Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/672f6df7b4277aaafe48cb8c2ea7fdcae28c1c64.roa
File:                     672f6df7b4277aaafe48cb8c2ea7fdcae28c1c64.roa (raw, json)
Hash identifier:          WYekvbbJTE9byOuLOi+cYHsrQBJ+irqQggJwavthh+A=
Subject key identifier:   C5:CD:1F:A6:C8:9C:F6:E5:32:16:C1:6C:9E:B5:BA:10:79:D7:FD:27
Certificate issuer:       /CN=657d9dd95ecfd67113ddcd4cff4ced5d8177cf65
Certificate serial:       5972
Authority key identifier: 58:8B:D2:7A:78:D9:8D:63:93:83:95:E9:E1:80:7D:75:C6:13:D1:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/657d9dd95ecfd67113ddcd4cff4ced5d8177cf65.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/672f6df7b4277aaafe48cb8c2ea7fdcae28c1c64.roa
Signing time:             Tue 18 Jan 2022 15:49:50 +0000
ROA not before:           Tue 18 Jan 2022 03:00:00 +0000
ROA not after:            Thu 18 Jan 2024 03:00:00 +0000
asID:                     22927
IP address blocks:        186.128.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22898 (0x5972)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=657d9dd95ecfd67113ddcd4cff4ced5d8177cf65
        Validity
            Not Before: Jan 18 03:00:00 2022 GMT
            Not After : Jan 18 03:00:00 2024 GMT
        Subject: CN=672f6df7b4277aaafe48cb8c2ea7fdcae28c1c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:74:d4:af:e1:ff:03:e0:c6:2e:43:a9:0d:d5:
                    68:76:da:b2:5c:03:b4:f3:e4:2e:2e:33:b2:36:a1:
                    3c:c1:ed:bf:e1:9d:ed:c7:e3:83:bb:58:19:fd:67:
                    68:db:2a:23:18:e3:ac:86:f9:ce:37:df:f1:07:1d:
                    d5:f5:64:e7:55:9c:c1:ce:23:0c:b1:e4:06:49:41:
                    ab:ed:0b:41:92:9e:a8:29:36:bc:b6:10:12:f0:94:
                    71:0f:68:35:ea:1a:34:61:8d:4b:4d:20:e0:21:91:
                    45:05:b7:84:38:df:c2:a6:93:ff:ab:7c:ed:92:5a:
                    c3:be:9e:27:8c:4f:bd:d8:80:af:4f:10:59:97:37:
                    5d:55:1b:a2:df:12:ff:1c:f8:26:25:40:0b:f9:b7:
                    d9:86:3e:55:f9:9a:db:b1:d2:24:98:81:28:2b:6c:
                    5a:7d:83:e1:35:f3:ad:41:1c:f2:9a:6f:bd:b4:a3:
                    e3:51:c5:b9:9e:bf:6e:48:f8:15:7b:6b:e2:5a:fc:
                    14:c9:dd:bc:e3:e0:a9:88:10:15:6d:03:38:d1:16:
                    05:99:f2:06:9a:bd:99:a1:50:aa:58:39:2e:21:ac:
                    83:e9:f2:86:d9:57:34:a0:43:0a:c5:61:e6:cc:bf:
                    46:d9:38:23:06:25:06:7c:07:bd:98:70:96:47:74:
                    16:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:CD:1F:A6:C8:9C:F6:E5:32:16:C1:6C:9E:B5:BA:10:79:D7:FD:27
            X509v3 Authority Key Identifier:
                keyid:58:8B:D2:7A:78:D9:8D:63:93:83:95:E9:E1:80:7D:75:C6:13:D1:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/657d9dd95ecfd67113ddcd4cff4ced5d8177cf65.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/672f6df7b4277aaafe48cb8c2ea7fdcae28c1c64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/657d9dd95ecfd67113ddcd4cff4ced5d8177cf65.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.128.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         24:ed:8a:af:79:db:92:55:a9:f6:c5:3f:2b:2e:40:61:b5:ba:
         dc:c1:d9:41:02:e6:4d:a3:16:7a:a4:34:04:66:85:59:f0:3f:
         b8:cf:a2:fc:28:84:2f:f8:10:b8:cf:9c:aa:7d:b3:2f:f5:1f:
         dd:28:0c:62:ed:cc:e5:37:f3:eb:0b:81:92:8e:16:47:40:10:
         ee:01:de:51:e1:64:f8:b4:8a:be:74:64:68:68:1d:96:dd:94:
         b0:c4:60:9e:da:75:a4:94:5f:00:37:c8:4a:a4:27:45:fc:a9:
         cf:c8:3f:d1:d7:7b:27:0d:4d:3c:31:18:f4:58:cd:d4:eb:fa:
         7f:53:27:4b:db:c5:58:fa:d4:d8:8b:66:7a:c3:39:76:01:3a:
         95:61:f6:16:21:d2:05:47:6a:cc:f4:89:7f:00:fb:0c:2a:53:
         58:f6:66:ed:ec:a7:fc:67:40:b9:4a:9e:47:87:9f:6d:47:e0:
         ae:5f:9e:e8:d5:f6:66:dd:4a:cb:ee:7e:79:f8:65:93:b2:15:
         5c:19:6e:f1:12:4d:12:97:a0:43:4d:9c:c6:68:77:02:7d:e6:
         78:da:6d:26:54:ca:c8:b5:43:f2:11:de:22:a2:0d:1a:4b:f1:
         cf:bc:ab:dc:24:aa:a9:8a:43:08:98:bc:82:2a:b1:b5:09:ed:
         83:41:1f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 16:47:52 2023 by rpki-client on console-fra.rpki-client.org