
         64:fc:37:2d:3c:43:d8:95:c0:d1:f4:c1:a5:77:42:e8:87:8c:
         0e:09:da:e5:8e:a1:d6:d8:e3:63:5a:0d:db:90:40:c8:e2:f7:
         95:c4:bb:5f:4c:33:e8:d1:14:4b:5f:f4:04:df:34:f9:a5:70:
         60:c7:0c:a3:6a:74:37:bd:45:7d:d2:ab:f9:24:ec:a8:8f:d8:
         c9:02:7b:39:60:63:d1:fe:a9:0d:af:41:fd:38:cb:3a:f1:2e:
         1d:da:b2:91:85:76:47:dd:b7:15:d2:3b:8a:c2:a0:44:48:74:
         ee:f7:78:c4:20:d6:f5:2a:e7:7f:69:bc:03:09:89:8f:b9:15:
         19:a5:66:51:74:08:91:5f:87:73:d5:c1:bc:f8:41:58:14:bf:
         5c:89:8e:a4:b0:4a:6f:0d:40:05:c5:d4:55:2f:28:02:43:2f:
         27:e2:d6:99:65:ea:f6:a6:14:63:9c:63:47:f6:16:c8:78:55:
         c9:98:57:99:4a:49:06:05:8a:6d:73:9a:dd:9e:db:1a:47:d2:
         4c:5e:55:b3
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIWpjMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGVi
NmRlMDY2ZjFjNzBiODJmNzViNTRkMTkyMDljMGUwM2YxZjAyNzkwHhcNMjMwNjEx
MjM0NjM5WhcNMjUwNjEyMjM0NjM5WjAzMTEwLwYDVQQDEyhlZjk4MjdhNGNmNjU0
YzE3OTZhYmFkMjc3NTQ1YjU3MGM3ZjMwNmJjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA604IiMMX/4qk6Iahb25DNAiSyx8fni6AdmS0+OX+zw24flPU
NC9fX/EwZk39k8FdK71M+4yiz49EcEyz2J1e4LHXvddxtb8S3hESwz6oYPPe/Zr4
XscfKd8YNDHmDRLpNpdrRb3eexCZb3OoryOmnz6nNmvng7rrXMjJI51xWwH4p0Il
wfmn3Gk9JDf0qJZq6UVFd/CXNOyAHgbfa+D91Hrf165eiF9ogMivQApFAcTV/nIY
iFLAxDXKF25door22pU5ZztMdEsS+xgrTbeXZq2CXSxUcN4HgL+FZ7WvDncEQL0s
zhzH54fEBLEAm7ctoUybrFitIC3Y+BWVWkwjvwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNEQt7vazpsqXMDRXmnMO/bHxNsHMB8GA1UdIwQYMBaAFHYSSUZZz8/4GUvd
h3YgwlVo4OoMMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZWI2ZGUw
NjZmMWM3MGI4MmY3NWI1NGQxOTIwOWMwZTAzZjFmMDI3OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTM0OGJkZjMtNmMyYS00ZTdmLTlkZWItZWJjZDJj
NTZmMjQ1L2VmOTgyN2E0Y2Y2NTRjMTc5NmFiYWQyNzc1NDViNTcwYzdmMzA2YmMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lMzQ4YmRmMy02YzJhLTRlN2YtOWRlYi1lYmNk
MmM1NmYyNDUvZWI2ZGUwNjZmMWM3MGI4MmY3NWI1NGQxOTIwOWMwZTAzZjFmMDI3
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALogYDANBgkqhkiG9w0BAQsFAAOCAQEAfTnJWZdOhF9HxWb/
fkuakLPX0LFVifHvhQNXyTxwxdDCEt1KTo7SDfO1azvPHX3Qma9kPhjHZPw3LTxD
2JXA0fTBpXdC6IeMDgna5Y6h1tjjY1oN25BAyOL3lcS7X0wz6NEUS1/0BN80+aVw
YMcMo2p0N71FfdKr+STsqI/YyQJ7OWBj0f6pDa9B/TjLOvEuHdqykYV2R923FdI7
isKgREh07vd4xCDW9Srnf2m8AwmJj7kVGaVmUXQIkV+Hc9XBvPhBWBS/XImOpLBK
bw1ABcXUVS8oAkMvJ+LWmWXq9qYUY5xjR/YWyHhVyZhXmUpJBgWKbXOa3Z7bGkfS
TF5Vsw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:50 2024 by rpki-client on console-ams.rpki-client.org