Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/89b6532ee69d24bf998bd150f2955ac3999d8f21.roa
File:                     89b6532ee69d24bf998bd150f2955ac3999d8f21.roa (raw, json)
Hash identifier:          80KPHZVSSspFbQ2XYfNU/NfUfa5ZTWOFfoZU/nX8+hE=
Subject key identifier:   E4:B2:24:D0:41:80:13:C1:11:D6:71:C0:BA:9B:4A:09:0C:76:E8:8F
Certificate issuer:       /CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
Certificate serial:       24DEA3
Authority key identifier: B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/89b6532ee69d24bf998bd150f2955ac3999d8f21.roa
Signing time:             Tue 26 Sep 2023 17:12:52 +0000
ROA not before:           Mon 25 Sep 2023 17:12:48 +0000
ROA not after:            Fri 26 Sep 2025 17:12:48 +0000
asID:                     22724
IP address blocks:        186.101.9.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2416291 (0x24dea3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
        Validity
            Not Before: Sep 25 17:12:48 2023 GMT
            Not After : Sep 26 17:12:48 2025 GMT
        Subject: CN=89b6532ee69d24bf998bd150f2955ac3999d8f21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5f:6f:e5:4b:70:c9:7f:78:f5:9f:0b:cb:10:
                    c9:ed:5b:ce:bf:de:1e:b7:b6:92:20:81:22:c7:69:
                    7f:9b:6c:e8:40:0a:cc:1d:7d:92:8c:08:84:b0:23:
                    23:db:35:1d:79:11:66:42:4a:3d:b1:dc:57:61:e2:
                    55:80:60:81:2a:01:6e:16:89:64:23:7e:e4:2e:84:
                    f7:3c:31:08:41:e2:80:81:09:c6:ff:4a:b5:59:b6:
                    2e:8f:1d:95:a0:36:ec:86:58:ea:95:fb:d3:e6:22:
                    58:d1:70:21:ad:c6:a6:9b:d2:1d:01:d0:82:3d:70:
                    e6:27:73:5c:46:77:68:1f:3b:e9:30:28:66:d8:97:
                    31:9e:73:88:3b:f7:53:df:17:f3:06:22:02:2d:e1:
                    57:75:fa:80:54:14:2f:51:65:6d:d6:1f:95:54:2e:
                    0e:a7:55:b1:69:64:15:d0:b5:70:e5:b1:ce:e2:39:
                    aa:27:1f:37:0b:46:6f:87:a5:3e:fe:61:b4:ee:9f:
                    19:ac:9c:a3:94:20:82:7a:5a:3f:90:27:ab:1c:7a:
                    79:78:54:cc:5e:b2:04:ab:15:95:80:ee:8b:0e:76:
                    bf:05:a4:b7:e3:7a:96:65:94:13:87:19:73:17:8f:
                    a8:6d:87:5e:bc:00:f7:af:14:bc:7c:7c:d4:34:30:
                    f1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B2:24:D0:41:80:13:C1:11:D6:71:C0:BA:9B:4A:09:0C:76:E8:8F
            X509v3 Authority Key Identifier:
                keyid:B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/89b6532ee69d24bf998bd150f2955ac3999d8f21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.101.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:61:66:22:e1:9c:07:2b:c8:7f:2b:c8:4a:5f:2d:31:78:75:
         08:08:aa:b8:97:c1:3c:4f:23:18:8f:ad:3a:1c:8e:66:33:4d:
         e6:4f:e7:69:92:7b:cb:95:2d:b0:1a:99:a9:57:25:68:01:62:
         3e:e5:18:9c:ed:e0:e8:4f:5b:47:d4:14:c1:39:18:2a:f8:27:
         6c:5d:93:49:f6:93:fa:c1:4a:d5:44:6a:67:51:2d:be:8a:94:
         14:88:c3:3e:5d:ff:d1:4f:0c:8b:90:c9:fc:ba:ea:27:76:1c:
         8d:9c:71:67:fe:e5:a3:de:5f:91:f1:02:1e:5f:8d:51:32:9e:
         36:d7:26:8f:75:99:a4:c7:15:7c:e4:63:ce:b3:d8:ce:1a:dd:
         de:02:b4:05:19:5d:5a:62:72:18:35:8b:63:a9:2a:e1:0e:79:
         41:19:15:df:81:16:dc:b4:9e:3c:2b:4c:17:4f:5d:75:86:73:
         91:0a:d8:a7:d7:f2:c2:bf:c9:a1:22:ff:74:22:bf:2a:6e:45:
         4d:8b:36:12:07:6a:50:d5:b5:a3:8d:95:af:01:23:f7:7e:23:
         98:5d:2a:3a:b7:41:8a:ad:0e:6d:66:f1:5e:77:75:40:86:a9:
         3c:8b:9d:1b:43:10:4a:45:97:cb:fb:e0:76:82:92:a4:d5:5a:
         5d:64:4d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org