Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6582f08d-390c-476d-9e16-01b8df1f38e1/6e75e3a480ba76735fd185b96ae4771bb5fa382b.roa
File:                     6e75e3a480ba76735fd185b96ae4771bb5fa382b.roa (raw, json)
Hash identifier:          TFuJJqVM7xCzRZ3myiA/quX7CleUuMAryPRVZL9CO1A=
Subject key identifier:   55:C3:37:9E:52:1C:64:2D:2C:4D:8E:42:08:4E:59:66:68:57:EF:0B
Certificate issuer:       /CN=b9c8582e09c8e6590de82a1ce64a0a3a5ce74019
Certificate serial:       89E2
Authority key identifier: B8:87:A0:86:C8:F1:AF:AD:0E:DD:28:59:23:6E:A5:69:39:D5:CB:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b9c8582e09c8e6590de82a1ce64a0a3a5ce74019.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6582f08d-390c-476d-9e16-01b8df1f38e1/6e75e3a480ba76735fd185b96ae4771bb5fa382b.roa
Signing time:             Tue 21 Nov 2023 15:18:31 +0000
ROA not before:           Tue 21 Nov 2023 15:18:31 +0000
ROA not after:            Fri 21 Nov 2025 15:18:31 +0000
asID:                     273116
IP address blocks:        190.9.70.0/23 maxlen: 24
                          2803:9850::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35298 (0x89e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9c8582e09c8e6590de82a1ce64a0a3a5ce74019
        Validity
            Not Before: Nov 21 15:18:31 2023 GMT
            Not After : Nov 21 15:18:31 2025 GMT
        Subject: CN=6e75e3a480ba76735fd185b96ae4771bb5fa382b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e6:84:fe:d4:4d:35:cc:12:da:a1:63:32:a6:
                    29:2d:e5:93:79:d4:90:af:d4:20:6e:b5:fb:39:bf:
                    d0:2d:61:ec:8f:04:04:36:96:29:b7:ae:5f:ae:b3:
                    09:a8:cd:d4:20:37:14:05:6d:c1:5d:2a:a3:e4:73:
                    b6:14:60:fb:4d:33:e1:d9:3b:75:40:3a:62:7c:df:
                    34:e5:41:fb:67:ad:c4:ff:de:c9:c2:fe:62:c1:41:
                    39:35:ea:08:72:95:5e:97:f2:85:5e:aa:15:07:de:
                    96:ba:07:43:b7:1c:f2:e2:d2:ac:8c:cf:d8:48:0e:
                    d7:07:a4:6c:46:a4:0a:5c:19:28:18:2d:ce:b1:f8:
                    48:ef:d4:d6:d7:50:55:ca:fb:63:02:64:d9:b1:a1:
                    3a:73:eb:1b:d6:91:8d:12:e6:c5:e1:24:7c:3f:15:
                    dd:7c:19:7c:5f:8a:21:fe:68:d6:a0:6e:44:36:0c:
                    49:6f:11:6f:bb:78:90:fc:5b:53:bf:ca:88:38:4d:
                    39:6c:89:5b:76:fb:1c:1b:a4:da:ea:e3:64:7c:b3:
                    71:e1:05:f3:84:83:65:da:8f:db:8a:1c:e3:2a:a7:
                    7b:e5:db:73:41:e1:4b:5c:b3:89:a2:57:ad:13:a0:
                    64:e7:2a:f4:91:10:14:cd:b7:5e:7c:bd:eb:7c:f1:
                    d3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C3:37:9E:52:1C:64:2D:2C:4D:8E:42:08:4E:59:66:68:57:EF:0B
            X509v3 Authority Key Identifier:
                keyid:B8:87:A0:86:C8:F1:AF:AD:0E:DD:28:59:23:6E:A5:69:39:D5:CB:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b9c8582e09c8e6590de82a1ce64a0a3a5ce74019.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6582f08d-390c-476d-9e16-01b8df1f38e1/6e75e3a480ba76735fd185b96ae4771bb5fa382b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6582f08d-390c-476d-9e16-01b8df1f38e1/b9c8582e09c8e6590de82a1ce64a0a3a5ce74019.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.70.0/23
                IPv6:
                  2803:9850::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:32:de:de:29:b7:56:31:dc:89:29:71:e5:9d:3a:48:51:b0:
         1c:ec:33:91:05:40:54:66:75:80:5c:c0:d0:36:dc:3b:a8:ab:
         5f:df:24:db:ef:e4:48:f7:94:15:19:78:12:b7:eb:eb:88:b2:
         e5:b3:21:50:89:8a:a5:94:c2:ba:59:bc:d9:ae:8e:cd:8d:a8:
         8e:fb:ec:4e:3e:e5:f3:78:9d:f6:5a:a0:62:29:9f:23:0e:72:
         f8:6c:58:0e:a2:bf:9d:b3:17:36:6f:00:8c:a4:59:f2:9c:e6:
         93:87:4a:51:0e:ef:78:e3:98:6d:e7:3f:f6:e1:41:a6:97:0b:
         33:6a:8a:45:8e:76:df:37:41:c9:e3:8c:0c:00:ce:25:ae:d8:
         69:0d:5f:ab:5d:e4:7d:91:ae:1b:a7:32:81:e0:71:8d:c6:91:
         b7:6d:75:6c:5e:32:3f:93:5d:d3:9c:b6:f2:86:e0:76:3c:05:
         d1:76:c7:8d:ae:f8:25:ce:2d:b0:92:96:92:13:81:32:e7:51:
         63:77:5c:6c:72:7f:f6:5b:62:30:a0:22:3b:70:fc:17:db:48:
         d0:c6:c1:a8:cc:62:98:0a:52:ea:80:8d:67:69:72:fd:52:bb:
         f4:e7:39:94:f1:ba:ef:37:73:2a:5e:9c:e2:50:48:3e:f0:8f:
         08:0a:be:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----