Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/0558f3fa27614b6d9ad3772af9c42f524363e018.roa
File:                     0558f3fa27614b6d9ad3772af9c42f524363e018.roa (raw, json)
Hash identifier:          FotQ62LFMF5+OIgkOKFPrzVptFzXMqTPEiMQE5mBvJE=
Subject key identifier:   A1:C8:83:6B:35:85:C8:46:37:A3:CE:65:26:89:62:F2:0B:53:35:FB
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       0DB78A
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/0558f3fa27614b6d9ad3772af9c42f524363e018.roa
Signing time:             Sun 12 Sep 2021 11:04:04 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     21769
IP address blocks:        191.96.186.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 898954 (0xdb78a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=0558f3fa27614b6d9ad3772af9c42f524363e018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ba:90:f6:00:3d:37:bc:f0:66:e9:3f:e3:85:
                    6e:11:31:c6:da:6a:d9:7d:a4:38:fc:a2:a4:bf:2d:
                    74:4c:5b:2e:65:c0:31:13:b0:8d:13:41:09:df:d5:
                    19:46:3a:94:58:a9:89:8b:84:87:ec:19:75:0e:47:
                    bd:1f:27:7b:79:81:7c:4a:d2:18:29:60:67:1a:e1:
                    63:05:47:7c:bf:99:0c:f4:6c:97:0f:9d:b3:3c:82:
                    15:dd:10:2b:9b:f7:1b:be:a5:35:dd:da:7e:42:7d:
                    ae:cb:05:09:8f:60:70:6a:08:08:9c:79:07:9a:f4:
                    97:67:1e:54:86:88:20:86:80:3e:14:43:1c:16:02:
                    bb:8e:c4:fb:f3:02:7a:ec:f3:b8:8c:d9:1e:3c:11:
                    a1:3c:21:ae:a5:bb:3f:88:53:6d:fa:51:f6:df:a1:
                    c2:3c:f4:26:6b:0a:9e:c8:69:12:34:98:ec:46:63:
                    f6:d3:16:8a:67:2e:70:cc:8e:15:79:14:10:0b:1c:
                    e7:e8:b3:35:5b:84:15:38:8d:7e:9e:05:c8:4c:ea:
                    09:d9:2b:52:37:c1:5b:7a:d7:1b:8a:d0:6d:e5:53:
                    b9:eb:53:52:44:63:74:9a:ec:11:6e:9f:e9:65:97:
                    8b:9b:3c:f6:57:8d:24:c8:f1:9a:47:82:73:92:36:
                    c6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C8:83:6B:35:85:C8:46:37:A3:CE:65:26:89:62:F2:0B:53:35:FB
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/0558f3fa27614b6d9ad3772af9c42f524363e018.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:53:41:75:0a:d6:b4:22:7a:18:85:f6:19:14:c2:be:3f:d0:
         60:b6:e3:c9:88:b7:f4:7d:66:2d:ec:e2:43:66:6f:cb:1d:82:
         92:db:ce:d3:ed:de:4a:d4:b4:b4:b8:6a:4e:c0:eb:d6:24:08:
         6e:2b:64:5e:36:de:dc:e9:58:bc:22:c5:8a:3c:a0:dd:45:55:
         ee:82:51:d1:e8:db:55:f0:12:9d:13:79:39:82:00:65:bf:52:
         3d:99:ca:d3:3c:87:b0:e5:04:8e:f4:2c:e8:10:34:ce:4c:5f:
         26:f7:ed:45:40:a7:0f:d0:3d:bf:16:ec:c9:3b:9e:2c:37:be:
         fa:4b:c9:ae:2a:c4:cb:25:3b:62:c5:32:33:e5:03:54:62:7e:
         f4:5a:2a:9e:11:38:81:4d:d8:b9:17:14:33:84:04:70:99:5c:
         48:77:2a:43:7a:94:d7:20:d6:f1:1a:76:6f:e2:5a:8f:c1:20:
         6c:4a:7b:b7:9a:bf:0d:b5:ac:42:6a:5c:98:7a:51:dc:a0:3f:
         72:fc:44:cb:ac:11:70:bf:26:ab:f3:14:1b:b3:66:a2:7d:1d:
         d1:61:8f:a8:09:d7:5b:ac:bd:87:73:5f:c9:86:0a:61:60:19:
         e9:6e:6f:a7:97:15:1c:f1:a1:1b:7b:46:a5:ac:db:66:5f:5e:
         49:90:98:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org