Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e88b7959-c9d1-4871-85ef-a042c98b1996/2a2c194fb032ba4b9fb341f9ddd0298e1b6a34f0.roa
File:                     2a2c194fb032ba4b9fb341f9ddd0298e1b6a34f0.roa (raw, json)
Hash identifier:          U7pFyOmuNL0Do4i9e2qw/hYwDOUJnwNA7dCdZ5UE0Q8=
Subject key identifier:   F7:4B:05:4F:E1:41:7B:08:D9:5D:EF:1C:29:56:44:57:93:5F:80:CB
Certificate issuer:       /CN=32b7dede0ee425fb7f77655ae699df21e4d9273b
Certificate serial:       0E0303
Authority key identifier: 8E:4C:F3:18:96:14:32:80:C7:4E:47:1C:52:24:2B:74:70:DA:79:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32b7dede0ee425fb7f77655ae699df21e4d9273b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e88b7959-c9d1-4871-85ef-a042c98b1996/2a2c194fb032ba4b9fb341f9ddd0298e1b6a34f0.roa
Signing time:             Tue 09 Jan 2024 01:35:50 +0000
ROA not before:           Tue 09 Jan 2024 01:35:49 +0000
ROA not after:            Fri 09 Jan 2026 01:35:49 +0000
asID:                     270080
IP address blocks:        186.195.247.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 918275 (0xe0303)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32b7dede0ee425fb7f77655ae699df21e4d9273b
        Validity
            Not Before: Jan  9 01:35:49 2024 GMT
            Not After : Jan  9 01:35:49 2026 GMT
        Subject: CN=2a2c194fb032ba4b9fb341f9ddd0298e1b6a34f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:de:bb:9e:aa:e7:24:c4:d4:e9:c0:2a:44:7b:
                    11:3d:38:24:25:cf:6d:b0:e4:2f:21:32:1e:c9:b1:
                    7b:4a:3a:68:72:29:16:b6:fe:0f:1e:0d:98:05:ef:
                    da:bc:71:e3:84:30:35:11:09:33:55:44:5a:1e:1c:
                    5f:12:1c:2d:42:9e:69:04:6f:d1:a4:26:02:85:63:
                    86:93:e1:1b:f6:0c:93:63:94:87:81:28:bc:8e:a4:
                    b3:1c:52:45:ab:b4:cf:ac:ad:90:ee:d6:1a:d2:3b:
                    d1:38:34:12:df:1d:e9:31:ca:35:a5:24:04:a7:de:
                    40:d8:24:13:d9:54:df:81:05:8b:9f:ea:c6:7f:ec:
                    32:f7:45:89:50:40:f3:c2:5a:5a:bd:6f:0d:74:fd:
                    bd:12:6b:f8:39:64:15:71:da:0d:ed:c5:90:04:f8:
                    ab:0b:ce:82:97:68:be:89:e3:fc:5f:01:d6:7b:34:
                    c9:da:d0:4b:d1:a0:fe:c0:6a:1a:df:d8:cc:f2:1a:
                    31:e5:38:25:1c:1c:ab:f7:38:6e:95:73:85:f8:8a:
                    7b:1e:4e:10:b1:9c:1d:43:1a:3b:64:14:fc:57:b5:
                    9d:4c:c3:2b:b5:34:ba:b1:9a:f2:0d:3e:c5:bb:9a:
                    bf:73:f5:a1:15:43:a1:21:e8:90:da:7d:49:0c:fb:
                    e5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:4B:05:4F:E1:41:7B:08:D9:5D:EF:1C:29:56:44:57:93:5F:80:CB
            X509v3 Authority Key Identifier:
                keyid:8E:4C:F3:18:96:14:32:80:C7:4E:47:1C:52:24:2B:74:70:DA:79:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32b7dede0ee425fb7f77655ae699df21e4d9273b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e88b7959-c9d1-4871-85ef-a042c98b1996/2a2c194fb032ba4b9fb341f9ddd0298e1b6a34f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e88b7959-c9d1-4871-85ef-a042c98b1996/32b7dede0ee425fb7f77655ae699df21e4d9273b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:a1:a9:8b:03:d1:67:75:6d:b2:0d:cd:b0:9e:90:56:5a:e7:
         dc:fe:eb:02:6e:fd:79:07:f4:3f:98:0c:fa:6f:83:90:17:8a:
         f1:01:bf:c7:60:06:17:e0:94:4e:ef:89:53:2f:a1:6b:23:dd:
         72:d3:61:2a:57:44:ac:f4:ec:0f:34:ed:e9:e2:05:b7:46:32:
         69:f9:18:e2:4f:30:06:84:ab:57:67:70:4d:8b:c2:ca:8f:20:
         bc:7a:c9:dd:81:15:91:b1:a8:8b:06:07:e6:c1:e0:b0:be:da:
         e9:b7:9b:22:2e:9c:77:2d:e6:44:14:89:2e:ce:47:f4:78:a5:
         85:6c:bd:f7:e0:0b:0d:6c:e7:a2:13:b4:89:90:1f:61:2f:ad:
         80:09:16:b1:33:ae:53:79:ec:41:e1:e8:91:16:71:d6:41:75:
         7f:a2:64:58:7d:fb:ae:09:4b:0d:8b:4d:e0:05:a9:78:49:c4:
         79:9e:5d:0a:a9:16:ed:c1:f8:92:17:0f:92:6b:aa:2d:87:ff:
         2b:a0:5f:18:72:fa:5d:0b:b3:47:d5:d9:39:4b:a1:7a:61:fd:
         36:0d:20:23:1f:d3:bc:99:37:0c:6b:30:05:5d:c4:ab:48:18:
         c0:29:8d:47:2c:f6:5c:ae:cc:63:c8:fa:54:46:46:7e:48:99:
         c2:99:14:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:41 2024 by rpki-client on console-ams.rpki-client.org