Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4f13700-0ba9-4c2c-ade6-64eeed608289/b3152d44f14112ad5e614d796df8049f168efb49.roa
File:                     b3152d44f14112ad5e614d796df8049f168efb49.roa (raw, json)
Hash identifier:          adsWRutdovA27xhGpfeaCruGpL91ibFVkJ7Mz47waFs=
Subject key identifier:   DE:46:7B:48:E7:4B:40:F7:F4:46:7A:3D:62:78:FD:BF:0E:12:37:D7
Certificate issuer:       /CN=6a6637de6bf2a233d64c6541e547859959ef0b1b
Certificate serial:       1A67BF
Authority key identifier: 8C:CB:A9:78:C7:14:A1:20:DA:75:EC:FF:46:3A:C0:82:3C:61:E5:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a6637de6bf2a233d64c6541e547859959ef0b1b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4f13700-0ba9-4c2c-ade6-64eeed608289/b3152d44f14112ad5e614d796df8049f168efb49.roa
Signing time:             Tue 30 May 2023 17:34:18 +0000
ROA not before:           Mon 29 May 2023 17:34:18 +0000
ROA not after:            Fri 30 May 2025 17:34:18 +0000
asID:                     19905
IP address blocks:        186.0.152.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1730495 (0x1a67bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a6637de6bf2a233d64c6541e547859959ef0b1b
        Validity
            Not Before: May 29 17:34:18 2023 GMT
            Not After : May 30 17:34:18 2025 GMT
        Subject: CN=b3152d44f14112ad5e614d796df8049f168efb49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ed:7e:f3:92:8c:3e:6d:66:9e:9c:6a:fd:a3:
                    50:16:78:90:fe:5a:78:3a:21:99:2f:ad:68:0e:1a:
                    90:28:30:2b:4f:ed:7d:bc:17:11:8d:14:1e:fe:66:
                    0a:5f:32:61:e2:2f:57:66:d9:7d:fa:0a:0f:e7:f9:
                    3a:ea:0d:c6:cc:59:6e:54:0b:0e:53:a1:b7:2c:1f:
                    25:3c:66:99:af:af:86:75:3c:13:4c:8a:05:8a:34:
                    93:b8:52:10:38:0f:6a:72:ed:f4:39:c2:2b:1f:fe:
                    14:4a:d5:73:37:40:8d:7f:62:e9:b7:28:d1:24:60:
                    0d:d2:b3:be:51:5a:7a:d1:27:ea:37:9e:c3:23:3d:
                    b6:4d:66:19:ca:09:14:a5:b7:31:d8:1a:73:20:35:
                    e8:ce:8f:1a:5a:10:f5:b9:b8:0d:50:b4:ca:ee:1d:
                    11:98:45:85:6d:a1:c2:b1:86:08:07:53:24:c4:50:
                    aa:7e:d8:0a:b5:97:85:a7:31:08:aa:ab:6e:47:22:
                    e1:a3:0e:a4:4d:2b:08:22:27:89:ed:e0:ba:bc:39:
                    92:2e:82:f2:3a:bd:bb:6b:79:da:1a:13:df:35:27:
                    52:2a:54:2c:92:68:14:e4:3c:bb:d2:37:86:7b:05:
                    00:7d:3b:a4:78:d6:29:cc:5b:6d:d4:17:61:6c:5a:
                    d1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:46:7B:48:E7:4B:40:F7:F4:46:7A:3D:62:78:FD:BF:0E:12:37:D7
            X509v3 Authority Key Identifier:
                keyid:8C:CB:A9:78:C7:14:A1:20:DA:75:EC:FF:46:3A:C0:82:3C:61:E5:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a6637de6bf2a233d64c6541e547859959ef0b1b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4f13700-0ba9-4c2c-ade6-64eeed608289/b3152d44f14112ad5e614d796df8049f168efb49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4f13700-0ba9-4c2c-ade6-64eeed608289/6a6637de6bf2a233d64c6541e547859959ef0b1b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.0.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:0c:5a:16:db:1d:25:73:67:f6:eb:a8:14:d4:fb:1a:01:f2:
         8f:a5:5b:04:d5:d7:74:63:8c:eb:7a:da:07:02:4e:6a:b4:cc:
         8c:76:1d:1f:d5:43:17:ec:a6:09:99:bb:a6:e8:dc:73:0c:aa:
         7a:51:3c:2b:4a:d9:9d:27:7c:48:40:cd:e4:f7:06:8e:15:2c:
         13:33:1d:1c:b5:1c:73:a6:fa:0e:21:0d:47:c9:77:08:bd:85:
         6b:e3:fd:6b:8e:7f:4c:fb:fd:4e:72:1c:ef:98:ba:f4:e0:e7:
         59:52:29:98:66:c8:95:4d:02:0c:f0:16:cc:5a:60:60:7a:28:
         5a:31:1c:c0:06:2a:0f:d6:22:80:f3:b6:42:8e:60:e1:35:e3:
         10:c4:02:b6:38:a8:9c:86:a2:34:f1:bb:ce:27:e3:b1:8e:d9:
         f4:2c:ae:4b:60:d9:18:9b:1a:a7:29:98:04:33:c8:75:34:f6:
         0d:14:39:5c:60:05:2c:11:2a:09:a5:8d:b4:47:92:e5:7b:ed:
         ed:6c:ae:01:63:d5:b1:92:04:7b:6c:bd:df:17:25:8c:4c:d4:
         df:4b:d6:30:4d:95:8e:80:cd:e7:ef:77:09:11:ab:d1:52:e6:
         06:d1:7a:58:1e:6e:23:bd:ec:30:80:80:9e:a0:08:34:79:a3:
         26:6e:45:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:50 2024 by rpki-client on console-ams.rpki-client.org