Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/cfceea414086456f97836587dd27e746c7b03b44.roa
File:                     cfceea414086456f97836587dd27e746c7b03b44.roa (raw, json)
Hash identifier:          iD8f2T+tYlguasNpeZHxUR9Ai9TXVGW26bcO2yLHSwM=
Subject key identifier:   0A:D9:24:32:06:D1:66:82:1A:36:8C:A8:3D:7F:94:FD:B3:49:11:2B
Certificate issuer:       /CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
Certificate serial:       24D545
Authority key identifier: B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/cfceea414086456f97836587dd27e746c7b03b44.roa
Signing time:             Tue 26 Sep 2023 17:12:50 +0000
ROA not before:           Mon 25 Sep 2023 17:12:48 +0000
ROA not after:            Fri 26 Sep 2025 17:12:48 +0000
asID:                     28097
IP address blocks:        186.3.30.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2413893 (0x24d545)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
        Validity
            Not Before: Sep 25 17:12:48 2023 GMT
            Not After : Sep 26 17:12:48 2025 GMT
        Subject: CN=cfceea414086456f97836587dd27e746c7b03b44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1e:35:9b:0c:5d:7c:bf:24:09:a7:c8:31:d5:
                    18:ad:53:35:01:e0:ce:d1:da:a8:51:78:05:7f:c1:
                    65:1d:56:d2:ad:10:e5:ab:36:76:76:82:00:d0:52:
                    4f:04:44:94:11:ee:ee:8e:a0:ff:4d:64:a7:28:0d:
                    47:17:ee:83:df:c8:2d:11:df:26:20:17:ff:e3:d8:
                    d9:32:39:e5:74:1d:69:ff:d4:fa:37:cb:77:d3:c3:
                    58:57:6d:b9:12:fc:2f:52:08:ba:d2:a3:e0:77:63:
                    64:43:68:1d:36:99:e0:dd:af:53:ef:91:66:83:d4:
                    33:17:ac:22:db:8f:c0:09:df:a6:f4:d0:c2:96:89:
                    55:f7:bb:20:61:48:da:18:0b:a6:99:27:60:e4:b4:
                    59:84:bf:67:ab:8d:be:6b:48:6e:d0:fb:9b:f3:6a:
                    ee:0f:47:c6:61:05:94:26:20:c2:e9:36:81:91:1e:
                    ab:00:cc:f7:03:ee:fb:27:d1:5e:2b:4a:86:dc:41:
                    f8:d5:67:87:d8:8a:30:39:77:5e:0e:2a:4a:26:4a:
                    92:96:55:5b:01:12:ac:02:8a:bd:07:bb:68:40:1d:
                    1c:b9:46:a2:07:10:49:d1:5d:c1:52:f2:a0:e1:61:
                    af:1a:09:bc:d6:da:21:86:1c:67:28:c3:c6:25:f6:
                    b9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:D9:24:32:06:D1:66:82:1A:36:8C:A8:3D:7F:94:FD:B3:49:11:2B
            X509v3 Authority Key Identifier:
                keyid:B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/cfceea414086456f97836587dd27e746c7b03b44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.3.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:4c:e5:01:f3:5d:8b:0b:e7:67:10:d0:45:2f:db:72:f2:ce:
         b0:3e:de:97:2e:b7:c5:ef:1c:9e:eb:87:66:2c:08:43:da:00:
         8c:1a:d4:b6:7b:e6:c1:b7:93:25:75:87:df:ea:cc:7e:75:bd:
         49:c9:a1:d3:82:e4:ef:62:67:b3:5d:c5:27:d2:d5:84:a9:14:
         d5:20:5e:3b:a9:8d:0f:75:14:56:a7:63:28:d6:80:dd:a7:4d:
         46:41:0b:c7:7e:af:0e:e5:5b:95:d5:e4:8d:de:92:4e:53:9b:
         d1:aa:48:26:53:47:40:db:6d:a9:7d:ce:03:c8:18:41:89:cb:
         6c:50:49:cf:e2:ec:95:98:cc:2c:22:4f:96:07:7e:66:23:3c:
         be:dc:ba:1c:ea:ab:95:98:c9:80:3c:90:e9:ac:96:f5:b9:bc:
         f3:9c:80:3e:63:60:89:14:b8:af:84:11:cb:f8:c1:8e:e3:ae:
         49:c7:84:e6:bc:17:04:45:52:2c:b3:90:31:11:38:8a:d8:1f:
         86:93:c4:7b:67:b5:76:a6:58:c6:3a:28:67:d0:30:4d:72:82:
         ec:a0:05:3a:5d:ba:0c:d0:0f:ec:ea:4a:16:28:cf:0a:b6:b2:
         d1:35:05:32:8b:35:59:c2:bb:d1:37:1a:f3:f9:83:f5:ca:57:
         3d:fd:79:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:53 2024 by rpki-client on console-ams.rpki-client.org