Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/335af9e2ae60361d5a512802cefd83ba50063330.roa
File:                     335af9e2ae60361d5a512802cefd83ba50063330.roa (raw, json)
Hash identifier:          6Wt/ah07p356bqfVtlu+G+lkx2NiaOzYHQW8ZUXojAg=
Subject key identifier:   F9:AA:CB:CE:95:6A:60:BE:8B:D4:3F:E8:79:26:53:30:D6:F1:01:E0
Certificate issuer:       /CN=6700d78d2e18243ea736c1288c50a9461ced8b3c
Certificate serial:       1FEEE7
Authority key identifier: 6D:16:7E:D1:DD:2E:65:DE:1D:97:BA:EC:8C:20:55:AD:DC:17:37:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6700d78d2e18243ea736c1288c50a9461ced8b3c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/335af9e2ae60361d5a512802cefd83ba50063330.roa
Signing time:             Wed 01 Feb 2023 20:29:10 +0000
ROA not before:           Tue 31 Jan 2023 20:28:24 +0000
ROA not after:            Sat 01 Feb 2025 20:28:24 +0000
asID:                     262171
IP address blocks:        190.93.168.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2092775 (0x1feee7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6700d78d2e18243ea736c1288c50a9461ced8b3c
        Validity
            Not Before: Jan 31 20:28:24 2023 GMT
            Not After : Feb  1 20:28:24 2025 GMT
        Subject: CN=335af9e2ae60361d5a512802cefd83ba50063330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:dc:99:87:ad:98:a7:dd:34:9e:e6:42:f5:a3:
                    5a:0e:85:5b:93:d0:fa:02:f4:b8:8a:38:60:8d:2f:
                    8d:93:a7:24:80:18:34:8a:2c:c4:79:f9:86:6b:c9:
                    04:20:49:63:e5:6e:88:52:3b:03:40:9a:72:5f:19:
                    a7:96:cb:87:8a:e1:28:78:a2:79:5a:e6:3e:07:f3:
                    a2:6c:a0:34:90:61:28:a1:57:2e:aa:20:68:e1:9f:
                    13:30:c2:a3:19:08:40:af:07:1e:e0:33:72:c4:25:
                    5f:65:b5:44:c2:47:30:28:db:57:55:d2:c8:0e:0f:
                    a9:5d:78:68:40:21:0c:7f:20:7b:8e:3c:0c:e0:07:
                    7d:62:3a:4d:4a:db:90:4e:99:32:85:77:d7:f0:a2:
                    28:00:8f:cb:f6:16:ea:c6:da:75:e3:17:bc:1d:48:
                    3d:7d:1f:7d:d9:9f:d0:23:a9:0d:97:58:fd:f0:d7:
                    3b:eb:bc:a3:6d:13:61:92:b5:79:03:17:4c:dc:fa:
                    fb:cc:f4:13:80:c9:4f:a4:e1:16:20:99:5e:ae:15:
                    70:04:aa:37:da:5e:e6:63:56:55:47:7e:95:fa:5d:
                    7d:78:1f:ce:8b:62:d4:b5:c6:ec:23:00:74:47:dd:
                    bf:48:0b:e1:65:62:3a:e6:cb:63:53:f5:28:ae:9b:
                    19:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:AA:CB:CE:95:6A:60:BE:8B:D4:3F:E8:79:26:53:30:D6:F1:01:E0
            X509v3 Authority Key Identifier:
                keyid:6D:16:7E:D1:DD:2E:65:DE:1D:97:BA:EC:8C:20:55:AD:DC:17:37:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6700d78d2e18243ea736c1288c50a9461ced8b3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/335af9e2ae60361d5a512802cefd83ba50063330.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/6700d78d2e18243ea736c1288c50a9461ced8b3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:5f:99:02:55:c1:f7:49:dd:a5:62:21:70:88:c9:72:e8:c0:
         06:cd:40:9c:10:81:72:5f:67:0a:4b:7d:97:4b:27:d4:fe:29:
         3c:38:8b:0b:29:4e:a8:10:7a:08:05:89:6b:7d:5d:5a:cd:dc:
         9f:30:ff:c4:cb:4c:27:48:b2:a8:58:62:02:42:8e:e5:2f:e5:
         94:a0:64:35:7b:37:e6:75:1c:7d:03:9b:2d:a0:c1:6e:31:2b:
         9b:3b:bf:c0:d8:94:7d:60:4d:67:a4:b9:cb:9a:63:fb:bb:0e:
         3f:1b:16:22:8b:8e:98:24:e2:6f:45:4d:00:3f:42:40:d0:5f:
         63:35:cb:30:f1:aa:17:0d:4f:f1:b6:34:58:4c:3d:a8:1e:10:
         18:e3:44:1f:2f:74:1b:99:22:30:22:77:c5:8d:76:7f:0b:71:
         0e:cd:67:f4:d5:75:85:69:c9:1f:fd:95:2c:b4:19:9d:bb:5b:
         bc:ae:9c:be:da:5b:ff:5a:7f:f0:58:28:dc:67:fa:e5:79:8c:
         e9:f8:0f:d0:22:89:9e:4e:ac:9e:ab:44:db:1b:40:57:0f:72:
         e7:f0:ee:82:28:f6:7a:dc:80:3e:80:7c:37:e7:1e:15:cf:90:
         36:1f:44:8d:45:5e:b6:d3:c5:98:ae:08:fb:a1:3a:bb:85:4c:
         b6:a6:81:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:02 2024 by rpki-client on console-fra.rpki-client.org