Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/d93b1014e43d75a9ad948e531ab1a87c2c27f8cb.roa
File:                     d93b1014e43d75a9ad948e531ab1a87c2c27f8cb.roa (raw, json)
Hash identifier:          SRYWf+kQZOYFkvKmLYQ3T96GjlkWRh/hPzHVYY/bVVU=
Subject key identifier:   0B:2D:B2:B6:B5:8A:B4:92:9D:6C:8C:49:C0:07:FC:8B:42:A8:37:02
Certificate issuer:       /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial:       2215CF
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/d93b1014e43d75a9ad948e531ab1a87c2c27f8cb.roa
Signing time:             Wed 19 Apr 2023 19:07:14 +0000
ROA not before:           Tue 18 Apr 2023 19:07:14 +0000
ROA not after:            Sat 19 Apr 2025 19:07:14 +0000
asID:                     28000
IP address blocks:        190.112.52.0/22 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2233807 (0x2215cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
        Validity
            Not Before: Apr 18 19:07:14 2023 GMT
            Not After : Apr 19 19:07:14 2025 GMT
        Subject: CN=d93b1014e43d75a9ad948e531ab1a87c2c27f8cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7a:3d:1e:1e:37:e2:74:11:ed:26:b1:e3:46:
                    c7:5b:23:00:cd:c2:60:bd:23:dc:6a:c8:e2:da:0f:
                    43:2a:b4:b8:1f:aa:5d:1a:c5:07:ca:e1:35:8c:07:
                    b2:b2:f1:72:7e:cb:58:7e:c5:fd:6e:37:7e:35:d7:
                    cb:05:ec:d0:22:7e:7a:05:1e:4f:05:f8:dd:16:de:
                    d3:88:fe:2e:3c:2c:28:07:37:06:30:70:8a:c5:14:
                    82:23:e9:1b:fc:1a:12:7f:95:d3:33:41:ef:7b:8c:
                    80:f2:00:5a:77:39:e1:d1:ed:f1:04:dd:cb:77:2f:
                    c1:cb:5c:98:3d:86:26:7c:0d:b4:ca:ef:eb:19:4d:
                    1b:27:40:c1:03:fa:bb:39:74:15:0b:0e:3d:44:ee:
                    26:6e:9b:ca:9c:f2:4e:45:1e:e7:3d:53:9c:84:64:
                    a2:52:02:a2:26:af:24:30:94:3a:36:e0:2f:2a:b2:
                    f1:3b:39:df:dc:92:61:1a:cf:39:e4:ac:7d:17:16:
                    34:21:ca:33:37:74:09:de:33:bb:1a:87:90:2c:11:
                    ff:d1:c5:9d:70:ea:88:a8:5d:47:a5:c2:4f:17:96:
                    17:ca:17:e8:f5:48:d7:9a:da:24:41:47:65:3c:f9:
                    74:1d:b4:05:a9:34:16:52:60:67:44:df:1d:1b:41:
                    7c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:2D:B2:B6:B5:8A:B4:92:9D:6C:8C:49:C0:07:FC:8B:42:A8:37:02
            X509v3 Authority Key Identifier:
                keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/d93b1014e43d75a9ad948e531ab1a87c2c27f8cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:1b:9e:1f:28:e7:19:c8:ea:b0:57:ed:c3:0e:06:a8:f9:60:
         3a:be:d8:e1:ce:b9:25:b9:e7:75:99:33:d7:72:d3:8f:fc:a6:
         f2:ac:6c:42:28:fd:8a:69:97:2d:14:e9:5d:46:80:c7:6d:b7:
         9c:61:66:3f:17:66:2c:f0:c5:43:48:fc:24:02:87:f8:35:a0:
         09:85:e3:cb:a1:f1:2b:43:1e:d9:a0:55:a7:64:65:34:db:4c:
         25:d2:88:87:99:ce:a7:9c:49:0f:84:f3:ae:2c:37:08:4f:38:
         b9:fa:e9:e2:32:8e:e2:43:af:af:18:11:13:4d:15:be:8d:db:
         db:61:5c:a8:f3:4e:c1:a4:99:fc:ff:f6:51:cc:9c:7e:18:09:
         63:f8:f5:01:7c:9a:c0:ec:89:c1:b4:a5:97:08:89:29:97:49:
         a0:d9:96:6c:46:8f:68:8b:79:a3:8a:7a:5a:95:3b:e9:a5:cd:
         e2:5c:d0:0a:25:36:85:fe:f6:c9:5f:e7:ef:d0:b6:77:11:0b:
         42:2b:7a:92:ef:85:6b:73:18:5b:2e:d4:55:e4:5d:24:c8:9b:
         0b:5c:65:8a:19:32:be:35:db:42:e5:93:12:39:b1:c0:dc:ff:
         ba:a1:3b:2a:c5:8a:19:fe:b9:16:65:01:17:5e:df:06:95:d6:
         af:6a:55:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 19:07:25 2024 by rpki-client on console-fra.rpki-client.org