Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/2de56df9c8a7cd2ebba1e2268672317a56295a0c.roa
File:                     2de56df9c8a7cd2ebba1e2268672317a56295a0c.roa (raw, json)
Hash identifier:          2L8YGE9yJmZiRUAmVPbdWr2tfquCgyJQLBJgFxuo/lw=
Subject key identifier:   1B:BB:A3:24:19:40:7E:12:9C:8A:D6:B2:4B:1E:67:93:04:49:CF:8E
Certificate issuer:       /CN=c69b99fc2d2eefbdb75ba663d575a10ac84f78c1
Certificate serial:       1AA66A
Authority key identifier: 26:32:3A:4B:C0:9F:4A:66:92:5C:34:E7:A0:CD:05:9E:A1:ED:05:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/2de56df9c8a7cd2ebba1e2268672317a56295a0c.roa
Signing time:             Mon 03 Oct 2022 19:23:54 +0000
ROA not before:           Mon 03 Oct 2022 19:21:32 +0000
ROA not after:            Thu 03 Oct 2024 20:21:32 +0000
asID:                     6306
IP address blocks:        186.166.0.0/17 maxlen: 17
                          186.166.128.0/20 maxlen: 20
                          186.166.130.0/24 maxlen: 24
                          186.166.131.0/24 maxlen: 24
                          186.166.137.0/24 maxlen: 24
                          186.166.144.0/20 maxlen: 20
                          186.166.146.0/24 maxlen: 24
                          186.166.151.0/24 maxlen: 24
                          186.166.160.0/20 maxlen: 20
                          186.166.176.0/20 maxlen: 20
                          186.166.192.0/20 maxlen: 20
                          186.166.208.0/20 maxlen: 20
                          186.166.224.0/20 maxlen: 20
                          186.166.240.0/20 maxlen: 20
                          186.166.240.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1746538 (0x1aa66a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c69b99fc2d2eefbdb75ba663d575a10ac84f78c1
        Validity
            Not Before: Oct  3 19:21:32 2022 GMT
            Not After : Oct  3 20:21:32 2024 GMT
        Subject: CN=2de56df9c8a7cd2ebba1e2268672317a56295a0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:55:ab:4d:e1:73:69:83:af:52:85:84:9f:ed:
                    8f:6f:8b:48:62:b2:d1:e3:c3:9d:b7:29:7b:d9:fb:
                    3f:2d:27:87:4a:f7:66:91:29:a1:74:40:2f:8b:8d:
                    fd:6d:f5:89:9c:37:70:d6:b4:95:fc:be:52:61:46:
                    4e:12:78:33:18:a9:57:38:aa:bf:af:f8:08:e9:5f:
                    f1:d4:f6:9b:df:3c:08:74:f2:b9:5c:13:22:ad:4f:
                    17:cf:d4:56:00:07:b9:5a:80:b1:a4:9c:64:bc:16:
                    ec:18:51:fd:0f:04:45:30:15:09:6e:6b:07:aa:4c:
                    24:ce:d2:bb:ac:e5:f2:7f:ad:e6:d8:8f:6e:5d:17:
                    a4:75:7a:61:ec:6b:ae:a2:1b:4e:b6:26:c7:b6:52:
                    db:43:48:d8:a0:8c:7c:67:88:51:97:a0:13:46:3f:
                    42:09:47:23:f5:e3:43:fd:50:d6:24:9e:b0:a0:f1:
                    d6:44:5d:20:b7:12:90:3f:38:99:9a:e7:69:37:10:
                    47:b5:32:37:8c:30:62:86:84:f8:5f:eb:b2:02:15:
                    28:87:d3:70:23:00:4c:6a:17:ab:b9:82:1c:5b:81:
                    98:b8:0e:23:7e:88:09:62:81:37:0d:23:11:10:41:
                    8b:7f:e3:32:71:6e:00:07:e1:76:c2:5b:49:2c:bb:
                    cb:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:BB:A3:24:19:40:7E:12:9C:8A:D6:B2:4B:1E:67:93:04:49:CF:8E
            X509v3 Authority Key Identifier:
                keyid:26:32:3A:4B:C0:9F:4A:66:92:5C:34:E7:A0:CD:05:9E:A1:ED:05:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/2de56df9c8a7cd2ebba1e2268672317a56295a0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.166.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         84:87:ad:79:b1:8e:06:7a:3f:53:11:06:64:85:fe:cf:1c:c7:
         90:fb:c7:1b:56:a9:9c:e2:8d:78:b7:2d:47:1b:6f:ff:ae:1d:
         29:e4:54:34:2e:61:4c:ba:83:08:6f:94:a4:93:b0:17:e8:8c:
         55:42:ed:c1:58:52:d0:e3:3d:e1:61:17:b3:1f:9e:76:65:da:
         5e:13:56:31:d8:4b:21:01:cf:a0:d8:c2:fc:ce:16:8a:c8:04:
         0c:21:67:f9:24:e3:a6:b1:ac:6d:77:be:73:95:50:f3:db:ca:
         70:71:ed:5e:3c:9d:ac:03:f0:89:c9:68:bf:58:a3:df:b6:b7:
         35:fa:b8:e8:e3:11:d4:b0:71:0d:98:7e:b2:2a:cc:7a:59:62:
         cb:da:c0:59:68:52:a8:0d:08:ca:37:18:c0:88:8c:c5:ae:45:
         79:56:fc:bd:ed:18:b9:d8:14:17:d0:19:a7:97:b3:f0:e6:a2:
         a2:c9:31:e6:d7:7e:9d:0f:3f:0b:fa:22:ef:7b:54:52:94:ba:
         15:5e:c7:52:00:19:05:1b:ba:17:63:61:11:14:ea:ba:be:f9:
         bd:59:cc:8e:3b:5e:90:35:b2:9b:76:a4:aa:82:33:26:a4:71:
         24:e8:6d:ff:4d:5c:43:ce:49:4b:31:c9:fc:6c:27:aa:1c:7b:
         88:76:5e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:42 2024 by rpki-client on console-ams.rpki-client.org