Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/fd50ca792ff05c8d0317eb83f0317863b45b6970.roa
File:                     fd50ca792ff05c8d0317eb83f0317863b45b6970.roa (raw, json)
Hash identifier:          phLsF1WzgL5sTSxyAveBBg4bfL61AT8ciVeh37fMgQ8=
Subject key identifier:   8A:69:E9:0B:21:5E:5D:39:10:9C:CD:0C:24:C9:D8:3A:6E:36:99:5E
Certificate issuer:       /CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
Certificate serial:       24FEF9
Authority key identifier: B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/fd50ca792ff05c8d0317eb83f0317863b45b6970.roa
Signing time:             Tue 26 Sep 2023 17:13:25 +0000
ROA not before:           Mon 25 Sep 2023 17:12:48 +0000
ROA not after:            Fri 26 Sep 2025 17:12:48 +0000
asID:                     264668
IP address blocks:        186.101.10.0/24 maxlen: 24
                          186.3.6.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2424569 (0x24fef9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
        Validity
            Not Before: Sep 25 17:12:48 2023 GMT
            Not After : Sep 26 17:12:48 2025 GMT
        Subject: CN=fd50ca792ff05c8d0317eb83f0317863b45b6970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:88:73:76:33:a0:a9:4e:69:2b:15:88:1c:48:
                    86:ad:25:07:9c:0e:84:4e:06:aa:1b:10:42:0a:a0:
                    6c:3b:2c:70:2c:5e:80:30:cf:97:57:da:37:ac:2c:
                    b1:aa:54:e5:c1:ca:d5:88:58:c4:d4:70:12:3d:d8:
                    d7:eb:1f:3c:6d:8d:13:7d:4f:49:f2:11:4f:39:ad:
                    e0:6e:f8:a3:a6:46:6f:9b:bc:a6:41:6a:2e:29:27:
                    cd:83:80:f1:66:b4:50:9c:a6:22:ce:e0:db:fd:2a:
                    65:93:eb:ed:7a:70:01:87:1e:ed:8e:bc:34:2a:b4:
                    c0:b3:60:ea:b2:73:c5:7d:7c:03:97:8a:cd:19:aa:
                    8e:89:59:84:e0:19:ea:78:ec:a3:a2:fb:8f:c7:31:
                    1f:71:0d:bf:f3:da:dd:d4:65:f4:87:20:b6:d5:4b:
                    f9:ef:bb:a3:27:8e:67:c0:e3:7e:a9:88:93:30:d5:
                    69:03:6f:98:25:ef:b3:11:2c:cc:dd:6c:12:fa:4c:
                    9e:b1:ef:83:ea:5f:68:94:d7:82:40:31:6a:54:3f:
                    13:76:ed:30:12:fc:82:90:a3:f8:fc:c1:14:e6:50:
                    ce:f7:db:85:ba:6e:79:8f:cb:16:62:6a:9f:91:02:
                    c5:89:99:ec:9d:c3:4c:2c:db:9e:48:bd:1e:e7:d2:
                    ea:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:69:E9:0B:21:5E:5D:39:10:9C:CD:0C:24:C9:D8:3A:6E:36:99:5E
            X509v3 Authority Key Identifier:
                keyid:B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/fd50ca792ff05c8d0317eb83f0317863b45b6970.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.3.6.0/24
                  186.101.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:08:8f:b4:6f:b4:2b:eb:30:2f:e0:e0:69:ff:7d:f1:bd:0b:
         4e:c8:f4:2f:b2:0f:5b:29:5f:73:56:86:6c:74:f6:ff:d0:7f:
         24:21:00:98:c7:dd:51:32:fa:f7:ee:8d:43:53:0f:ae:25:92:
         a3:7c:2e:9d:c5:53:21:65:2a:e5:fb:90:f2:00:c4:b9:98:db:
         55:63:e5:45:e9:96:fe:29:82:12:67:e1:8d:03:04:32:92:9d:
         1a:ee:cf:8d:30:42:ba:64:e2:d1:7a:03:48:92:77:f4:0a:a5:
         54:79:9c:9d:ba:c8:51:73:38:45:12:10:e9:dd:7c:55:9c:cc:
         bd:5e:ea:72:d6:cc:d1:28:15:81:6f:6c:d7:f3:a6:5b:a8:ed:
         71:0a:46:88:5f:87:d0:2b:d9:75:94:af:ec:4b:bc:95:e1:b7:
         af:5a:fe:f9:e8:ee:5d:8d:ed:d6:ec:71:ef:b0:35:10:43:ac:
         5f:f7:68:2a:42:8f:54:34:6a:1c:fd:11:5d:9a:b6:3e:c6:fb:
         fb:3b:68:10:9e:31:e8:4f:08:a7:1f:d7:fd:38:cf:2f:70:8a:
         3c:fc:bf:3c:36:44:dc:8a:9d:8b:fe:f6:68:a7:76:8c:43:14:
         b0:bf:d9:2f:f6:83:6e:3a:24:d4:53:a5:6f:91:35:9c:1d:a8:
         cb:9b:d8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:53 2024 by rpki-client on console-ams.rpki-client.org