Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/08433c6948465a358565b824fa34728ab863fbba.roa
File:                     08433c6948465a358565b824fa34728ab863fbba.roa (raw, json)
Hash identifier:          cb0bhTi9tfzfwzFCs71Rxah5fOGB2Rrn1gqoiII+F0M=
Subject key identifier:   1E:45:A5:1A:32:6D:E2:36:97:3D:ED:40:D8:21:81:A9:95:55:1F:46
Certificate issuer:       /CN=657d9dd95ecfd67113ddcd4cff4ced5d8177cf65
Certificate serial:       3116
Authority key identifier: 58:8B:D2:7A:78:D9:8D:63:93:83:95:E9:E1:80:7D:75:C6:13:D1:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/657d9dd95ecfd67113ddcd4cff4ced5d8177cf65.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/08433c6948465a358565b824fa34728ab863fbba.roa
Signing time:             Mon 17 Jan 2022 17:14:46 +0000
ROA not before:           Mon 17 Jan 2022 03:00:00 +0000
ROA not after:            Wed 17 Jan 2024 03:00:00 +0000
asID:                     22927
IP address blocks:        190.51.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12566 (0x3116)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=657d9dd95ecfd67113ddcd4cff4ced5d8177cf65
        Validity
            Not Before: Jan 17 03:00:00 2022 GMT
            Not After : Jan 17 03:00:00 2024 GMT
        Subject: CN=08433c6948465a358565b824fa34728ab863fbba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2b:7a:b2:b4:5e:05:53:67:c4:57:71:12:07:
                    91:3a:93:ec:8b:03:08:43:39:4b:11:f6:36:8b:c4:
                    2d:a1:a8:9c:4e:32:9b:4e:8d:3f:57:4b:d5:83:77:
                    67:56:44:eb:19:d0:85:a5:64:d5:ba:c7:77:25:d5:
                    1b:4c:9e:34:a0:c1:ad:ff:e1:50:cf:41:a4:90:7e:
                    cb:7b:0e:d4:49:0a:62:3f:78:2a:3f:a6:93:a0:90:
                    f1:ca:03:99:29:59:46:21:ee:91:ba:29:c9:9b:c3:
                    65:39:39:fc:dc:ed:37:51:be:23:bb:f5:32:02:10:
                    ab:db:60:db:d3:f2:fe:54:62:91:37:b3:79:b2:5b:
                    54:cb:35:5a:09:90:8f:91:a6:27:c4:6c:46:c0:b1:
                    0c:c7:90:67:ad:7f:ef:a1:60:ca:8b:67:ee:5b:f8:
                    98:e4:1d:e3:c1:82:d5:cc:ec:5e:ca:0e:99:f5:2c:
                    c1:92:83:e8:d7:f1:72:10:9e:1a:35:05:ca:68:d8:
                    8d:a8:bd:44:81:2c:1a:48:0b:69:64:2f:c8:a8:95:
                    ee:e3:a5:3a:66:b9:f4:b8:00:37:b6:f0:a4:62:f6:
                    48:4c:0f:31:e1:2c:30:09:5f:8b:88:bf:98:3d:54:
                    57:b2:03:72:dd:b2:55:0e:53:fb:94:f6:be:c7:6e:
                    57:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:45:A5:1A:32:6D:E2:36:97:3D:ED:40:D8:21:81:A9:95:55:1F:46
            X509v3 Authority Key Identifier:
                keyid:58:8B:D2:7A:78:D9:8D:63:93:83:95:E9:E1:80:7D:75:C6:13:D1:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/657d9dd95ecfd67113ddcd4cff4ced5d8177cf65.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/08433c6948465a358565b824fa34728ab863fbba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/657d9dd95ecfd67113ddcd4cff4ced5d8177cf65.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.51.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         14:8d:e4:e7:66:fb:9a:42:d1:c7:af:4c:e7:59:e7:d0:4c:8d:
         ef:7b:c9:78:c2:a6:89:50:08:78:6b:6c:c5:ba:17:cb:81:2f:
         df:78:2d:a4:58:83:9c:77:b5:33:aa:a7:a8:38:85:de:ba:55:
         6c:90:98:d9:71:74:58:5f:ff:d4:cf:2c:28:55:b8:ed:aa:e8:
         c3:26:43:23:8c:33:6c:cb:c5:9e:1f:3d:35:65:e2:5c:ae:bb:
         8c:a8:fd:bd:fa:3b:00:db:6f:7d:df:89:a5:32:4b:f1:b5:b4:
         43:3f:a4:da:65:98:6d:a0:70:be:cf:68:54:52:ca:4d:68:54:
         45:c2:88:10:a6:7a:a0:18:2f:f0:aa:67:12:d4:be:f9:1e:78:
         44:56:67:c6:40:43:41:e9:07:60:51:1c:fd:73:91:02:8b:f1:
         46:1f:40:e3:2d:dd:5c:c1:c4:d4:8e:38:3c:75:f8:6b:14:c5:
         21:a6:3d:33:9e:33:85:c1:69:af:5d:f2:cf:d6:80:18:e0:8d:
         49:1b:9e:29:da:69:36:35:b3:b3:12:c8:2f:a4:6f:72:88:40:
         ed:52:54:f2:f9:59:d1:2a:80:18:52:83:5d:4c:58:5f:e6:38:
         7f:cc:88:8c:d9:62:01:ee:64:78:55:0b:e8:fb:80:db:a7:07:
         7e:1a:7e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 16:47:52 2023 by rpki-client on console-fra.rpki-client.org