Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0a48ed73-8607-4ef2-aeb0-73a037c62311/fde1cd5279e4f02eb5d8f95ad3b7b4042d5016b1.roa
File:                     fde1cd5279e4f02eb5d8f95ad3b7b4042d5016b1.roa (raw, json)
Hash identifier:          A56Khq43tgRi2lApBmwpINcDfe9/b2zh0aecDzpaSSE=
Subject key identifier:   99:40:DA:7A:0F:FE:42:47:24:F0:D5:A9:1B:7B:D3:05:3B:A1:08:AF
Certificate issuer:       /CN=0a780aded9dabf63283959a6696312a1fecffbf4
Certificate serial:       102690
Authority key identifier: 40:A7:5D:8C:A2:65:BE:0A:A5:BC:89:9D:98:42:5B:F9:69:03:61:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a780aded9dabf63283959a6696312a1fecffbf4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0a48ed73-8607-4ef2-aeb0-73a037c62311/fde1cd5279e4f02eb5d8f95ad3b7b4042d5016b1.roa
Signing time:             Mon 26 Jul 2021 02:07:53 +0000
ROA not before:           Sun 25 Jul 2021 03:00:00 +0000
ROA not after:            Tue 25 Jul 2023 03:00:00 +0000
asID:                     40065
IP address blocks:        186.190.210.0/23 maxlen: 24
                          186.190.214.0/23 maxlen: 24
                          186.190.220.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1058448 (0x102690)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a780aded9dabf63283959a6696312a1fecffbf4
        Validity
            Not Before: Jul 25 03:00:00 2021 GMT
            Not After : Jul 25 03:00:00 2023 GMT
        Subject: CN=fde1cd5279e4f02eb5d8f95ad3b7b4042d5016b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f3:28:e1:a9:bf:90:52:da:7c:99:68:83:19:
                    ff:9c:9e:21:28:73:fb:66:00:06:59:42:b6:08:35:
                    48:28:c9:26:1d:35:9b:01:a0:a4:72:44:af:78:75:
                    3e:33:bb:bd:be:3c:8b:25:02:ad:f1:12:30:57:de:
                    35:8b:4c:0e:38:71:c8:63:ce:b3:5c:82:e6:6a:da:
                    a6:d6:b1:7c:0c:30:ca:52:ca:9b:a1:40:d1:92:23:
                    20:e0:26:09:8f:e6:74:d2:5c:3b:5d:0d:ee:72:81:
                    29:61:7b:15:c7:0d:04:e3:cd:a4:be:71:68:d4:ad:
                    a5:15:e6:7b:1b:ea:3f:af:2b:e2:45:f4:be:bf:31:
                    d7:0b:5a:03:da:7f:2a:c6:a7:85:cb:c4:db:02:ab:
                    25:59:13:cc:28:20:c2:d4:00:ee:4e:af:38:b7:2a:
                    7a:ff:d7:05:56:6a:14:d9:d4:15:87:50:5c:6d:34:
                    fb:a1:99:3e:f8:f5:c5:6f:ad:2f:22:ed:70:c2:ed:
                    91:78:6e:15:1a:d4:48:f9:7e:3f:b8:e2:4e:4f:bf:
                    b9:1e:79:ea:53:d1:31:cf:82:d1:12:f5:23:a4:d4:
                    a0:70:b4:4d:2b:bc:00:aa:cd:79:2f:be:2c:f5:9e:
                    86:5e:4b:c4:bd:22:c7:ac:f3:6a:9a:bd:a2:a3:90:
                    91:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:40:DA:7A:0F:FE:42:47:24:F0:D5:A9:1B:7B:D3:05:3B:A1:08:AF
            X509v3 Authority Key Identifier:
                keyid:40:A7:5D:8C:A2:65:BE:0A:A5:BC:89:9D:98:42:5B:F9:69:03:61:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a780aded9dabf63283959a6696312a1fecffbf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0a48ed73-8607-4ef2-aeb0-73a037c62311/fde1cd5279e4f02eb5d8f95ad3b7b4042d5016b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0a48ed73-8607-4ef2-aeb0-73a037c62311/0a780aded9dabf63283959a6696312a1fecffbf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.190.210.0/23
                  186.190.214.0/23
                  186.190.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:b9:23:7f:ea:bb:0b:33:c1:75:fe:86:f1:bf:65:39:ab:d9:
         c0:47:de:07:b0:ff:06:46:ca:1d:b5:4c:24:7b:92:ef:65:b7:
         23:d7:51:c3:31:33:60:25:62:e6:93:b9:ff:4f:cf:f4:0a:b5:
         40:24:ea:cb:c1:93:0d:51:4c:3b:8b:df:d0:66:2c:4f:bb:18:
         8a:2c:ea:b9:01:da:23:1d:e4:2a:6d:62:01:b8:5a:e2:f9:c2:
         21:2e:5e:0c:3d:61:3f:0f:f4:52:2a:b1:b9:19:f2:bd:7f:57:
         ea:01:90:79:ef:aa:4f:cc:88:93:5b:d7:49:b7:14:87:93:3d:
         f0:c3:54:56:75:8e:f9:a8:3d:10:b6:8d:bf:a7:91:e3:e2:35:
         76:7d:9a:94:1c:27:7c:e7:b2:a0:11:1c:f1:7e:12:a3:ec:3b:
         f4:6b:5b:00:39:64:ad:af:25:43:49:1e:97:37:68:b8:7b:45:
         de:d2:d2:18:59:45:d5:2b:e9:f3:3d:5f:7a:ca:06:99:c1:8a:
         c4:cf:d7:39:df:92:82:6e:50:4b:3e:42:51:84:78:a5:4b:82:
         12:bb:16:bb:fd:b5:15:93:61:7b:a0:dd:2f:54:a7:28:40:0c:
         8a:14:e6:13:cd:35:cc:be:84:36:00:ad:56:3b:d2:0d:85:e3:
         ae:cc:42:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-ams.rpki-client.org