Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e3f6f67b-6b4d-4093-97ad-36b5b8df7ba0/975f094225fc6c73e1d87b2438e5490e4fe4e154.roa
File:                     975f094225fc6c73e1d87b2438e5490e4fe4e154.roa (raw, json)
Hash identifier:          JXq6NyRqLQpqEPnTLP7HYf3Sjrz1eiT6HyDj6s4NvZ4=
Subject key identifier:   5F:5E:BA:6F:2C:C8:56:E1:A3:22:C5:63:DC:39:A7:D2:CD:8B:53:86
Certificate issuer:       /CN=ef9eece186acee7c98893ecb00fbad69eede01bd
Certificate serial:       1C77FE
Authority key identifier: 72:61:C7:04:7C:17:14:CF:E7:03:08:D9:B9:72:07:F6:AE:3A:40:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef9eece186acee7c98893ecb00fbad69eede01bd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e3f6f67b-6b4d-4093-97ad-36b5b8df7ba0/975f094225fc6c73e1d87b2438e5490e4fe4e154.roa
Signing time:             Sat 02 Sep 2023 02:37:20 +0000
ROA not before:           Fri 01 Sep 2023 02:37:20 +0000
ROA not after:            Tue 02 Sep 2025 02:37:20 +0000
asID:                     269984
IP address blocks:        186.148.195.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1865726 (0x1c77fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef9eece186acee7c98893ecb00fbad69eede01bd
        Validity
            Not Before: Sep  1 02:37:20 2023 GMT
            Not After : Sep  2 02:37:20 2025 GMT
        Subject: CN=975f094225fc6c73e1d87b2438e5490e4fe4e154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2c:33:bc:00:69:15:6f:52:9e:86:85:d6:4b:
                    81:aa:eb:f8:b4:a4:df:f0:bc:14:f1:21:7b:ea:71:
                    4a:79:d6:e3:ed:14:83:90:db:f6:81:a5:8b:47:b6:
                    de:b1:bf:5c:a2:74:b2:8e:47:56:9b:df:95:19:8f:
                    e1:5d:32:d7:2d:1e:84:90:78:3f:3b:3c:d4:10:a7:
                    06:93:ef:d7:fb:8f:f5:f5:e0:b8:5c:50:07:96:83:
                    37:35:ff:b6:ad:ff:0b:17:b3:67:87:9b:8e:2e:27:
                    69:bc:2e:f8:f2:a9:b9:77:6f:19:a5:ee:9e:f5:de:
                    c0:5d:a1:73:db:21:cf:54:ac:13:8e:e0:8f:93:e1:
                    61:c6:2c:45:43:04:9e:75:9d:5e:18:59:f6:fd:c7:
                    83:de:a7:ab:71:48:1b:c8:76:32:a2:07:8c:6b:43:
                    a8:12:4d:6d:3a:db:be:a5:ee:84:3f:e0:5a:62:69:
                    75:38:4a:56:59:24:8b:83:fd:f9:51:17:5e:57:f8:
                    a8:fd:af:34:14:61:af:19:8e:b6:4f:4a:fd:3f:08:
                    36:79:ee:27:f1:1e:8c:7e:d4:99:b5:67:b8:e3:e2:
                    d5:19:f1:01:4e:b7:a2:c2:b0:de:4c:14:49:b3:dc:
                    c0:3a:6b:e4:4f:c2:b1:21:6b:83:5b:40:4c:f9:95:
                    a8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:5E:BA:6F:2C:C8:56:E1:A3:22:C5:63:DC:39:A7:D2:CD:8B:53:86
            X509v3 Authority Key Identifier:
                keyid:72:61:C7:04:7C:17:14:CF:E7:03:08:D9:B9:72:07:F6:AE:3A:40:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef9eece186acee7c98893ecb00fbad69eede01bd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e3f6f67b-6b4d-4093-97ad-36b5b8df7ba0/975f094225fc6c73e1d87b2438e5490e4fe4e154.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e3f6f67b-6b4d-4093-97ad-36b5b8df7ba0/ef9eece186acee7c98893ecb00fbad69eede01bd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dd:e0:fa:08:89:7d:44:19:ca:5c:e8:31:ec:1a:1f:67:21:55:
         fd:5e:07:66:9f:97:06:cc:66:d0:71:98:c8:1a:48:c3:dd:ae:
         79:dd:8b:ae:2e:22:52:a0:c4:a0:7a:01:21:c1:53:ec:1c:22:
         46:9f:3c:3a:f1:5d:c5:0c:86:eb:7b:4d:fa:27:2e:3b:76:1a:
         ed:0e:88:f1:c4:bd:6c:6e:46:16:36:b4:5a:d5:aa:af:fb:eb:
         2c:54:2d:ba:f1:a6:27:76:98:1a:4e:f5:7c:af:c9:e6:29:44:
         7f:51:97:85:83:1a:94:93:97:cb:0e:3b:84:fd:f6:b9:0c:c5:
         cf:27:f1:d1:cc:c2:56:88:7b:76:b7:70:51:4c:8c:40:88:80:
         45:06:6e:58:b6:49:4b:19:63:d6:a2:f5:43:54:69:e8:9c:69:
         68:fc:fc:a9:82:ed:38:61:00:9c:ae:69:03:62:7c:42:e7:c7:
         cc:75:17:30:09:74:f9:56:08:d2:ca:52:9f:d1:73:95:28:80:
         9f:77:ce:da:69:83:e3:9c:eb:26:90:0a:7a:04:4a:2d:c9:3d:
         71:1c:30:b4:4a:97:ed:25:08:4d:9b:f5:38:ef:2d:da:6a:46:
         a4:99:bd:52:7a:9c:70:5d:c2:a9:af:1d:2f:96:b8:f2:25:f9:
         0e:2c:94:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:50 2024 by rpki-client on console-ams.rpki-client.org