Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/677a166b31e25d9752d9a12aa2c7a4619bf12246.roa
File:                     677a166b31e25d9752d9a12aa2c7a4619bf12246.roa (raw, json)
Hash identifier:          QBtofA7EblkgcfSYWRFdzUGojP69abfAwm9aU3O7OAQ=
Subject key identifier:   1E:D8:77:7C:96:B4:8D:E9:77:75:93:17:D2:5C:77:0F:04:64:0B:47
Certificate issuer:       /CN=c69b99fc2d2eefbdb75ba663d575a10ac84f78c1
Certificate serial:       255B81
Authority key identifier: 26:32:3A:4B:C0:9F:4A:66:92:5C:34:E7:A0:CD:05:9E:A1:ED:05:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/677a166b31e25d9752d9a12aa2c7a4619bf12246.roa
Signing time:             Fri 17 Nov 2023 21:34:33 +0000
ROA not before:           Fri 17 Nov 2023 21:34:33 +0000
ROA not after:            Mon 17 Nov 2025 21:34:33 +0000
asID:                     6306
IP address blocks:        186.24.4.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2448257 (0x255b81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c69b99fc2d2eefbdb75ba663d575a10ac84f78c1
        Validity
            Not Before: Nov 17 21:34:33 2023 GMT
            Not After : Nov 17 21:34:33 2025 GMT
        Subject: CN=677a166b31e25d9752d9a12aa2c7a4619bf12246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:99:de:bd:90:c0:74:4d:07:86:cf:b7:0f:93:
                    01:8a:5c:3a:97:01:d4:24:fa:1a:c7:d4:51:a4:0d:
                    ed:71:6e:3b:bd:c3:d3:27:12:a6:a1:4a:a7:5f:ee:
                    84:9d:a6:f3:cc:27:66:66:8d:db:1e:db:ce:f8:20:
                    f1:4b:93:22:ce:6f:07:22:23:fb:0a:2b:d1:99:ef:
                    6a:06:17:df:7e:32:0b:5f:2e:c0:3e:c7:70:21:9c:
                    1c:2f:30:cf:b9:72:b1:f0:ba:8a:76:12:98:30:21:
                    85:7b:ce:65:eb:aa:b1:29:95:5c:f4:06:1b:6f:37:
                    a4:2b:74:e2:a1:4d:86:71:f3:9a:93:e9:5d:c3:34:
                    df:e1:13:f0:a7:0d:28:5c:da:62:40:82:a5:e1:a2:
                    a9:b0:92:d9:52:89:8b:bc:f5:ba:8d:92:bb:6e:60:
                    a8:b3:dd:a8:f3:55:e4:7f:f1:d6:5c:c2:4b:9e:fb:
                    9a:28:fa:3b:ac:01:a3:85:fe:e1:3d:7c:09:14:28:
                    1a:34:89:e6:73:c9:f8:19:bd:63:ee:df:9d:dc:60:
                    d5:12:fe:23:31:db:0b:db:37:c4:fd:80:f3:38:18:
                    45:a0:33:19:0c:b5:53:de:79:2b:da:e2:92:88:3f:
                    3b:5d:ae:1f:0a:b8:b2:40:b1:31:55:80:7d:d4:11:
                    8b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:D8:77:7C:96:B4:8D:E9:77:75:93:17:D2:5C:77:0F:04:64:0B:47
            X509v3 Authority Key Identifier:
                keyid:26:32:3A:4B:C0:9F:4A:66:92:5C:34:E7:A0:CD:05:9E:A1:ED:05:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/677a166b31e25d9752d9a12aa2c7a4619bf12246.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.24.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:11:90:4f:54:21:b0:a3:a2:c0:d8:fc:bd:e9:fd:26:e1:e5:
         a4:df:9a:7b:4d:d2:bd:e5:03:1d:a9:90:27:3b:0a:66:72:d7:
         fc:a9:c2:3f:ce:83:76:e5:6a:4b:5c:b3:8b:b6:21:e3:b7:2b:
         74:e8:13:ab:6e:fd:b7:cc:89:7c:88:07:7e:fb:37:3f:52:67:
         ce:f6:65:29:9d:c0:be:d3:7a:0e:b8:69:00:ff:62:93:0b:f6:
         be:7b:7b:37:99:28:97:82:28:29:d4:ee:6e:bd:3a:9f:0d:87:
         ad:dd:d9:d8:1d:06:7b:d5:e5:9c:cd:3e:16:97:fe:95:56:3c:
         d7:65:26:8a:ff:c2:9c:3c:ed:ca:20:98:7b:a5:50:e2:dc:25:
         8e:31:b4:cb:4a:82:13:d7:84:1e:93:55:1f:f0:10:57:f6:b3:
         3c:39:c5:de:0e:02:4e:5a:3b:2c:cc:17:ef:f8:77:c9:e0:0d:
         48:73:00:ab:f9:29:d5:a2:42:7c:35:9f:bf:22:2f:17:e1:52:
         94:71:af:50:cc:c6:9e:57:f0:4b:18:c7:d7:67:99:a2:eb:01:
         2b:51:82:00:32:d7:9a:bd:87:77:08:8d:b8:11:86:22:c7:58:
         40:4f:43:31:14:80:2b:6b:a9:12:50:68:73:e8:05:31:76:f6:
         41:c3:a2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:53 2024 by rpki-client on console-ams.rpki-client.org