Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e3f6f67b-6b4d-4093-97ad-36b5b8df7ba0/33c3009c916a7e33027aea91ca4d15e44e3fcd21.roa
File:                     33c3009c916a7e33027aea91ca4d15e44e3fcd21.roa (raw, json)
Hash identifier:          ID6n5SgjOeReYQr5+Qp1QYPrroSXjc8lB7AgXHkXWlA=
Subject key identifier:   0A:5C:D9:9F:13:C1:98:61:15:D9:46:24:76:6A:F5:99:BE:AA:39:08
Certificate issuer:       /CN=ef9eece186acee7c98893ecb00fbad69eede01bd
Certificate serial:       18745A
Authority key identifier: 72:61:C7:04:7C:17:14:CF:E7:03:08:D9:B9:72:07:F6:AE:3A:40:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef9eece186acee7c98893ecb00fbad69eede01bd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e3f6f67b-6b4d-4093-97ad-36b5b8df7ba0/33c3009c916a7e33027aea91ca4d15e44e3fcd21.roa
Signing time:             Fri 24 Mar 2023 08:30:17 +0000
ROA not before:           Thu 23 Mar 2023 08:30:17 +0000
ROA not after:            Sat 22 Mar 2025 08:30:17 +0000
asID:                     61461
IP address blocks:        186.148.192.0/23 maxlen: 23
                          186.148.192.0/24 maxlen: 24
                          186.148.193.0/24 maxlen: 24
                          186.148.194.0/23 maxlen: 23
                          186.148.194.0/24 maxlen: 24
                          186.148.195.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1602650 (0x18745a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef9eece186acee7c98893ecb00fbad69eede01bd
        Validity
            Not Before: Mar 23 08:30:17 2023 GMT
            Not After : Mar 22 08:30:17 2025 GMT
        Subject: CN=33c3009c916a7e33027aea91ca4d15e44e3fcd21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4f:82:4c:23:74:4c:f8:49:3a:b3:69:f9:a4:
                    f6:22:4d:25:6f:3b:1b:8f:07:ed:4c:d0:cf:fb:67:
                    97:36:7e:ea:83:2a:e2:75:6b:1d:e4:eb:5c:ee:e9:
                    d9:26:9c:70:19:59:c0:99:81:46:ab:92:71:ea:cf:
                    e8:c2:61:33:a0:9a:b6:74:89:aa:42:6e:46:3a:eb:
                    9b:f5:94:82:f9:eb:ec:52:92:9a:50:c6:21:e0:45:
                    64:f4:6a:cf:27:ae:ac:c8:98:c2:15:30:22:e9:9e:
                    08:7b:bd:bb:a0:10:d8:91:ff:20:9d:01:f4:7a:9a:
                    e8:67:2a:ba:48:6a:50:f8:e0:dd:51:57:90:52:2c:
                    ad:bc:b3:59:d8:6a:c5:ae:d2:74:52:f5:a6:cf:d3:
                    b8:ca:1a:12:3f:f9:97:9f:fc:fb:b1:4a:2c:1b:80:
                    92:46:ce:82:af:84:30:b7:26:a0:2c:d3:24:f9:53:
                    6e:5c:11:3e:df:b2:64:1e:9e:f3:fd:b1:0f:a3:ca:
                    21:d3:9f:33:bb:2e:04:01:d3:95:eb:fb:bb:23:ab:
                    2f:ed:9d:2d:da:84:0f:57:60:25:42:03:72:df:b4:
                    c6:39:48:e1:a1:72:4b:0b:73:da:5b:dc:ed:bd:4f:
                    ea:d4:42:35:97:42:ad:49:29:7c:26:d9:52:98:3b:
                    b3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:5C:D9:9F:13:C1:98:61:15:D9:46:24:76:6A:F5:99:BE:AA:39:08
            X509v3 Authority Key Identifier:
                keyid:72:61:C7:04:7C:17:14:CF:E7:03:08:D9:B9:72:07:F6:AE:3A:40:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef9eece186acee7c98893ecb00fbad69eede01bd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e3f6f67b-6b4d-4093-97ad-36b5b8df7ba0/33c3009c916a7e33027aea91ca4d15e44e3fcd21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e3f6f67b-6b4d-4093-97ad-36b5b8df7ba0/ef9eece186acee7c98893ecb00fbad69eede01bd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:3a:dc:62:66:f1:ff:38:76:b6:e9:93:b0:c6:2c:3f:4b:fe:
         56:ec:cc:b9:85:60:8e:a9:a7:e4:d8:2f:13:f3:c8:62:29:93:
         c4:74:a6:ed:d4:bf:00:71:6f:4d:3d:bf:0d:5d:2a:e9:55:73:
         e1:8b:e1:69:7d:5d:33:a9:ef:ea:eb:ef:ee:87:6f:12:d2:25:
         e0:e5:d5:e8:99:6a:d4:76:21:62:6c:56:4c:f5:1f:1e:e8:12:
         ad:a4:02:87:b2:f8:a6:5c:8b:31:41:89:74:1e:dd:7c:76:e8:
         a8:d7:55:c2:26:e3:dc:83:92:7f:a2:23:a7:6f:f2:14:3c:ed:
         83:d4:b2:8f:5c:d3:06:02:88:ee:65:17:69:02:d5:89:a1:95:
         75:34:cd:74:ac:4e:14:b5:a3:8b:f6:f1:fb:39:09:35:35:ca:
         f3:e3:be:79:12:4b:6c:5b:82:24:f8:7d:58:38:4e:36:98:6a:
         00:a5:32:7c:9c:65:87:25:3e:fb:46:37:9b:02:d2:82:3b:23:
         16:ce:80:c3:ea:30:8d:2a:8e:c0:56:31:34:56:ac:fc:90:9a:
         07:c0:cf:53:27:89:68:40:ed:8a:d5:33:bb:fe:7d:76:9f:dc:
         b1:5b:b6:57:b7:22:ef:81:f8:16:a8:84:b9:97:6c:05:a1:f9:
         58:b8:3c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:10 2024 by rpki-client on console-fra.rpki-client.org