Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bd388e6c-0092-45c6-8c77-40e523893e68/9d72ec4d0e5f12f5889f3a7f04835d9c2e7b371c.roa
File:                     9d72ec4d0e5f12f5889f3a7f04835d9c2e7b371c.roa (raw, json)
Hash identifier:          s/lJYxRnQwWSy7aehDnbA5zbXIgTcrc4VWQdkTktkeA=
Subject key identifier:   1A:D0:50:B8:8D:82:3D:67:4A:52:5E:BA:4A:35:D0:CA:BE:DA:96:1C
Certificate issuer:       /CN=d6118b2ba58131930654b848f2aa591bf18ad448
Certificate serial:       0D907C
Authority key identifier: 30:33:29:38:EC:8C:80:5B:8A:6F:AF:70:2A:CE:F1:65:FE:22:1A:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d6118b2ba58131930654b848f2aa591bf18ad448.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bd388e6c-0092-45c6-8c77-40e523893e68/9d72ec4d0e5f12f5889f3a7f04835d9c2e7b371c.roa
Signing time:             Wed 24 Mar 2021 14:33:03 +0000
ROA not before:           Wed 24 Mar 2021 14:33:03 +0000
ROA not after:            Tue 24 Mar 2026 14:33:03 +0000
asID:                     262254
IP address blocks:        186.2.160.0/20 maxlen: 32
                          190.115.16.0/20 maxlen: 32
                          2803:f900::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 888956 (0xd907c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6118b2ba58131930654b848f2aa591bf18ad448
        Validity
            Not Before: Mar 24 14:33:03 2021 GMT
            Not After : Mar 24 14:33:03 2026 GMT
        Subject: CN=9d72ec4d0e5f12f5889f3a7f04835d9c2e7b371c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:29:5b:30:f7:7a:3f:52:ab:ce:e0:fc:12:5e:
                    0c:40:31:db:b0:87:01:1f:bf:16:fd:8b:7f:36:71:
                    08:0c:ff:f1:88:78:38:95:ef:c4:be:b7:6b:55:7f:
                    02:1a:19:af:ca:f3:10:91:fa:95:c1:f9:28:27:64:
                    4c:c9:aa:16:5f:86:13:80:d6:e7:76:ec:ee:55:57:
                    d9:5a:4f:76:1f:78:5a:ea:b2:29:12:1e:88:41:28:
                    7c:d6:4f:20:5e:b4:e7:cc:24:d1:52:02:d0:1b:ed:
                    ea:d8:6d:b8:24:67:7a:a7:90:89:b8:05:83:84:a5:
                    40:9a:4b:91:1c:65:64:6b:46:49:84:0e:7a:cf:9e:
                    72:9e:82:0f:f6:7c:52:02:c1:c0:2b:b1:e6:0d:cf:
                    5b:d8:71:a8:9f:34:51:72:5c:cb:ea:ae:9c:f4:e2:
                    38:6b:8c:d3:b1:a6:96:2b:96:89:2a:08:d0:29:e8:
                    b3:00:44:1d:ad:69:ad:d8:f8:a7:32:01:e8:47:d3:
                    93:7f:dd:84:d1:51:cc:7c:fa:b0:3e:1e:be:4a:53:
                    62:d2:f9:b5:c0:9b:79:6e:f7:ff:cc:08:f3:ba:d0:
                    39:80:b8:50:f3:0a:d4:a8:0c:bb:6a:cb:b2:01:45:
                    5a:a6:ed:41:80:9f:15:b2:e1:66:36:22:2d:d1:22:
                    1e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:D0:50:B8:8D:82:3D:67:4A:52:5E:BA:4A:35:D0:CA:BE:DA:96:1C
            X509v3 Authority Key Identifier:
                keyid:30:33:29:38:EC:8C:80:5B:8A:6F:AF:70:2A:CE:F1:65:FE:22:1A:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d6118b2ba58131930654b848f2aa591bf18ad448.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bd388e6c-0092-45c6-8c77-40e523893e68/9d72ec4d0e5f12f5889f3a7f04835d9c2e7b371c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bd388e6c-0092-45c6-8c77-40e523893e68/d6118b2ba58131930654b848f2aa591bf18ad448.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.2.160.0/20
                  190.115.16.0/20
                IPv6:
                  2803:f900::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:dd:98:8c:68:d0:61:7d:2d:5a:39:fd:98:82:b9:5b:d4:4e:
         2e:0d:1a:65:53:18:36:d1:65:d1:6b:6c:a7:c1:7f:06:91:0c:
         03:db:03:85:06:2e:60:01:b6:62:37:4b:49:71:b0:03:19:38:
         07:89:f9:63:9e:98:09:42:97:4f:cd:52:1a:4a:a6:38:e6:95:
         89:06:fc:9a:c8:7d:2f:11:1b:27:b6:b6:49:34:6f:1a:79:54:
         9c:f6:26:b6:93:f8:cf:51:41:97:ab:e7:f8:4d:5f:7d:cf:96:
         07:f3:d3:b1:8d:cb:83:83:88:93:89:a7:77:f9:01:ee:11:86:
         8d:c1:7d:ba:0f:03:7e:e6:4e:65:22:14:80:ee:d0:95:c8:15:
         d3:95:3e:3d:7a:d5:5e:e3:e4:04:c9:16:64:c4:db:4a:63:94:
         6d:80:ac:2a:1a:fd:2e:ef:e1:0c:da:e6:97:14:96:6b:ef:82:
         79:a5:53:b2:e8:c5:6e:c8:1e:eb:d1:da:d3:63:27:99:9c:2d:
         79:db:2b:ff:8d:c7:c7:64:c0:f3:c5:16:aa:89:92:58:f9:f5:
         9e:39:77:11:57:31:48:6d:dd:af:97:6e:91:9e:51:56:63:a1:
         70:71:03:27:89:22:02:05:7e:06:92:56:b7:b0:93:a0:da:81:
         2c:03:4b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 9 16:42:10 2023 by rpki-client on console-fra.rpki-client.org