Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/0c26f66c97203259539c1d5ddce6ede795aeb580.roa
File:                     0c26f66c97203259539c1d5ddce6ede795aeb580.roa (raw, json)
Hash identifier:          YJ7RtUvsmzpv+bzmL8A6aNizS2QOjOaqGa3zfveERw0=
Subject key identifier:   13:FD:5E:C8:C6:A1:B7:CC:81:BF:FD:77:B6:00:5B:05:56:38:8D:C6
Certificate issuer:       /CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
Certificate serial:       20EFB8
Authority key identifier: 7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/0c26f66c97203259539c1d5ddce6ede795aeb580.roa
Signing time:             Mon 12 Jun 2023 15:09:34 +0000
ROA not before:           Sun 11 Jun 2023 15:09:34 +0000
ROA not after:            Thu 12 Jun 2025 15:09:34 +0000
asID:                     393629
IP address blocks:        201.221.88.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2158520 (0x20efb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
        Validity
            Not Before: Jun 11 15:09:34 2023 GMT
            Not After : Jun 12 15:09:34 2025 GMT
        Subject: CN=0c26f66c97203259539c1d5ddce6ede795aeb580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:27:a5:e3:14:77:17:22:56:60:bc:9d:e5:08:
                    d1:56:71:68:a6:a4:c2:71:c3:e9:4b:90:74:b4:a1:
                    b5:15:d1:ad:93:f3:45:5c:f1:99:5d:84:7f:d0:46:
                    9d:ee:64:56:3b:21:90:3c:6a:88:0b:f1:c7:4b:10:
                    8b:34:89:84:f6:18:28:2c:ef:c0:ab:76:0c:00:a5:
                    1f:ff:5f:5c:b8:96:3f:3e:68:b0:f6:67:b7:6f:e3:
                    74:da:16:ed:0f:e9:87:ea:b5:a4:fc:6f:b5:0e:2a:
                    9f:09:85:b0:9e:11:7f:ec:8e:9a:f0:73:4a:fa:69:
                    e2:83:06:23:ed:8a:07:3b:f9:53:89:d5:19:59:05:
                    df:72:28:9c:2b:e0:d3:c0:87:ac:13:c7:96:09:02:
                    4e:e5:55:1d:03:74:71:53:77:7e:90:26:34:b2:7b:
                    b5:ee:89:c7:33:2e:4a:88:d1:a7:e5:7b:f5:fd:b8:
                    99:3b:b2:fd:92:f0:42:8c:9b:25:0b:13:4b:8f:83:
                    12:fa:72:e9:95:d3:7c:a1:3e:47:aa:a4:db:39:d0:
                    fd:c9:3a:61:f9:0e:36:d3:62:a4:fc:c1:93:ec:18:
                    ed:44:f4:a1:0b:55:cf:20:e8:fb:90:df:54:1e:0c:
                    8b:ab:98:84:0d:ae:70:ec:f3:45:f1:74:a9:ce:d5:
                    23:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:FD:5E:C8:C6:A1:B7:CC:81:BF:FD:77:B6:00:5B:05:56:38:8D:C6
            X509v3 Authority Key Identifier:
                keyid:7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/0c26f66c97203259539c1d5ddce6ede795aeb580.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:03:2d:77:1c:4e:0f:d3:37:69:39:5a:16:8c:6d:b2:9f:3d:
         77:e6:01:a1:6c:f5:3b:40:dd:04:83:61:18:fc:47:19:87:e5:
         1a:1a:63:3d:cc:b7:8e:7e:12:cc:3a:b2:b4:e9:8d:f0:2f:5a:
         8f:58:cd:ca:7d:d3:a9:39:2a:1c:81:b8:6a:eb:15:b2:e8:dd:
         82:08:bd:c9:0d:8d:6d:b9:ba:c7:77:fc:00:41:24:fc:4b:47:
         b8:7d:48:43:a7:8f:a6:6e:5f:24:7f:9b:b4:d5:8e:98:1d:1c:
         59:02:41:87:06:5b:05:c3:5b:25:06:82:82:ad:91:0e:71:31:
         b3:50:ae:a8:ca:5b:1e:5d:8c:23:83:45:8f:9e:7c:e3:c0:cb:
         96:51:cf:9f:b8:31:a1:c9:a5:15:3b:53:b0:5a:a0:33:56:fd:
         ba:ee:f4:b8:11:22:6e:98:a0:21:3f:96:fc:60:be:4e:6c:60:
         8f:f4:19:42:75:82:19:f3:7c:d8:ad:27:f3:ca:60:90:c9:86:
         6c:1d:9f:58:6f:17:55:c5:43:4a:1a:f7:f2:f3:36:90:86:ea:
         9b:74:59:a5:cb:0c:3a:6d:a8:f5:68:26:92:7a:e8:41:8d:c0:
         43:73:b4:8d:65:e1:8e:5c:52:a9:18:61:ec:d4:d5:cf:09:e5:
         9b:21:f3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 19:56:13 2023 by rpki-client on console-ams.rpki-client.org