Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/29a078bf3bd4e02b3b874c292003c33a94f409f2.roa
File:                     29a078bf3bd4e02b3b874c292003c33a94f409f2.roa (raw, json)
Hash identifier:          gMhcjZArIH8V5zg/qPJvDeZ18KLlPy8cLiorFdSU9Xo=
Subject key identifier:   AD:F2:9A:98:CF:2A:2F:CC:3C:3F:91:08:17:BF:38:01:7A:3E:9A:71
Certificate issuer:       /CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Certificate serial:       1BC93F
Authority key identifier: C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/29a078bf3bd4e02b3b874c292003c33a94f409f2.roa
Signing time:             Wed 28 Sep 2022 02:14:47 +0000
ROA not before:           Wed 28 Sep 2022 02:12:22 +0000
ROA not after:            Sat 28 Sep 2024 02:12:22 +0000
asID:                     19114
IP address blocks:        186.65.0.0/18 maxlen: 18
                          186.65.32.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1820991 (0x1bc93f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab812eecfcc01d38c444dbeae53234651af8c84d
        Validity
            Not Before: Sep 28 02:12:22 2022 GMT
            Not After : Sep 28 02:12:22 2024 GMT
        Subject: CN=29a078bf3bd4e02b3b874c292003c33a94f409f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c4:11:34:ed:fd:bd:8f:f9:b5:67:8c:e4:48:
                    78:95:08:1d:03:31:f5:dd:46:36:21:11:6a:64:54:
                    53:5e:a6:91:8b:31:57:24:46:94:12:ed:80:20:ea:
                    9b:cb:67:4b:70:53:f6:76:bd:15:4e:c2:fb:92:d5:
                    91:84:20:75:12:51:c0:51:1a:d6:df:17:d8:6c:6d:
                    67:a7:a4:f8:36:35:7c:68:b5:06:a2:03:27:e9:11:
                    22:44:34:b4:fc:33:d9:00:09:c8:b3:48:49:80:fe:
                    a5:fe:a4:f5:6f:ae:70:33:bd:d3:a8:7e:bd:fb:5b:
                    e5:b0:f1:1d:9a:e1:a2:51:b3:1c:76:e1:aa:bb:95:
                    2e:d4:48:72:dd:1b:f4:06:30:2b:20:c0:88:42:f9:
                    6b:05:cd:4c:a8:1e:91:55:be:b9:f4:5f:4c:ae:35:
                    ca:8d:e8:6c:1f:eb:b2:83:85:40:88:6a:4c:d2:f7:
                    15:dc:9b:29:85:0c:a8:75:b9:59:ba:ae:6e:52:95:
                    db:1a:1e:ad:bc:36:f3:c0:22:ce:be:f5:c4:6e:2b:
                    35:61:5e:03:63:09:9b:bd:4d:42:3e:0b:36:a4:f3:
                    5f:8c:75:c7:df:0f:bc:b1:8b:aa:bc:76:fc:28:48:
                    da:e4:cb:9a:f3:d1:f8:78:08:70:cf:0f:aa:e9:35:
                    95:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F2:9A:98:CF:2A:2F:CC:3C:3F:91:08:17:BF:38:01:7A:3E:9A:71
            X509v3 Authority Key Identifier:
                keyid:C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/29a078bf3bd4e02b3b874c292003c33a94f409f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ab812eecfcc01d38c444dbeae53234651af8c84d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.65.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         19:ae:ce:1a:e0:1b:7b:a0:65:78:ac:e9:d0:94:aa:c5:61:61:
         1b:1c:3c:50:d4:77:e2:8c:d8:7d:c7:2b:0d:8a:38:1c:9e:eb:
         bb:41:90:18:36:d5:8b:b2:38:be:7c:b0:5f:49:ca:95:02:8c:
         36:76:bd:d3:65:88:3b:bd:eb:f0:c5:be:9d:81:6b:40:d3:53:
         a4:97:59:75:44:1e:34:c3:a0:2e:ca:b2:ed:c1:61:17:16:f2:
         6d:1d:ce:45:17:17:0d:a9:54:97:8b:ef:b4:ef:0c:13:d0:ac:
         14:d0:8e:1c:d2:35:9c:c3:19:34:d4:2c:58:55:7e:62:27:a0:
         89:2d:64:b0:a7:14:fe:81:00:bc:8c:1c:03:d4:d4:75:00:fc:
         04:42:42:17:3e:c1:ba:ac:35:01:3e:28:a1:44:68:63:e8:01:
         71:30:44:c0:e0:0d:4c:db:3d:c4:85:44:e6:27:4d:6b:cc:34:
         a9:50:88:ac:fe:93:44:1b:47:f0:49:d9:dc:f1:e9:20:af:fb:
         99:19:d6:18:24:a5:4a:72:0b:fa:2d:ca:e8:a1:cb:f9:22:3a:
         cb:7e:02:d3:bb:7c:72:10:5b:ff:b6:a6:e4:79:be:bb:d8:c9:
         15:fb:e8:62:67:c3:b2:85:ec:73:d7:d0:c5:94:0b:37:c4:e0:
         62:56:2d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 27 17:04:38 2023 by rpki-client on console-fra.rpki-client.org