Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/e46f521f1cd4a28bdac5e6b179b22d5b86b75239.roa
File:                     e46f521f1cd4a28bdac5e6b179b22d5b86b75239.roa (raw, json)
Hash identifier:          og7xuITgHtpdzJX3b+fWZxLRxdEphg2T/MTuCKcIr8w=
Subject key identifier:   0E:80:D1:D6:C7:3F:5E:9C:EB:4F:9F:A7:9E:7A:43:04:35:F5:AE:C4
Certificate issuer:       /CN=c69b99fc2d2eefbdb75ba663d575a10ac84f78c1
Certificate serial:       1AA8E4
Authority key identifier: 26:32:3A:4B:C0:9F:4A:66:92:5C:34:E7:A0:CD:05:9E:A1:ED:05:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/e46f521f1cd4a28bdac5e6b179b22d5b86b75239.roa
Signing time:             Mon 03 Oct 2022 19:27:38 +0000
ROA not before:           Mon 03 Oct 2022 19:23:56 +0000
ROA not after:            Thu 03 Oct 2024 20:23:56 +0000
asID:                     6306
IP address blocks:        186.184.128.0/17 maxlen: 17
                          186.185.0.0/20 maxlen: 20
                          186.185.32.0/20 maxlen: 20
                          186.185.48.0/20 maxlen: 20
                          186.185.16.0/20 maxlen: 20
                          186.185.64.0/20 maxlen: 20
                          186.185.80.0/20 maxlen: 20
                          186.185.96.0/20 maxlen: 20
                          186.185.112.0/20 maxlen: 20
                          186.185.224.0/20 maxlen: 20
                          186.185.240.0/20 maxlen: 20
                          186.185.208.0/20 maxlen: 20
                          186.185.192.0/20 maxlen: 20
                          186.185.176.0/20 maxlen: 20
                          186.185.160.0/20 maxlen: 20
                          186.185.144.0/20 maxlen: 20
                          186.185.128.0/20 maxlen: 20
                          186.186.64.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1747172 (0x1aa8e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c69b99fc2d2eefbdb75ba663d575a10ac84f78c1
        Validity
            Not Before: Oct  3 19:23:56 2022 GMT
            Not After : Oct  3 20:23:56 2024 GMT
        Subject: CN=e46f521f1cd4a28bdac5e6b179b22d5b86b75239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:2d:77:78:c0:27:1c:32:51:96:39:0d:da:78:
                    7c:fe:b6:f2:00:83:f9:3c:6b:d0:a4:b0:00:e4:83:
                    e4:8b:0a:68:e4:5e:5b:46:cf:81:9b:bd:c0:22:c7:
                    81:82:0e:43:cd:49:ed:0e:3e:01:b1:e9:71:cd:2f:
                    e3:44:26:a8:fe:2e:29:9f:ca:9e:85:53:76:f1:5d:
                    97:ea:75:54:ee:59:7b:f2:e8:a0:69:b8:2a:5c:40:
                    dc:3e:d2:23:86:d8:e3:f1:82:9d:24:8e:c8:5e:96:
                    ef:30:19:df:2d:50:24:e9:2b:50:66:9a:7d:86:f5:
                    cc:24:3e:74:ac:cf:4b:91:1e:ef:28:b6:a6:7c:b0:
                    94:ef:ff:5a:30:b2:d8:49:89:80:b7:d3:78:d4:9b:
                    7e:00:e8:0d:6c:f5:6b:9e:c5:bf:f5:3d:a8:1b:51:
                    99:c9:ed:0e:14:01:84:e8:f6:e4:1d:30:90:c7:00:
                    1e:26:f3:eb:84:62:28:f2:14:0b:55:68:e4:2d:af:
                    f6:aa:31:76:fd:a6:33:da:6a:5b:8e:be:9f:a5:8a:
                    9f:66:3f:83:45:6f:4f:f8:02:de:74:90:5e:77:82:
                    77:9a:c7:c8:56:89:c4:a8:52:3c:70:45:ad:74:10:
                    dc:1d:b7:93:34:75:8b:b6:bb:d1:68:84:22:04:fc:
                    b6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:80:D1:D6:C7:3F:5E:9C:EB:4F:9F:A7:9E:7A:43:04:35:F5:AE:C4
            X509v3 Authority Key Identifier:
                keyid:26:32:3A:4B:C0:9F:4A:66:92:5C:34:E7:A0:CD:05:9E:A1:ED:05:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/e46f521f1cd4a28bdac5e6b179b22d5b86b75239.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.184.128.0-186.185.255.255
                  186.186.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         71:7e:25:2c:27:58:68:e2:dd:6d:5c:21:e1:b8:08:7a:a2:e9:
         4b:0c:81:f4:61:07:47:80:f0:ca:03:bf:d9:14:b6:29:e8:55:
         8b:a2:4f:b3:be:05:d1:d9:01:d7:21:c8:87:8f:ba:cf:a0:25:
         08:9f:a5:24:42:77:9a:40:3e:4f:13:53:8b:c0:73:ae:62:e5:
         b6:78:1f:72:fd:1d:ca:53:e3:5c:5b:28:4d:fa:5b:52:61:5a:
         38:00:73:b4:4e:63:11:ff:60:0b:fa:ab:7e:b6:d5:f1:de:9a:
         6f:3f:d9:fd:9c:f9:79:d3:0f:89:58:65:d6:d7:13:7e:f5:71:
         ba:00:e8:38:01:3a:74:39:e8:fd:bd:89:6b:4f:e2:a7:a9:1a:
         0f:a4:f9:7e:a6:04:e1:d4:a6:81:fc:dc:a6:68:9f:4a:cc:68:
         59:c5:7c:0b:ff:68:92:4d:b6:85:05:73:6c:49:3c:8c:10:43:
         bd:8c:cc:14:0d:6c:d4:ea:f5:11:5f:4a:b0:c6:e4:19:d0:91:
         9e:73:3a:21:9e:ba:3f:cf:f0:58:d1:9f:75:d5:ac:8e:43:8f:
         cc:a2:af:01:a5:96:da:ad:78:25:75:67:97:57:b4:5d:5a:1a:
         d3:19:15:fb:9e:2e:72:1c:a4:16:50:27:db:ac:94:57:f1:4b:
         33:80:e2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:12 2024 by rpki-client on console-fra.rpki-client.org