Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/7fa75aa8808939e4f3da27072127c3685592e137.roa
File:                     7fa75aa8808939e4f3da27072127c3685592e137.roa (raw, json)
Hash identifier:          x0u/bsfowzg+oAExVyiYEvBNkyJIVcZdNRkUaO9IrYk=
Subject key identifier:   F3:B7:95:2B:35:C3:CF:C1:D8:E6:50:87:83:2B:10:94:9C:41:D2:F5
Certificate issuer:       /CN=657d9dd95ecfd67113ddcd4cff4ced5d8177cf65
Certificate serial:       3EAC
Authority key identifier: 58:8B:D2:7A:78:D9:8D:63:93:83:95:E9:E1:80:7D:75:C6:13:D1:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/657d9dd95ecfd67113ddcd4cff4ced5d8177cf65.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/7fa75aa8808939e4f3da27072127c3685592e137.roa
Signing time:             Tue 18 Jan 2022 14:59:38 +0000
ROA not before:           Tue 18 Jan 2022 03:00:00 +0000
ROA not after:            Thu 18 Jan 2024 03:00:00 +0000
asID:                     22927
IP address blocks:        181.20.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16044 (0x3eac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=657d9dd95ecfd67113ddcd4cff4ced5d8177cf65
        Validity
            Not Before: Jan 18 03:00:00 2022 GMT
            Not After : Jan 18 03:00:00 2024 GMT
        Subject: CN=7fa75aa8808939e4f3da27072127c3685592e137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:14:c9:f3:34:79:79:b8:bd:fd:f2:f1:04:d6:
                    83:dd:66:d0:30:3c:d6:d2:f6:5c:5e:92:52:e2:8c:
                    bf:b0:ca:5d:69:af:51:df:e9:f3:ed:7d:31:ff:d2:
                    e7:54:8c:73:e7:b8:2b:ef:5a:ab:2f:c9:72:f4:50:
                    d7:94:0e:6b:63:a5:d6:fd:a0:f3:d9:48:f0:7d:62:
                    d9:f5:cd:91:20:40:99:82:40:c6:be:7f:96:0e:b8:
                    60:a0:82:20:ee:2f:f8:c9:e6:87:3c:a6:44:39:5f:
                    5f:f8:4d:c7:9f:62:df:15:9d:6c:20:08:29:c9:7d:
                    3a:54:c3:3e:86:99:c7:4b:05:fd:7a:ab:3c:f4:a7:
                    7b:19:f1:00:92:24:ff:89:64:af:c2:ea:c1:86:77:
                    46:b1:32:fa:db:d8:20:1a:63:1a:f6:04:76:1f:ba:
                    fd:84:37:97:ec:dd:62:f9:34:fa:c2:52:15:63:6c:
                    25:32:67:e8:07:90:28:15:f5:7f:2c:01:aa:5d:28:
                    4a:de:c8:2c:08:ab:6c:8a:26:02:07:6f:4a:7f:e2:
                    d0:d3:57:a7:30:35:77:47:13:aa:f6:cd:88:cb:af:
                    d2:7e:e1:83:3a:e2:29:4d:4b:d8:b9:90:66:00:10:
                    86:05:5d:3c:01:cb:ea:41:58:c9:61:05:48:93:02:
                    dc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B7:95:2B:35:C3:CF:C1:D8:E6:50:87:83:2B:10:94:9C:41:D2:F5
            X509v3 Authority Key Identifier:
                keyid:58:8B:D2:7A:78:D9:8D:63:93:83:95:E9:E1:80:7D:75:C6:13:D1:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/657d9dd95ecfd67113ddcd4cff4ced5d8177cf65.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/7fa75aa8808939e4f3da27072127c3685592e137.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/657d9dd95ecfd67113ddcd4cff4ced5d8177cf65.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.20.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         91:7d:15:fd:9f:f2:31:30:59:d4:41:e9:3e:1d:91:f6:cd:94:
         14:8a:c3:b9:05:29:9e:74:ba:b0:00:58:43:ca:7a:f3:97:d0:
         69:d5:0c:dc:8b:e4:14:35:28:fd:f7:60:00:e0:b6:b5:0a:af:
         5e:a6:83:10:32:4c:8f:23:5b:b6:08:34:ee:40:be:a0:c6:f1:
         a4:f9:5d:79:d9:65:f8:12:12:21:55:c7:fb:81:51:12:a8:af:
         c0:98:62:be:b1:ae:fd:bd:0e:2b:d5:89:c7:4d:9b:5a:ab:f3:
         f7:3c:3d:26:b6:f2:70:df:a4:00:d2:68:4a:e0:84:0f:60:d3:
         6a:74:45:c9:be:b2:0e:fd:61:9d:84:2c:ca:69:1a:30:15:83:
         7d:ba:fe:9c:27:c4:d7:76:79:cf:c8:6a:b7:8d:97:ed:5c:3f:
         81:46:d1:fc:bd:89:66:ef:0b:01:e3:63:01:6d:c3:00:af:2c:
         f9:07:c4:96:37:f3:a1:ea:7c:bf:e2:f1:9e:08:56:2d:05:9c:
         18:c4:bc:4e:86:f3:18:e8:3e:f8:88:72:78:49:ca:4d:d6:6d:
         aa:ba:32:9e:21:a9:9d:25:6b:93:44:eb:3a:88:2e:bf:4e:9c:
         e3:58:e8:8c:eb:0a:74:69:54:39:60:69:3b:65:75:c1:17:dd:
         4e:34:5c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 16:47:52 2023 by rpki-client on console-fra.rpki-client.org