Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/62207092a411ee5558e4189a69bf2dd1038a64b9.roa
File:                     62207092a411ee5558e4189a69bf2dd1038a64b9.roa (raw, json)
Hash identifier:          ETBoaaW7ydXMEvRQOaKsUBEZ1IBtSGtJFMIIXOUfx9s=
Subject key identifier:   97:5D:8C:C1:5A:80:4D:B0:B0:72:78:F3:97:33:3D:2B:BE:F2:0A:73
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       275125
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/62207092a411ee5558e4189a69bf2dd1038a64b9.roa
Signing time:             Mon 17 Apr 2023 13:00:50 +0000
ROA not before:           Sun 16 Apr 2023 13:00:28 +0000
ROA not after:            Thu 17 Apr 2025 13:00:28 +0000
asID:                     265809
IP address blocks:        190.228.32.0/24 maxlen: 24
                          190.228.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2576677 (0x275125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Apr 16 13:00:28 2023 GMT
            Not After : Apr 17 13:00:28 2025 GMT
        Subject: CN=62207092a411ee5558e4189a69bf2dd1038a64b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2b:2f:33:09:0b:8a:9f:ca:3d:10:69:56:60:
                    af:91:24:ee:c4:fb:a3:9f:79:9d:38:e0:4e:b9:6a:
                    83:99:95:bf:07:3a:ce:3d:35:78:de:0e:c6:f5:fc:
                    9c:1f:2e:cb:92:51:f5:3a:18:78:60:8f:74:e4:27:
                    c1:9d:5a:2c:57:8f:15:b1:d2:4c:ea:ff:68:5d:54:
                    af:5d:5d:89:94:f3:2a:8b:82:7b:57:c9:c2:2c:5d:
                    88:30:cc:8f:85:5e:df:d1:0a:57:b7:74:bc:96:2c:
                    35:f7:8e:47:df:3c:ab:a6:34:af:04:89:b2:8f:02:
                    13:11:b5:64:52:11:ac:29:e5:d0:8e:d3:b3:22:85:
                    7a:8b:25:ed:86:ee:e3:a0:e5:87:b6:4b:fe:be:43:
                    60:b8:59:09:62:4b:66:f1:17:9b:e9:8c:41:71:fa:
                    92:4d:3b:69:d4:02:8b:c2:9e:4d:5f:05:2d:25:75:
                    d3:ea:de:44:bb:52:79:a8:2d:9e:8d:17:df:33:74:
                    17:d7:f4:a4:11:38:b2:61:52:c6:04:f2:67:24:06:
                    8d:b9:de:be:b2:e1:43:9c:b0:5b:34:58:04:89:85:
                    a0:00:18:22:06:fc:3f:fd:dd:e4:6a:43:dd:ed:37:
                    ae:c7:40:31:76:4c:53:99:f1:d9:2c:5d:26:08:88:
                    2e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:5D:8C:C1:5A:80:4D:B0:B0:72:78:F3:97:33:3D:2B:BE:F2:0A:73
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/62207092a411ee5558e4189a69bf2dd1038a64b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.228.32.0/24
                  190.228.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:e7:29:33:0d:ae:ca:59:5c:9f:76:2e:1b:33:96:91:c8:6f:
         fd:5e:a7:96:5f:12:2f:51:28:75:26:15:ce:97:21:3b:15:7f:
         dc:38:b6:7e:28:6b:ae:6b:c2:67:8d:88:5c:b4:f8:d8:f2:e9:
         e9:b7:46:d9:fe:5e:ff:6b:3f:f8:82:9d:78:d2:ae:4d:55:15:
         b2:b7:0a:f2:91:6a:64:a9:a2:b8:06:14:09:10:98:11:f1:54:
         6b:4e:c5:8b:21:e4:eb:69:82:61:fb:ce:8a:b2:c6:58:e7:31:
         71:3f:b6:81:b1:fd:7f:da:89:ad:91:8a:b4:9e:6b:33:a3:95:
         5f:4b:ba:f6:7e:2d:5e:ab:7c:57:a4:a9:6f:11:2b:fe:5c:2c:
         b8:5e:c0:31:bc:be:a2:d0:47:1e:fe:dc:37:4e:f9:54:46:fc:
         57:71:f1:a3:72:1b:7a:2d:08:00:36:b3:54:e5:f6:d7:94:26:
         0c:21:78:40:b1:1f:ab:23:fe:8d:02:be:e3:95:a3:e0:e2:b8:
         71:3f:d8:3e:3e:44:89:18:e8:c2:a9:5b:db:61:d1:ea:c6:11:
         4f:d9:6e:fd:ec:68:45:8e:72:17:2e:d9:31:7e:ea:2b:4b:b1:
         e6:15:80:f7:b8:1f:03:44:2d:b5:fe:c2:e5:0d:fa:ed:5f:42:
         42:46:13:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 13:04:53 2023 by rpki-client on console-ams.rpki-client.org