Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/ec7ab846de26f70ab810f277db6ebd90cd51dd5c.roa
File:                     ec7ab846de26f70ab810f277db6ebd90cd51dd5c.roa (raw, json)
Hash identifier:          l4d52v9kOSJjmKnof/teMUdWncEBmhlAfNfiNxtwYVk=
Subject key identifier:   20:E6:A7:0D:50:A8:B5:3B:76:25:1F:90:4F:98:B4:F1:38:F6:E2:90
Certificate issuer:       /CN=657d9dd95ecfd67113ddcd4cff4ced5d8177cf65
Certificate serial:       3950
Authority key identifier: 58:8B:D2:7A:78:D9:8D:63:93:83:95:E9:E1:80:7D:75:C6:13:D1:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/657d9dd95ecfd67113ddcd4cff4ced5d8177cf65.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/ec7ab846de26f70ab810f277db6ebd90cd51dd5c.roa
Signing time:             Tue 18 Jan 2022 14:19:06 +0000
ROA not before:           Tue 18 Jan 2022 03:00:00 +0000
ROA not after:            Thu 18 Jan 2024 03:00:00 +0000
asID:                     22927
IP address blocks:        186.39.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14672 (0x3950)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=657d9dd95ecfd67113ddcd4cff4ced5d8177cf65
        Validity
            Not Before: Jan 18 03:00:00 2022 GMT
            Not After : Jan 18 03:00:00 2024 GMT
        Subject: CN=ec7ab846de26f70ab810f277db6ebd90cd51dd5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3d:92:4c:ce:eb:4c:9c:51:35:10:cd:f8:89:
                    01:95:95:0b:eb:7f:16:66:ad:d3:26:bd:ae:13:0d:
                    e3:bf:d7:f8:c2:bc:af:0b:90:4d:2e:39:aa:c1:5c:
                    84:e3:b9:f2:ea:a2:89:43:d7:84:6c:1f:91:8d:aa:
                    82:2c:23:82:42:e5:a5:70:44:04:83:97:ae:74:2c:
                    90:d8:40:43:a9:dc:ad:d2:54:7e:8a:c7:32:32:67:
                    47:0d:c6:97:32:68:c5:db:d0:45:18:d7:98:22:17:
                    97:d1:96:6e:a6:d4:9c:bb:24:ab:7e:13:bc:35:ec:
                    d1:9c:cf:3c:03:ae:e1:81:0f:e5:55:ac:cd:f4:78:
                    d0:5d:69:be:57:4d:b5:3d:9d:76:b5:35:ea:51:aa:
                    01:12:93:18:26:13:e8:74:e0:76:ca:c2:ec:3e:88:
                    f6:3a:25:f7:0e:72:81:ad:ea:8f:fb:9f:3b:5b:05:
                    39:69:60:00:03:ad:ec:df:f3:00:89:bd:1c:38:02:
                    45:b7:d7:e9:70:d8:b4:00:7c:7e:12:b1:f0:15:ba:
                    76:6e:53:f0:3c:33:5c:f3:4d:8b:a0:d8:9f:81:bc:
                    51:5b:b2:fa:b9:1c:25:b4:27:90:61:b2:1f:97:b1:
                    27:dc:0a:65:e1:65:98:21:55:1c:d1:57:49:16:36:
                    7a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E6:A7:0D:50:A8:B5:3B:76:25:1F:90:4F:98:B4:F1:38:F6:E2:90
            X509v3 Authority Key Identifier:
                keyid:58:8B:D2:7A:78:D9:8D:63:93:83:95:E9:E1:80:7D:75:C6:13:D1:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/657d9dd95ecfd67113ddcd4cff4ced5d8177cf65.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/ec7ab846de26f70ab810f277db6ebd90cd51dd5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/657d9dd95ecfd67113ddcd4cff4ced5d8177cf65.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.39.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         59:65:69:55:8a:3e:36:c5:d7:e1:d3:cf:f8:39:29:a0:07:53:
         20:67:20:e8:b4:64:21:7a:95:52:62:58:3f:3b:3b:3c:9d:da:
         ac:e0:db:68:07:ff:2c:71:78:c1:af:38:a4:8f:b9:a6:17:1d:
         6e:d0:2f:a8:2c:e2:7c:ee:96:c4:30:00:f4:93:4b:7c:80:6e:
         68:59:32:ba:ca:e0:5b:4f:06:fa:aa:e7:24:bd:d9:65:42:39:
         41:a3:76:ca:93:fe:cc:90:ff:f4:91:fb:da:2f:3f:3f:72:d8:
         91:6c:bd:10:90:ac:bf:4f:f6:35:cc:fe:78:c3:fc:ca:db:7b:
         11:01:15:f4:65:90:ea:bb:4b:5a:fb:45:e9:5e:1f:e9:a0:62:
         8e:33:16:03:81:ba:6f:57:ce:85:5b:eb:00:2b:64:3b:f0:fa:
         9b:97:41:20:ed:68:e3:80:b2:10:6c:af:95:c6:c4:c8:8c:db:
         7a:0e:09:50:7b:05:9f:b9:79:f8:41:cd:e7:0b:7c:26:67:d0:
         a3:9e:33:01:e3:bf:22:d5:96:10:05:57:e3:e0:e7:79:3f:b1:
         52:3d:1b:7b:19:a9:da:66:bd:85:7b:51:8b:ca:ac:df:48:23:
         c0:9d:14:a5:bc:e8:d3:68:92:43:94:d7:85:91:ab:aa:f6:f0:
         4f:e0:69:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 16:47:53 2023 by rpki-client on console-fra.rpki-client.org