Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5e6d2efa-b731-423b-87e5-d9ee5affe096/be8965f4e3f0882afeae7d924afb264a420c3a6a.roa
File:                     be8965f4e3f0882afeae7d924afb264a420c3a6a.roa (raw, json)
Hash identifier:          4a5Id7Cv8hVYl39SApbKH6h8eWhwoOTDcLFB6UXc4mY=
Subject key identifier:   A8:E2:3C:FE:61:DB:74:62:01:1A:F0:28:90:4E:A0:C8:1F:17:FC:CD
Certificate issuer:       /CN=60661bffa767018bfc2cf77453cdffb78a624ff6
Certificate serial:       0D1B67
Authority key identifier: 41:66:04:AB:4E:B7:7F:62:1D:47:0D:99:F3:F5:F0:04:2A:C2:91:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/60661bffa767018bfc2cf77453cdffb78a624ff6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5e6d2efa-b731-423b-87e5-d9ee5affe096/be8965f4e3f0882afeae7d924afb264a420c3a6a.roa
Signing time:             Wed 24 Mar 2021 14:46:18 +0000
ROA not before:           Wed 24 Mar 2021 14:46:18 +0000
ROA not after:            Tue 24 Mar 2026 14:46:18 +0000
asID:                     265759
IP address blocks:        131.196.192.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 858983 (0xd1b67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60661bffa767018bfc2cf77453cdffb78a624ff6
        Validity
            Not Before: Mar 24 14:46:18 2021 GMT
            Not After : Mar 24 14:46:18 2026 GMT
        Subject: CN=be8965f4e3f0882afeae7d924afb264a420c3a6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2c:aa:fb:71:84:4b:0f:1a:e7:ec:09:36:ae:
                    db:ed:e8:55:a9:0c:f3:6b:be:3d:a0:39:ae:c9:ce:
                    15:ff:d7:78:35:3f:5a:53:29:bc:29:8c:36:45:d4:
                    68:fe:43:21:4e:10:6c:7a:cf:84:f0:e6:c2:3f:82:
                    d1:25:95:e8:8b:40:8f:e4:39:f0:37:48:6c:47:9e:
                    51:a4:9d:1c:37:80:b3:36:42:9c:54:2b:75:e2:fe:
                    41:17:eb:b6:d8:8f:67:2e:a9:1d:06:1f:31:c2:78:
                    19:ab:c9:75:bc:72:dc:54:83:fe:ee:90:72:e0:63:
                    9c:53:2c:31:79:af:19:e5:10:b1:2e:37:66:86:46:
                    d3:7a:51:5b:43:92:36:c5:09:06:e4:e9:0f:a3:b0:
                    c5:58:c0:87:16:fb:2c:e4:f3:04:94:ee:91:fa:ce:
                    7b:ee:3f:a8:30:86:c4:82:99:81:9e:99:74:5b:88:
                    58:c7:42:a8:76:37:65:bf:44:0d:db:99:d7:1f:a5:
                    09:71:70:e2:2c:58:62:90:7d:4d:60:a6:0a:fa:a6:
                    87:ca:5a:00:49:df:e7:6a:38:ea:78:31:66:c6:83:
                    1b:81:77:a9:85:7a:c2:ff:fb:fe:bd:62:12:10:d8:
                    3d:0e:40:e6:91:2f:19:a9:7d:74:6a:9e:7e:d8:90:
                    98:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E2:3C:FE:61:DB:74:62:01:1A:F0:28:90:4E:A0:C8:1F:17:FC:CD
            X509v3 Authority Key Identifier:
                keyid:41:66:04:AB:4E:B7:7F:62:1D:47:0D:99:F3:F5:F0:04:2A:C2:91:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/60661bffa767018bfc2cf77453cdffb78a624ff6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5e6d2efa-b731-423b-87e5-d9ee5affe096/be8965f4e3f0882afeae7d924afb264a420c3a6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5e6d2efa-b731-423b-87e5-d9ee5affe096/60661bffa767018bfc2cf77453cdffb78a624ff6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:12:fa:68:61:7d:94:15:97:d5:03:a2:e9:7a:e1:6f:43:d2:
         9e:14:5d:b6:67:67:5c:7b:b6:89:9e:c6:ff:bb:e5:97:fb:c0:
         30:f1:34:27:4b:25:c0:ee:6b:b8:8a:d0:4b:e0:8a:43:81:f0:
         4f:97:55:41:81:86:69:f9:40:3c:ba:de:f3:2d:03:ec:56:3b:
         24:60:9a:2f:c1:5d:8e:66:00:13:66:35:bd:db:be:20:f1:c5:
         9a:90:a4:04:35:22:58:18:2f:be:5a:1d:82:ac:8b:d5:91:58:
         3d:15:39:16:16:c9:ce:20:6c:99:da:5b:48:9a:54:25:da:90:
         56:f8:7a:ad:3e:62:43:b5:cc:cc:85:72:8e:4e:2a:bb:4f:d9:
         3b:1c:62:9d:93:b3:60:36:f2:eb:8c:52:15:7f:14:5b:37:86:
         c7:c0:53:94:6c:0c:aa:f3:74:ed:84:27:ff:73:3c:17:05:05:
         97:bb:8a:3c:23:ba:b8:6b:36:49:67:24:89:47:d3:55:f7:1e:
         90:ad:56:69:3c:1d:53:35:12:4e:e4:d0:b6:e5:3c:2b:4a:62:
         bf:7c:2f:b0:b2:ad:37:33:45:3b:f4:5d:09:ca:23:53:63:0f:
         39:f0:2c:93:05:09:ea:87:52:25:79:f6:bf:00:7e:af:7d:05:
         e3:2f:82:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:20 2023 by rpki-client on console-fra.rpki-client.org