Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e3f6f67b-6b4d-4093-97ad-36b5b8df7ba0/2e5f1538615e8747f5dcfaa217be2f406a769c4e.roa
File:                     2e5f1538615e8747f5dcfaa217be2f406a769c4e.roa (raw, json)
Hash identifier:          8FkgD3cLSFbrOX9PumNAGoN8PI/uBTcm/GLeKnX7dH4=
Subject key identifier:   18:80:E5:92:93:F1:1A:46:C6:FF:C1:A1:95:7C:38:4F:4A:20:FD:10
Certificate issuer:       /CN=ef9eece186acee7c98893ecb00fbad69eede01bd
Certificate serial:       1C7DDD
Authority key identifier: 72:61:C7:04:7C:17:14:CF:E7:03:08:D9:B9:72:07:F6:AE:3A:40:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef9eece186acee7c98893ecb00fbad69eede01bd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e3f6f67b-6b4d-4093-97ad-36b5b8df7ba0/2e5f1538615e8747f5dcfaa217be2f406a769c4e.roa
Signing time:             Sat 02 Sep 2023 02:37:21 +0000
ROA not before:           Fri 01 Sep 2023 02:37:20 +0000
ROA not after:            Tue 02 Sep 2025 02:37:20 +0000
asID:                     61461
IP address blocks:        186.148.192.0/23 maxlen: 23
                          186.148.192.0/24 maxlen: 24
                          186.148.193.0/24 maxlen: 24
                          186.148.194.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1867229 (0x1c7ddd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef9eece186acee7c98893ecb00fbad69eede01bd
        Validity
            Not Before: Sep  1 02:37:20 2023 GMT
            Not After : Sep  2 02:37:20 2025 GMT
        Subject: CN=2e5f1538615e8747f5dcfaa217be2f406a769c4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ac:13:a3:67:1c:48:9f:ce:3a:a6:b2:cd:9f:
                    75:94:d1:f2:82:96:26:65:57:c3:76:3d:5b:fb:17:
                    0a:32:dc:b9:90:dd:34:33:43:e4:c8:11:53:ec:f7:
                    1b:51:c8:a5:bd:a7:81:57:2a:21:c7:bb:e9:18:fe:
                    8b:24:50:86:76:36:b0:aa:b3:60:a1:f8:06:ab:1a:
                    95:a0:3d:22:97:34:66:50:eb:f4:66:7f:5b:d4:3c:
                    87:ba:50:d6:9c:54:c8:8e:2c:9f:85:7e:18:1b:1a:
                    43:f6:0e:16:25:82:03:05:c0:ca:e1:3c:96:33:b9:
                    ee:1a:c0:ed:e0:ad:b5:ac:48:af:b4:57:bb:0b:31:
                    f1:6b:3e:b2:c7:bc:79:bd:55:d0:67:c4:eb:b6:65:
                    88:4e:15:9a:ec:e8:a7:9b:4b:95:56:06:13:5f:87:
                    37:11:28:67:7a:4c:61:b1:eb:d2:b6:14:33:bd:a6:
                    b1:ad:dc:9c:a1:71:aa:a6:eb:80:23:1f:82:ab:df:
                    20:3f:00:a7:5c:0f:ff:ec:1d:a5:df:a8:16:4e:a9:
                    8a:ef:ae:fb:e8:81:c1:0e:bb:93:4a:46:ff:3b:2a:
                    bf:b8:c0:b0:c4:e4:4d:c8:49:ac:e8:cc:cf:07:be:
                    2d:39:d0:17:b8:90:b3:3c:cb:9f:6d:b8:44:b4:32:
                    c3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:80:E5:92:93:F1:1A:46:C6:FF:C1:A1:95:7C:38:4F:4A:20:FD:10
            X509v3 Authority Key Identifier:
                keyid:72:61:C7:04:7C:17:14:CF:E7:03:08:D9:B9:72:07:F6:AE:3A:40:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef9eece186acee7c98893ecb00fbad69eede01bd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e3f6f67b-6b4d-4093-97ad-36b5b8df7ba0/2e5f1538615e8747f5dcfaa217be2f406a769c4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e3f6f67b-6b4d-4093-97ad-36b5b8df7ba0/ef9eece186acee7c98893ecb00fbad69eede01bd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.192.0-186.148.194.255

    Signature Algorithm: sha256WithRSAEncryption
         7d:35:59:16:6e:37:29:f9:85:1c:30:52:76:3a:81:58:55:ce:
         88:8a:6f:63:4c:88:c3:f9:74:2a:f9:5c:a9:53:4e:6b:11:0d:
         89:c4:08:08:bf:17:0a:bb:fa:d0:36:6b:a6:a4:52:93:4d:dd:
         64:b2:48:a2:9d:4f:a5:c3:44:74:de:4d:6e:bf:2b:bf:53:74:
         c0:84:62:c1:a8:f7:f3:47:3b:f6:a6:29:c8:91:6c:a7:86:53:
         90:b0:d4:f1:00:83:6e:2b:5b:8a:7d:50:a6:78:1b:4f:10:14:
         84:dc:a0:a9:fa:85:98:9f:ec:ff:da:c7:47:20:79:dd:96:3f:
         f0:27:c7:a8:cc:fb:0f:af:87:02:fd:3c:25:d2:a1:25:12:7e:
         32:9d:80:43:43:41:ca:03:4a:ca:c1:31:0c:72:91:3f:8b:b5:
         f7:62:60:46:d5:2e:ab:98:a1:3d:6d:39:32:6d:ae:cf:51:fe:
         f8:b0:4b:5e:7b:3a:29:63:a3:0f:a9:cd:a2:5c:22:b1:4e:ef:
         96:3f:bd:0b:7b:0a:e1:59:9f:a7:6c:1b:54:10:0f:eb:69:eb:
         32:c2:c7:a1:73:45:7b:48:db:9a:61:6e:ad:b8:dd:4c:bc:2b:
         e6:de:a2:46:2f:3c:25:75:7d:f7:e9:c0:0c:91:fd:3f:cc:43:
         b7:75:52:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:33 2024 by rpki-client on console-fra.rpki-client.org