Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d5c07b1f-a5f9-4e03-ab3c-30e993cc1fc7/c88c81499ad752cf19d6d400c8133b3b66f9b7a4.roa
File:                     c88c81499ad752cf19d6d400c8133b3b66f9b7a4.roa (raw, json)
Hash identifier:          MpE7bc7mM+PDr7saK59AVGk2NsnewQ49xnESWKPs8ww=
Subject key identifier:   29:D7:C4:E5:B2:FA:DE:28:BF:8C:A8:32:8F:F0:E7:A2:56:B4:0C:AF
Certificate issuer:       /CN=5d58b8d1fe1a7ec6f16054c5c8e97d1261a255ed
Certificate serial:       21EF1A
Authority key identifier: AA:D3:E4:91:DA:FA:6F:0D:36:21:13:B5:B2:84:C7:CD:C9:4E:A0:04
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d58b8d1fe1a7ec6f16054c5c8e97d1261a255ed.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d5c07b1f-a5f9-4e03-ab3c-30e993cc1fc7/c88c81499ad752cf19d6d400c8133b3b66f9b7a4.roa
Signing time:             Mon 26 Jun 2023 16:30:57 +0000
ROA not before:           Sun 25 Jun 2023 16:30:57 +0000
ROA not after:            Thu 26 Jun 2025 16:30:57 +0000
asID:                     27902
IP address blocks:        190.107.64.0/20 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2223898 (0x21ef1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d58b8d1fe1a7ec6f16054c5c8e97d1261a255ed
        Validity
            Not Before: Jun 25 16:30:57 2023 GMT
            Not After : Jun 26 16:30:57 2025 GMT
        Subject: CN=c88c81499ad752cf19d6d400c8133b3b66f9b7a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:16:31:b8:63:5f:2b:42:97:03:7b:c1:26:82:
                    4f:bd:0d:a1:3d:22:34:7c:43:f9:07:42:b4:ca:99:
                    9a:ea:83:6e:d3:cc:8f:86:78:54:17:57:53:75:a3:
                    27:41:e6:28:dd:1a:d3:1e:07:21:fb:71:14:7d:d8:
                    47:bd:ea:1d:eb:a9:94:8a:dd:5b:dc:9d:1b:a6:5b:
                    de:ff:00:6c:4a:94:1f:49:09:e2:92:49:bb:1b:ba:
                    e0:2e:f5:b6:13:21:b6:9a:19:88:df:10:11:74:f6:
                    5f:45:0a:fc:2e:0b:64:fa:92:ac:1a:88:2d:0b:8a:
                    eb:5b:32:06:b3:ca:16:42:0d:81:fd:84:e7:ba:5f:
                    3c:97:8c:b4:61:43:6b:07:a4:c7:1f:41:e9:50:9c:
                    60:cf:f1:27:17:d6:b8:cd:ee:24:f3:87:da:30:e9:
                    ff:7c:99:3a:bd:57:37:cd:df:d4:56:9e:13:25:62:
                    a0:bd:90:79:89:82:be:d0:20:f6:46:74:89:b0:13:
                    01:57:67:ec:48:b5:93:b6:ca:73:9b:bf:f7:9e:c1:
                    e8:7f:c0:79:5e:01:d0:f4:a3:7f:41:fd:5b:f4:61:
                    bf:f5:ec:de:dd:b2:3a:c8:46:34:8f:4c:da:63:7f:
                    e6:1d:c9:f0:90:f1:d4:86:f3:bd:ee:28:73:d7:58:
                    b0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D7:C4:E5:B2:FA:DE:28:BF:8C:A8:32:8F:F0:E7:A2:56:B4:0C:AF
            X509v3 Authority Key Identifier:
                keyid:AA:D3:E4:91:DA:FA:6F:0D:36:21:13:B5:B2:84:C7:CD:C9:4E:A0:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d58b8d1fe1a7ec6f16054c5c8e97d1261a255ed.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d5c07b1f-a5f9-4e03-ab3c-30e993cc1fc7/c88c81499ad752cf19d6d400c8133b3b66f9b7a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d5c07b1f-a5f9-4e03-ab3c-30e993cc1fc7/5d58b8d1fe1a7ec6f16054c5c8e97d1261a255ed.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2f:c0:80:8b:96:58:b4:98:5c:4e:7d:d3:0b:b6:7a:bd:10:98:
         38:87:8f:40:34:c4:7b:a5:8c:75:b9:39:48:50:2d:b3:7d:78:
         89:a0:0e:26:06:33:b6:c5:7a:bb:70:3d:64:7b:a0:38:d5:0a:
         55:c8:01:98:ca:51:16:c4:48:e2:bb:2c:e4:bf:97:be:da:af:
         75:b8:b1:b0:47:55:3b:3c:9d:29:3b:6e:94:3c:a5:53:03:f6:
         df:bc:1c:7c:f5:a1:da:25:f6:ea:40:de:e9:07:78:04:8c:9d:
         9f:25:6c:83:43:7a:68:66:0d:8b:bf:be:5d:72:ce:93:92:5c:
         18:bb:7d:7b:a0:49:63:74:1c:1e:93:88:54:bf:96:74:80:4e:
         15:ac:53:d8:c5:92:94:12:b1:5e:91:d3:ed:1a:5c:52:1a:df:
         b9:67:46:08:25:16:2f:b2:a7:af:6e:b6:05:eb:65:ee:4f:35:
         43:76:63:3e:7d:18:fd:b5:25:b6:fb:49:4f:d5:bb:68:71:ae:
         c4:2e:28:98:b8:40:6b:e9:29:c3:7c:fd:f7:73:6f:b0:49:79:
         9a:8c:95:47:05:ec:d4:b6:1a:29:ed:5c:f8:c1:61:06:fc:55:
         4c:d6:10:f4:05:92:6b:4c:6b:29:5c:28:b7:45:3e:72:eb:79:
         a0:9e:54:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:08 2024 by rpki-client on console-fra.rpki-client.org