Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fce6f632-bd33-44ba-8d5a-413ec4af59fc/0c698cd0b0c93c52d75dfda592382496b0fe239a.roa
File:                     0c698cd0b0c93c52d75dfda592382496b0fe239a.roa (raw, json)
Hash identifier:          RR8944R9NPsppHaDiAyCON8PjnME5GWG/hy+9/KfsY4=
Subject key identifier:   46:31:0E:88:D2:1A:06:0A:C3:E6:B4:5F:1C:83:8A:4D:93:A6:C9:45
Certificate issuer:       /CN=6de3b6ab985c62f7bde582620020b65073aceec8
Certificate serial:       22F2FE
Authority key identifier: D8:E5:77:6F:5E:C3:EC:8B:3F:27:2B:63:F3:03:DA:37:C5:97:6D:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6de3b6ab985c62f7bde582620020b65073aceec8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fce6f632-bd33-44ba-8d5a-413ec4af59fc/0c698cd0b0c93c52d75dfda592382496b0fe239a.roa
Signing time:             Mon 11 Sep 2023 20:32:36 +0000
ROA not before:           Sun 10 Sep 2023 20:32:36 +0000
ROA not after:            Thu 11 Sep 2025 20:32:36 +0000
asID:                     394684
IP address blocks:        186.96.64.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2290430 (0x22f2fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6de3b6ab985c62f7bde582620020b65073aceec8
        Validity
            Not Before: Sep 10 20:32:36 2023 GMT
            Not After : Sep 11 20:32:36 2025 GMT
        Subject: CN=0c698cd0b0c93c52d75dfda592382496b0fe239a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:92:c3:4e:ab:56:00:97:f3:ca:3d:e3:71:cc:
                    f3:bb:5e:ab:81:34:d0:d6:22:e9:72:48:23:f4:1a:
                    84:92:95:ac:98:44:36:33:56:57:ef:12:f1:a3:e5:
                    71:39:1e:43:06:7a:99:41:2e:2f:96:cb:60:d4:3d:
                    c7:db:de:fa:70:02:5b:0a:05:fa:d8:a9:8a:8a:a4:
                    e7:a4:1c:7b:3f:43:1b:52:b0:af:39:a4:d0:74:47:
                    0f:74:1d:17:c5:d3:f0:4f:91:ef:50:04:fc:63:aa:
                    e9:ce:30:1c:43:0e:a5:44:22:12:e6:d8:48:f1:96:
                    6e:ce:ab:cd:24:08:dc:c3:68:4f:c0:bd:2a:bb:16:
                    af:5a:ec:59:51:e1:59:61:21:ef:4a:a2:ab:4c:97:
                    85:d3:d0:32:ef:dc:be:b2:5b:1b:2f:61:a1:42:a9:
                    1f:b1:65:58:ce:54:d8:73:72:42:4d:05:aa:f8:f0:
                    1e:68:f0:e0:9b:e7:58:ea:68:4d:5e:73:4d:49:a7:
                    96:0c:12:bf:5a:5f:3a:a4:d6:83:c3:1d:17:ca:32:
                    f8:8e:54:2f:80:f4:dd:c7:81:59:2e:e8:ee:db:c9:
                    b1:f2:7e:e1:fb:cb:c4:97:9d:13:1d:20:7a:bf:91:
                    47:ac:64:4f:a9:f3:56:42:5d:48:22:19:2e:2b:9f:
                    1e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:31:0E:88:D2:1A:06:0A:C3:E6:B4:5F:1C:83:8A:4D:93:A6:C9:45
            X509v3 Authority Key Identifier:
                keyid:D8:E5:77:6F:5E:C3:EC:8B:3F:27:2B:63:F3:03:DA:37:C5:97:6D:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6de3b6ab985c62f7bde582620020b65073aceec8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fce6f632-bd33-44ba-8d5a-413ec4af59fc/0c698cd0b0c93c52d75dfda592382496b0fe239a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fce6f632-bd33-44ba-8d5a-413ec4af59fc/6de3b6ab985c62f7bde582620020b65073aceec8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.96.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         80:bd:bf:8a:ae:17:b8:d8:6c:1e:e5:2f:8e:99:53:30:f5:7f:
         0f:73:06:e6:4e:e2:71:d8:64:b1:2c:67:78:ed:46:61:4f:c9:
         c5:96:6d:46:09:b5:0b:42:d4:02:7e:a6:f3:ed:69:65:eb:02:
         26:5e:cc:39:3f:9b:54:ee:6c:8b:39:69:c2:c7:c5:50:7c:76:
         ff:1b:3d:b4:41:b9:80:7f:ce:41:64:3a:dd:50:dd:43:ad:33:
         08:37:72:ea:8e:cb:99:ac:0e:5b:18:77:bc:0a:3f:ab:ca:05:
         cd:cb:d9:a7:56:bd:12:2a:77:ad:af:7a:36:b5:22:7a:b6:a0:
         54:cd:4e:c3:8c:87:d4:ab:a3:93:76:e4:56:e3:c7:ef:5e:24:
         b2:2f:e9:2e:bc:92:cd:92:9b:aa:2a:d6:88:0d:25:a2:86:b9:
         50:96:7f:99:d7:e7:e7:13:f6:7a:9a:18:50:04:f0:ce:b3:46:
         0e:57:eb:05:81:1e:ec:12:a3:dc:89:8f:7e:6e:d7:61:5d:09:
         6c:7d:e9:62:5a:f2:3d:27:9d:1d:81:4a:c6:6a:df:13:dd:88:
         d4:02:e4:02:64:af:77:2b:67:72:c7:8d:87:b3:ec:54:7c:8d:
         2a:54:39:c2:cf:57:76:d2:d3:08:58:b9:08:b8:fa:0b:0d:ec:
         26:89:6a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org