Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/dd74f0120cf587bb18af57571141cf8208531b75.roa
File:                     dd74f0120cf587bb18af57571141cf8208531b75.roa (raw, json)
Hash identifier:          9u6FBIACOnFzfS+Mg9ytVrw6WvnITGBNYb0u3ban+vg=
Subject key identifier:   E4:84:2E:2B:62:54:21:9D:BF:93:55:F2:C7:1E:C3:99:67:EB:0E:D9
Certificate issuer:       /CN=657d9dd95ecfd67113ddcd4cff4ced5d8177cf65
Certificate serial:       5E31
Authority key identifier: 58:8B:D2:7A:78:D9:8D:63:93:83:95:E9:E1:80:7D:75:C6:13:D1:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/657d9dd95ecfd67113ddcd4cff4ced5d8177cf65.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/dd74f0120cf587bb18af57571141cf8208531b75.roa
Signing time:             Tue 18 Jan 2022 15:51:37 +0000
ROA not before:           Tue 18 Jan 2022 03:00:00 +0000
ROA not after:            Thu 18 Jan 2024 03:00:00 +0000
asID:                     22927
IP address blocks:        186.132.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24113 (0x5e31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=657d9dd95ecfd67113ddcd4cff4ced5d8177cf65
        Validity
            Not Before: Jan 18 03:00:00 2022 GMT
            Not After : Jan 18 03:00:00 2024 GMT
        Subject: CN=dd74f0120cf587bb18af57571141cf8208531b75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7b:0e:cf:fc:c1:91:80:52:e4:32:ed:46:42:
                    9f:17:7d:5a:b1:80:5d:72:99:d5:5f:1e:a8:aa:f8:
                    a4:22:d0:60:fc:0c:8b:18:5c:29:dd:3d:0d:11:d1:
                    56:26:e2:09:b2:bb:32:c6:da:77:d3:df:a3:10:b0:
                    15:fb:59:a1:1a:c0:6a:35:20:b3:4a:de:bb:23:95:
                    91:2a:1b:d4:ce:64:39:f1:8d:1c:e7:18:41:2f:36:
                    e9:57:ae:8f:14:31:1d:84:02:2e:2c:f7:be:52:15:
                    d0:77:a4:77:a4:0f:76:8a:50:28:87:9c:fe:6c:4d:
                    5d:53:07:17:80:8c:a6:65:14:63:f0:c1:47:12:b3:
                    ab:cc:6f:84:8d:f7:09:b0:e7:ff:48:74:fe:fe:e6:
                    02:ba:28:14:fd:4b:fd:eb:99:ad:71:48:7f:04:76:
                    bd:29:fc:8b:24:e5:e3:56:bf:ee:c4:ef:1f:bc:67:
                    e9:31:42:c2:ce:82:6b:a8:ab:88:b6:e8:06:8a:92:
                    8f:3b:1e:6e:60:4b:3f:f0:97:d3:0d:82:99:a8:ad:
                    bd:ea:46:91:1b:18:27:82:c1:35:c2:02:db:cf:e2:
                    e6:06:53:8a:2f:1a:26:b0:40:fe:80:6a:c1:1c:65:
                    1a:02:47:00:37:f6:16:a7:43:05:57:11:47:de:b6:
                    9a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:84:2E:2B:62:54:21:9D:BF:93:55:F2:C7:1E:C3:99:67:EB:0E:D9
            X509v3 Authority Key Identifier:
                keyid:58:8B:D2:7A:78:D9:8D:63:93:83:95:E9:E1:80:7D:75:C6:13:D1:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/657d9dd95ecfd67113ddcd4cff4ced5d8177cf65.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/dd74f0120cf587bb18af57571141cf8208531b75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/657d9dd95ecfd67113ddcd4cff4ced5d8177cf65.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.132.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         17:5e:27:62:fe:fd:45:c7:b4:be:4b:77:57:a2:9f:f2:2e:82:
         d7:c4:97:b4:4c:fa:f0:3d:91:54:b0:67:67:1d:28:46:32:9c:
         00:ca:b5:78:04:1c:1a:c4:5b:c2:36:b9:aa:1d:01:a3:fc:3c:
         03:e2:1d:c9:a5:7f:c9:35:8e:96:a8:a1:40:85:37:06:01:5c:
         bb:d2:cf:84:e1:61:0e:25:fc:32:61:f0:ee:a5:8e:82:19:2d:
         a9:2b:3c:63:fe:dd:c3:03:b9:50:f1:e1:12:78:68:6f:79:38:
         d7:ed:df:87:fa:46:c3:b9:39:f1:12:fa:3c:a5:84:04:45:8c:
         4c:e2:fe:b7:89:ca:c3:72:ae:f7:b5:b4:d7:42:bd:01:34:4d:
         2b:b8:0d:5b:3e:84:7d:4d:0b:eb:a6:2a:ed:0c:ad:a4:61:50:
         a3:c7:07:96:2a:5b:93:26:34:81:a4:25:af:d8:a7:4c:ff:0e:
         42:eb:e6:65:89:f8:54:b5:7f:a8:b0:e2:84:9a:f8:70:d2:df:
         5a:17:8c:5a:7c:ba:76:c1:09:8a:91:bb:11:b8:b5:ac:21:fa:
         97:e8:be:44:26:e1:3b:f5:c6:5f:56:f2:6a:cf:63:d9:97:13:
         1e:4a:62:6f:58:17:e0:c0:55:03:38:b5:85:70:19:9e:64:d7:
         cd:7a:bb:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 16:47:52 2023 by rpki-client on console-fra.rpki-client.org