Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5c76965e-10ba-488e-b1dc-33af9acf5af9/c5b84e547c4a6921c81b494d12776fdbac7d1ad5.roa
File:                     c5b84e547c4a6921c81b494d12776fdbac7d1ad5.roa (raw, json)
Hash identifier:          CBWX4gIxW9zgWcmR5SqZqTRMPZDM/q9Bhm/VEC2ld8I=
Subject key identifier:   63:BC:25:71:5B:CB:56:FA:A2:F0:7F:B0:65:7B:FC:13:0B:F9:82:EB
Certificate issuer:       /CN=917ec8d4d5052be9ec6516ff2f860e64e1df30d4
Certificate serial:       18C3A8
Authority key identifier: 9F:9D:A4:1D:AD:F7:91:8D:CE:7A:C9:A7:17:50:87:7F:C6:BD:43:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/917ec8d4d5052be9ec6516ff2f860e64e1df30d4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5c76965e-10ba-488e-b1dc-33af9acf5af9/c5b84e547c4a6921c81b494d12776fdbac7d1ad5.roa
Signing time:             Fri 01 Jul 2022 19:06:09 +0000
ROA not before:           Fri 01 Jul 2022 03:00:00 +0000
ROA not after:            Mon 01 Jul 2024 03:00:00 +0000
asID:                     265792
IP address blocks:        192.141.180.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1622952 (0x18c3a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=917ec8d4d5052be9ec6516ff2f860e64e1df30d4
        Validity
            Not Before: Jul  1 03:00:00 2022 GMT
            Not After : Jul  1 03:00:00 2024 GMT
        Subject: CN=c5b84e547c4a6921c81b494d12776fdbac7d1ad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:89:37:e6:aa:b6:82:68:4b:09:68:71:61:34:
                    b5:d6:ae:09:9d:52:b0:43:d3:a7:68:07:d9:39:b4:
                    0c:bb:f8:c7:0b:5a:81:2f:a7:33:20:62:2b:86:65:
                    87:a4:38:90:a8:ca:5a:7f:c5:f4:63:28:29:65:bd:
                    fe:be:da:f8:f5:8a:0f:cc:50:83:e1:bc:1f:8d:e6:
                    f2:4f:12:75:2e:84:5d:08:68:15:e9:f1:96:39:fb:
                    91:83:25:d3:d6:53:bf:03:17:aa:e6:e7:8d:18:a2:
                    d9:89:7b:18:55:02:73:d1:09:90:ff:a2:f9:e5:fc:
                    0e:82:12:82:3a:df:d5:a1:6e:84:7c:13:31:05:36:
                    19:cc:78:6e:74:35:6f:4d:cf:64:c8:36:c4:2e:e3:
                    04:2b:0a:65:49:d9:73:e5:0b:a6:35:16:8f:ed:43:
                    60:e0:a3:8d:a4:44:36:4d:e6:52:6c:08:ad:a5:c9:
                    63:04:30:02:0e:d2:0e:e3:be:1f:82:b1:98:fe:7c:
                    52:0d:9f:4d:0c:52:70:f6:1d:8a:21:37:98:d9:ca:
                    7d:25:a7:e7:e6:c6:9d:6f:6e:9a:ba:90:7f:8f:d6:
                    15:bc:52:3d:3b:0a:b6:c9:73:a0:0a:2c:91:36:4c:
                    0c:59:cb:dd:36:43:df:e0:86:05:46:4f:2e:d8:49:
                    d5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:BC:25:71:5B:CB:56:FA:A2:F0:7F:B0:65:7B:FC:13:0B:F9:82:EB
            X509v3 Authority Key Identifier:
                keyid:9F:9D:A4:1D:AD:F7:91:8D:CE:7A:C9:A7:17:50:87:7F:C6:BD:43:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/917ec8d4d5052be9ec6516ff2f860e64e1df30d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5c76965e-10ba-488e-b1dc-33af9acf5af9/c5b84e547c4a6921c81b494d12776fdbac7d1ad5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5c76965e-10ba-488e-b1dc-33af9acf5af9/917ec8d4d5052be9ec6516ff2f860e64e1df30d4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:44:a3:6c:52:39:b3:de:bc:6c:ae:4d:42:45:da:04:ca:d7:
         6e:a2:0d:ee:8b:ce:b3:e0:ff:c7:de:ea:f1:a7:7f:c0:bc:af:
         87:30:49:b5:29:26:be:69:df:a3:56:bb:0e:c3:a8:e8:61:f4:
         3d:be:71:8d:9b:a5:93:93:8c:09:bf:c2:df:3f:68:93:e5:e9:
         87:57:a9:4d:d5:a3:45:4f:c2:61:ca:70:16:3c:42:31:5a:83:
         82:4b:25:c5:4b:81:f9:cb:78:de:cc:2a:02:5c:6d:e9:71:3e:
         4d:1f:90:3d:77:f6:65:b6:95:8d:a0:f4:65:b7:07:11:c5:1d:
         42:c9:3c:32:4e:59:12:a9:37:1b:71:95:c3:af:72:b7:ba:be:
         5b:78:da:68:05:52:c7:82:9f:25:6e:c7:4e:46:81:d0:11:6e:
         f2:c9:04:10:41:f2:34:a8:3c:41:6c:b2:26:94:eb:cd:6c:91:
         57:aa:4a:e8:5d:b3:49:f8:f4:c5:68:66:b8:64:41:d9:31:ab:
         8e:2d:f2:aa:51:46:d0:d9:b6:2d:51:1f:e1:84:2a:01:59:4b:
         ea:d4:a5:7a:0d:0f:ec:f8:48:59:e9:e4:96:c5:cd:92:95:e1:
         6f:87:96:a6:7f:c9:ed:a3:78:bf:ce:09:d2:8e:05:2b:60:44:
         5e:a6:ad:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org