Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4f13700-0ba9-4c2c-ade6-64eeed608289/7af53579baa3fb7451293fcf2779fe51104301e9.roa
File:                     7af53579baa3fb7451293fcf2779fe51104301e9.roa (raw, json)
Hash identifier:          hMAD1juyg42mFkfjzWvxqjAxnTR2oOvF2PoObrGtwHg=
Subject key identifier:   5F:01:87:76:70:7E:BA:12:5F:94:23:C4:8C:F3:C6:FA:3A:F4:13:D6
Certificate issuer:       /CN=6a6637de6bf2a233d64c6541e547859959ef0b1b
Certificate serial:       19CB01
Authority key identifier: 8C:CB:A9:78:C7:14:A1:20:DA:75:EC:FF:46:3A:C0:82:3C:61:E5:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a6637de6bf2a233d64c6541e547859959ef0b1b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4f13700-0ba9-4c2c-ade6-64eeed608289/7af53579baa3fb7451293fcf2779fe51104301e9.roa
Signing time:             Wed 03 May 2023 14:22:28 +0000
ROA not before:           Tue 02 May 2023 14:22:27 +0000
ROA not after:            Sat 03 May 2025 14:22:27 +0000
asID:                     11392
IP address blocks:        186.0.152.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1690369 (0x19cb01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a6637de6bf2a233d64c6541e547859959ef0b1b
        Validity
            Not Before: May  2 14:22:27 2023 GMT
            Not After : May  3 14:22:27 2025 GMT
        Subject: CN=7af53579baa3fb7451293fcf2779fe51104301e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f4:98:d0:ff:ae:fe:6b:ef:11:5a:25:3a:58:
                    ce:78:11:2b:d8:a7:c7:8a:55:02:b0:f9:5e:4d:a4:
                    09:4f:46:e7:7e:46:12:b8:05:98:41:e6:32:74:e2:
                    a2:8c:ef:21:9e:ce:11:c4:e5:36:f6:27:74:3b:33:
                    50:bd:d0:d3:e6:96:4f:06:08:90:4b:fc:5e:4a:59:
                    c6:11:ec:f6:97:6a:47:c5:ef:bd:66:ca:a2:4c:2c:
                    cc:27:9d:5b:93:e4:19:d6:02:fe:a8:20:ef:c8:14:
                    54:91:03:fb:4e:0c:20:f5:ca:f4:d3:bc:3e:3f:30:
                    61:21:36:ba:4a:37:40:ae:96:80:11:f4:eb:a8:da:
                    08:6d:f7:20:f8:70:d5:fd:09:0c:80:de:24:c4:25:
                    8c:72:23:5e:97:6e:6e:58:18:ef:55:84:46:6e:f9:
                    ae:4a:11:09:e1:b7:e7:45:89:61:1d:c7:aa:b2:f3:
                    91:bf:cf:f5:08:4b:d9:80:41:1e:17:60:8f:c0:35:
                    b1:4a:c6:42:8d:8d:01:10:d1:75:95:61:22:28:d1:
                    30:fd:b5:0d:0f:12:54:f2:72:3c:fe:ca:6a:51:7e:
                    36:92:94:b5:e7:e9:f0:d5:ae:fb:c6:f1:8a:94:35:
                    84:16:5e:b8:38:26:b5:14:76:6f:e7:5c:ca:fa:78:
                    92:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:01:87:76:70:7E:BA:12:5F:94:23:C4:8C:F3:C6:FA:3A:F4:13:D6
            X509v3 Authority Key Identifier:
                keyid:8C:CB:A9:78:C7:14:A1:20:DA:75:EC:FF:46:3A:C0:82:3C:61:E5:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a6637de6bf2a233d64c6541e547859959ef0b1b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4f13700-0ba9-4c2c-ade6-64eeed608289/7af53579baa3fb7451293fcf2779fe51104301e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4f13700-0ba9-4c2c-ade6-64eeed608289/6a6637de6bf2a233d64c6541e547859959ef0b1b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.0.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:8e:50:ad:2b:01:d7:8d:d1:bc:07:e5:84:8e:a0:f3:cb:20:
         f3:51:53:eb:b3:e5:e3:bc:e9:9c:84:60:f6:fd:d5:f9:5e:8b:
         5c:d8:92:79:b7:65:d5:e9:e0:11:a1:2d:86:c8:74:cc:77:9e:
         f2:d6:d6:2d:37:3d:bf:9b:94:eb:32:12:29:a9:f0:f4:ff:dc:
         8e:dd:6a:38:66:a2:2c:57:47:08:30:69:7a:15:1e:2f:c0:35:
         48:b3:54:69:58:b4:11:05:e1:b8:5c:0b:72:da:64:08:b4:1b:
         05:03:85:7d:64:e1:a3:dc:58:53:1c:c7:3d:7b:f0:3c:4c:75:
         4f:44:e7:01:af:2a:5c:37:00:80:5e:41:6e:f7:f3:5e:aa:e6:
         15:d4:c4:f0:80:1d:9e:f9:c2:0e:71:5f:8a:f1:c1:66:61:b6:
         ef:f2:0d:7b:b1:e1:09:d8:bc:1a:9d:ba:df:55:8f:bc:2a:30:
         78:72:cf:88:ce:3f:95:9f:9c:9a:7c:b7:a5:89:d4:c4:56:06:
         32:cf:84:80:c9:b2:ac:af:1c:ac:1f:c0:6e:b8:f4:55:d8:0c:
         c7:ae:8b:4e:b3:a0:c2:a0:45:44:3b:cc:1f:ab:b2:62:e3:c7:
         b3:57:a4:23:ac:da:78:02:6e:46:e8:2a:fa:08:f5:5f:0b:0d:
         95:6a:b5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:33 2024 by rpki-client on console-fra.rpki-client.org