Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/cbbf533f1fdd90a65a4980e24bdcae8d8392ae32.roa
File:                     cbbf533f1fdd90a65a4980e24bdcae8d8392ae32.roa (raw, json)
Hash identifier:          xix9zPQwGzS8JkhnfE79KUSxTuwxmPCMLb3chdjccZM=
Subject key identifier:   4C:90:EA:DA:89:B6:84:14:08:F9:FE:81:34:4A:5F:67:12:08:77:A4
Certificate issuer:       /CN=657d9dd95ecfd67113ddcd4cff4ced5d8177cf65
Certificate serial:       4D49
Authority key identifier: 58:8B:D2:7A:78:D9:8D:63:93:83:95:E9:E1:80:7D:75:C6:13:D1:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/657d9dd95ecfd67113ddcd4cff4ced5d8177cf65.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/cbbf533f1fdd90a65a4980e24bdcae8d8392ae32.roa
Signing time:             Tue 18 Jan 2022 15:23:13 +0000
ROA not before:           Tue 18 Jan 2022 03:00:00 +0000
ROA not after:            Thu 18 Jan 2024 03:00:00 +0000
asID:                     22927
IP address blocks:        186.58.0.0/15 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19785 (0x4d49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=657d9dd95ecfd67113ddcd4cff4ced5d8177cf65
        Validity
            Not Before: Jan 18 03:00:00 2022 GMT
            Not After : Jan 18 03:00:00 2024 GMT
        Subject: CN=cbbf533f1fdd90a65a4980e24bdcae8d8392ae32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:21:db:92:19:c6:78:12:f9:83:1d:5a:8d:52:
                    0f:0d:1e:73:92:6f:da:72:ae:d6:12:17:21:8a:f2:
                    d7:33:55:c1:c3:97:09:e9:ef:f6:71:9d:bf:d3:85:
                    96:6a:61:c1:5c:73:d4:cb:08:7c:76:69:39:f0:a9:
                    4a:c7:5d:f2:71:17:27:19:a6:f6:56:3d:20:54:e4:
                    31:f2:f5:cd:b4:f1:d8:16:8b:8c:37:58:4d:cc:f5:
                    1e:d1:8f:7c:8b:68:a1:e7:de:c4:1d:66:8e:4e:15:
                    d5:53:25:8c:4d:75:ef:d1:01:68:c6:d5:fe:b5:0a:
                    02:5a:98:98:44:db:2c:15:c4:1f:55:02:56:bc:bc:
                    bf:8c:b0:0d:33:82:04:80:f9:77:7d:89:bc:cf:82:
                    96:60:c2:6f:3a:77:72:b4:6e:24:73:85:1b:9b:d4:
                    7d:07:f4:59:6f:2b:33:c6:a6:88:91:7e:e6:7a:f5:
                    c2:82:2e:c9:ce:fc:cc:06:1a:10:65:78:dc:87:e3:
                    3b:8a:ba:df:08:35:bc:58:26:47:33:7c:6e:fe:0d:
                    be:35:c2:89:6f:89:fa:ee:fc:a5:2f:24:e0:81:0d:
                    d4:d1:43:c7:e7:6e:5e:2f:6e:4d:73:1d:bd:74:4c:
                    78:c0:ae:e5:a4:23:c4:ed:ee:89:3b:91:e0:01:a6:
                    1a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:90:EA:DA:89:B6:84:14:08:F9:FE:81:34:4A:5F:67:12:08:77:A4
            X509v3 Authority Key Identifier:
                keyid:58:8B:D2:7A:78:D9:8D:63:93:83:95:E9:E1:80:7D:75:C6:13:D1:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/657d9dd95ecfd67113ddcd4cff4ced5d8177cf65.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/cbbf533f1fdd90a65a4980e24bdcae8d8392ae32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/657d9dd95ecfd67113ddcd4cff4ced5d8177cf65.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.58.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         13:c8:5f:f7:7b:95:19:1e:a9:d6:03:a8:99:40:22:2e:43:b7:
         d0:7d:c8:30:35:1e:09:81:5e:90:c0:b2:fb:6b:55:f3:75:ee:
         f8:05:88:54:17:0e:8d:72:bd:47:0b:38:72:a2:5a:ef:0c:01:
         b6:c3:9c:55:e3:c7:df:13:71:10:1a:f4:98:53:49:af:5c:86:
         25:03:68:0d:b7:c3:7b:df:10:97:e3:11:79:9d:eb:09:e4:25:
         22:66:22:bd:3a:0f:e4:9c:b2:12:b1:de:c5:ca:df:67:23:b2:
         e9:ff:4b:e6:bf:b1:58:14:37:3e:a3:58:6b:2b:0f:40:df:62:
         8f:ed:ac:be:49:b1:4b:0c:c5:86:95:56:ad:e7:94:bf:91:ea:
         fa:c0:d3:a5:6f:82:f0:d2:31:16:f5:69:2c:0c:55:e1:50:08:
         30:c5:39:12:8f:f1:23:a9:d7:80:e2:62:b9:33:de:1c:04:db:
         16:49:8d:ee:02:4d:9d:3c:db:04:8b:3c:8d:cc:0d:31:9c:38:
         a6:11:56:c7:7a:56:c0:41:b3:fd:96:47:4b:8a:fd:74:63:32:
         5a:07:3c:b1:2e:07:e0:14:0c:49:b5:30:8a:27:cf:21:7a:5e:
         55:19:16:eb:2c:a4:7b:29:79:69:da:25:f9:44:1b:e1:bb:6f:
         fe:c6:5c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 16:47:52 2023 by rpki-client on console-fra.rpki-client.org