Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/5a64de994dcfda7097bbdbaa0a6d6fd21c6c1a4e.roa
File:                     5a64de994dcfda7097bbdbaa0a6d6fd21c6c1a4e.roa (raw, json)
Hash identifier:          TAB4tL/7Ua64MSIOAJwikbh24G11CnLD11qBlNPpnM0=
Subject key identifier:   DF:2D:06:58:38:A7:79:C2:99:24:F8:FA:69:CB:F3:3A:ED:C8:68:FE
Certificate issuer:       /CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
Certificate serial:       24F44D
Authority key identifier: B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/5a64de994dcfda7097bbdbaa0a6d6fd21c6c1a4e.roa
Signing time:             Tue 26 Sep 2023 17:13:00 +0000
ROA not before:           Mon 25 Sep 2023 17:12:48 +0000
ROA not after:            Fri 26 Sep 2025 17:12:48 +0000
asID:                     64110
IP address blocks:        186.101.10.0/23 maxlen: 24
                          186.101.12.0/24 maxlen: 24
                          186.5.20.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2421837 (0x24f44d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
        Validity
            Not Before: Sep 25 17:12:48 2023 GMT
            Not After : Sep 26 17:12:48 2025 GMT
        Subject: CN=5a64de994dcfda7097bbdbaa0a6d6fd21c6c1a4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f2:c5:6d:b4:4e:6b:a6:dc:1b:e4:37:76:2d:
                    3c:2c:c3:93:80:95:d2:00:59:7b:6c:ca:74:5a:ea:
                    f9:2f:6d:d1:21:81:26:81:48:96:50:e5:52:0e:3a:
                    d7:af:f8:5d:7c:76:9b:1a:42:f6:87:fb:fa:5c:a3:
                    70:e7:aa:7b:2b:a6:72:5f:48:a9:26:58:7f:1c:be:
                    15:80:63:9b:60:f4:58:18:84:4c:6b:b8:b1:48:01:
                    8c:4f:73:42:f7:57:ef:ca:af:c1:8c:31:f0:78:d5:
                    a4:ae:67:96:83:b7:19:60:ca:c6:4c:0b:7e:a6:d7:
                    bb:dd:21:cf:3a:9f:39:5e:28:f5:7f:9e:12:c5:21:
                    08:b0:3e:ef:0c:f3:43:06:0f:49:e6:ee:27:ea:43:
                    a9:72:e3:2b:c2:bb:e3:75:66:86:10:e2:21:17:47:
                    52:c3:57:2f:de:d9:63:b7:c0:b5:07:7a:21:89:00:
                    fa:3b:b2:d4:80:0b:23:51:f9:2f:6f:95:8f:15:6e:
                    0c:0a:cd:b1:be:34:a7:77:25:c8:a5:57:c7:f6:cf:
                    db:ff:0a:83:62:25:1b:40:dd:1f:2e:50:be:08:2b:
                    be:49:76:49:55:3d:d2:11:6c:6e:af:c9:e2:c3:0d:
                    aa:f9:62:e9:fb:f9:3d:51:9d:c3:ec:e0:cc:eb:59:
                    09:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:2D:06:58:38:A7:79:C2:99:24:F8:FA:69:CB:F3:3A:ED:C8:68:FE
            X509v3 Authority Key Identifier:
                keyid:B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/5a64de994dcfda7097bbdbaa0a6d6fd21c6c1a4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.5.20.0/24
                  186.101.10.0-186.101.12.255

    Signature Algorithm: sha256WithRSAEncryption
         8c:a2:41:5b:d3:68:f5:1c:44:29:a3:72:fb:fb:ee:bd:77:c9:
         91:b8:61:ee:21:36:c8:10:2a:ab:3d:ca:1e:cd:5f:aa:b4:a8:
         31:d9:d8:74:b8:cb:66:7f:6a:f4:53:9c:21:c1:ca:47:f9:8b:
         61:05:2a:e5:32:87:e1:ba:a5:6f:cd:ea:1e:71:f0:a5:54:f6:
         da:9c:71:05:d3:1a:9e:84:5c:f5:b0:aa:56:1e:bd:e8:a8:32:
         21:32:2f:84:7d:a3:9f:fe:1c:44:9d:69:f2:a4:39:3c:1b:a2:
         04:dc:f6:dd:b6:60:7a:a1:2c:6b:a8:a3:1f:c5:9b:b6:ca:c6:
         c1:a2:04:a9:38:bb:68:57:62:05:9a:51:b0:a1:76:dc:e7:9e:
         c9:d1:fa:47:db:ce:7e:e9:b6:c5:fa:05:aa:0c:c9:14:44:dd:
         c4:f1:80:25:65:1b:6d:89:71:8f:11:95:42:e0:5a:c4:dc:46:
         5f:5d:15:c7:33:43:bf:f1:71:5b:cf:2f:36:4b:c9:9e:1d:00:
         86:b2:99:60:79:cc:2c:4e:ac:11:16:b8:c5:8b:ad:3c:e7:bd:
         23:8e:2a:4f:ab:78:d0:8d:70:2a:f4:48:34:d6:29:1e:6e:2d:
         1b:f0:43:f1:ed:d3:bf:f5:67:33:a9:f2:74:0d:ef:bb:c0:87:
         3e:5c:1e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:11 2024 by rpki-client on console-fra.rpki-client.org