Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/5a6fa7acec97ef2db4aa9b602d26cc04d9be6f1a.roa
File:                     5a6fa7acec97ef2db4aa9b602d26cc04d9be6f1a.roa (raw, json)
Hash identifier:          k1TcbVgBJ3T82C4hFAAcMl8NYgDjRNCOWASZNQIYpno=
Subject key identifier:   17:A0:4C:04:56:B0:8A:05:6D:B1:35:F5:8F:10:07:82:04:08:FA:53
Certificate issuer:       /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial:       039C1E
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/5a6fa7acec97ef2db4aa9b602d26cc04d9be6f1a.roa
Signing time:             Tue 11 Jul 2023 13:03:09 +0000
ROA not before:           Mon 10 Jul 2023 13:03:09 +0000
ROA not after:            Fri 11 Jul 2025 13:03:09 +0000
asID:                     16629
IP address blocks:        190.21.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236574 (0x39c1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
        Validity
            Not Before: Jul 10 13:03:09 2023 GMT
            Not After : Jul 11 13:03:09 2025 GMT
        Subject: CN=5a6fa7acec97ef2db4aa9b602d26cc04d9be6f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:72:75:36:f7:e4:14:3c:b3:17:d0:f5:47:5f:
                    db:57:37:4b:72:a6:3e:5b:95:99:5d:09:9f:69:5f:
                    ce:51:5d:46:34:55:6a:e2:7a:f8:75:14:ef:78:40:
                    09:18:80:42:58:62:33:31:d6:3c:af:ed:f3:ea:57:
                    7e:9b:09:24:73:be:d1:ad:df:c2:24:a4:d2:27:f3:
                    8a:e3:02:0c:31:15:fa:f5:10:77:50:a8:87:3d:36:
                    72:2f:2a:47:59:4d:76:bb:ae:cd:59:57:f8:14:b3:
                    42:e8:c7:d4:8f:cf:54:6f:f8:3d:bf:d1:fb:98:3d:
                    a8:78:7c:b7:44:d9:cf:a9:a9:75:59:50:f1:b6:34:
                    eb:1f:ff:8e:dc:48:5e:25:55:d8:35:17:e8:21:93:
                    50:a4:08:c5:08:2f:c4:d3:32:9c:bd:8b:09:b3:c7:
                    e4:11:8b:60:52:d8:4f:89:3f:ca:9f:69:db:05:b9:
                    25:1d:35:e4:6a:e1:5a:4b:44:86:f3:2b:06:6c:09:
                    8a:23:65:78:e4:16:14:9d:4d:5e:6f:3e:98:ad:3f:
                    99:3a:18:77:a8:fc:41:56:a3:f5:c6:3c:aa:f1:9b:
                    3f:fa:5e:9c:ef:ff:c0:66:54:a2:9d:c6:5c:ff:a7:
                    80:ca:7a:f5:26:cb:14:3c:2d:c0:dd:62:b9:32:04:
                    e9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A0:4C:04:56:B0:8A:05:6D:B1:35:F5:8F:10:07:82:04:08:FA:53
            X509v3 Authority Key Identifier:
                keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/5a6fa7acec97ef2db4aa9b602d26cc04d9be6f1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.21.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5a:a0:ad:d9:22:28:45:58:53:f8:2c:9b:9c:9d:26:71:ef:5b:
         ab:7e:e4:1b:95:9d:c5:fb:ec:9a:dd:fd:94:28:21:b5:86:c2:
         a8:f3:5b:40:10:d8:81:30:c5:99:00:89:d3:30:f7:9f:b4:6a:
         dd:95:cb:92:75:8b:06:c2:53:46:ca:06:ff:96:6c:29:81:ad:
         03:ad:fa:97:e8:4b:7b:b3:8a:db:1b:ac:55:7b:26:38:1b:c4:
         45:b4:c6:14:e4:4b:28:50:4a:34:bb:f2:05:e8:9a:2b:97:5d:
         23:46:60:b9:1e:2b:08:2e:ce:0f:44:54:13:4a:57:31:91:e9:
         42:15:81:c1:8b:9f:92:de:52:4c:e1:c8:6f:9d:80:7f:c1:6d:
         88:19:9f:c4:da:d0:e3:85:75:f8:8c:d2:18:47:9e:0f:20:6a:
         21:ec:0e:e3:63:fa:73:87:f8:b3:03:e5:4f:3d:88:4a:71:5b:
         18:bd:e4:7b:54:a8:06:81:ff:24:e1:84:78:0b:ef:14:bc:6f:
         4e:b2:f4:44:8f:56:fa:70:98:98:7f:27:fe:c5:13:09:91:b6:
         83:cb:7f:41:48:d6:29:e8:d7:12:4d:e3:97:1b:30:50:04:7a:
         e1:0c:13:2c:06:b8:a4:25:b9:9b:34:83:29:42:f1:2b:ac:7d:
         19:29:9f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org