Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/0eaf462dbd2561b31003c4bfa27cdccd0db73995.roa
File:                     0eaf462dbd2561b31003c4bfa27cdccd0db73995.roa (raw, json)
Hash identifier:          NWVZOk4yp79HLgqaTEazysIgpOOXJg5dwLGNBBxOP/o=
Subject key identifier:   05:53:C4:37:D7:60:A6:EE:B1:B3:E9:69:AD:56:9A:CE:92:C3:6A:D1
Certificate issuer:       /CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
Certificate serial:       23221F
Authority key identifier: 7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/0eaf462dbd2561b31003c4bfa27cdccd0db73995.roa
Signing time:             Fri 11 Aug 2023 16:32:18 +0000
ROA not before:           Thu 10 Aug 2023 16:32:18 +0000
ROA not after:            Mon 11 Aug 2025 16:32:18 +0000
asID:                     199487
IP address blocks:        190.93.69.0/24 maxlen: 24
                          190.93.70.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2302495 (0x23221f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
        Validity
            Not Before: Aug 10 16:32:18 2023 GMT
            Not After : Aug 11 16:32:18 2025 GMT
        Subject: CN=0eaf462dbd2561b31003c4bfa27cdccd0db73995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c9:38:92:ee:5d:ff:3c:c2:92:d7:12:cf:b3:
                    7b:48:42:5c:99:49:35:92:5c:2d:db:47:e8:b3:68:
                    38:da:a2:2a:b6:a9:e8:9b:b7:69:b8:59:7c:b4:ae:
                    70:b0:d5:2d:2c:c9:c1:3d:99:96:1c:16:b3:de:1f:
                    81:d7:f2:0c:53:29:a7:74:08:5c:6d:87:1c:eb:a4:
                    68:63:33:64:2e:7d:f2:28:51:40:a0:f2:da:d2:a2:
                    ad:9f:ea:79:b2:a0:c1:23:2b:b7:59:47:1f:fc:5f:
                    8a:3e:04:f8:96:cd:df:07:68:a6:01:55:a3:f6:34:
                    7a:e6:29:77:d6:c8:c8:02:65:af:6e:e1:98:fb:ba:
                    5a:05:1e:62:de:97:45:d4:d2:64:59:51:27:ca:4b:
                    9f:5e:f9:81:30:62:b9:74:44:81:e8:9c:10:66:c5:
                    53:ee:86:4d:9f:d3:39:50:81:f1:68:af:12:76:15:
                    48:e6:f4:11:ab:50:02:dd:e8:8d:17:db:70:b1:cb:
                    5e:e4:53:7d:72:a3:ac:ee:b7:12:64:2e:2c:5c:56:
                    11:c3:70:4c:56:94:58:97:bb:d2:95:9e:24:28:92:
                    8a:65:41:a5:9f:44:5b:6d:52:5f:57:7c:20:55:05:
                    de:98:4d:c7:08:59:e6:f1:dd:ce:df:b8:0a:52:d2:
                    67:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:53:C4:37:D7:60:A6:EE:B1:B3:E9:69:AD:56:9A:CE:92:C3:6A:D1
            X509v3 Authority Key Identifier:
                keyid:7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/0eaf462dbd2561b31003c4bfa27cdccd0db73995.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.69.0-190.93.70.255

    Signature Algorithm: sha256WithRSAEncryption
         09:24:30:a6:53:04:0c:60:98:20:a4:6b:08:9a:df:f1:17:9c:
         be:8f:88:5d:4b:98:e2:8f:29:19:a5:2b:5e:0e:47:4d:7f:af:
         0b:47:af:4a:d8:2f:83:d9:0e:8e:15:bf:53:17:87:7e:de:db:
         9b:35:d8:8b:a3:aa:44:14:78:7c:8b:5d:5b:9d:82:4b:6f:93:
         a5:c7:25:06:72:16:d6:a8:91:d9:ce:0b:4c:f5:c0:92:51:ad:
         b7:90:38:73:0a:c6:1e:9f:b7:70:84:9e:9e:b4:fb:be:17:ac:
         f4:ba:c1:31:26:d2:74:70:4d:4b:31:8e:b4:f6:87:6e:b0:a3:
         c6:dc:82:fe:87:1c:6a:38:a5:b0:25:ba:7a:d3:e5:07:a6:01:
         1f:e4:de:83:fb:0f:d1:6a:2d:b7:b5:b8:13:5c:e8:e7:82:3f:
         12:7a:77:a2:7d:23:7f:f4:19:ae:ba:35:2b:d3:13:d5:3a:f4:
         77:db:a1:4a:8c:b3:e5:fe:9f:b9:7a:e9:c3:aa:b7:d2:a0:f0:
         d6:4f:dd:ab:e5:93:5d:24:04:b1:1c:55:d8:32:62:9d:f1:3b:
         cb:37:9e:f3:49:91:07:35:55:50:8e:be:dc:66:ca:54:95:7c:
         16:0a:8f:ab:ac:5b:9f:38:77:bc:76:c5:05:c2:d9:02:4e:08:
         fc:bb:ba:2a
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDIyIfMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZi
MmMzM2ZhMDE5MDFmNzAzZTM3MzBlMjhlOTllYjhiYzRjYmE2MmEwHhcNMjMwODEw
MTYzMjE4WhcNMjUwODExMTYzMjE4WjAzMTEwLwYDVQQDEygwZWFmNDYyZGJkMjU2
MWIzMTAwM2M0YmZhMjdjZGNjZDBkYjczOTk1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAusk4ku5d/zzCktcSz7N7SEJcmUk1klwt20fos2g42qIqtqno
m7dpuFl8tK5wsNUtLMnBPZmWHBaz3h+B1/IMUymndAhcbYcc66RoYzNkLn3yKFFA
oPLa0qKtn+p5sqDBIyu3WUcf/F+KPgT4ls3fB2imAVWj9jR65il31sjIAmWvbuGY
+7paBR5i3pdF1NJkWVEnykufXvmBMGK5dESB6JwQZsVT7oZNn9M5UIHxaK8SdhVI
5vQRq1AC3eiNF9twscte5FN9cqOs7rcSZC4sXFYRw3BMVpRYl7vSlZ4kKJKKZUGl
n0RbbVJfV3wgVQXemE3HCFnm8d3O37gKUtJnKwIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFAVTxDfXYKbusbPpaa1Wms6Sw2rRMB8GA1UdIwQYMBaAFH4HMs9XSoQiKTbT
qOxlLvM30lKkMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmIyYzMz
ZmEwMTkwMWY3MDNlMzczMGUyOGU5OWViOGJjNGNiYTYyYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzcwZGE1MWEtYzFjNC00NjQ4LTg4ODctMzhkYTRm
MTdiZjg2LzBlYWY0NjJkYmQyNTYxYjMxMDAzYzRiZmEyN2NkY2NkMGRiNzM5OTUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jNzBkYTUxYS1jMWM0LTQ2NDgtODg4Ny0zOGRh
NGYxN2JmODYvNmIyYzMzZmEwMTkwMWY3MDNlMzczMGUyOGU5OWViOGJjNGNiYTYy
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQAvl1FAwQAvl1GMA0GCSqGSIb3DQEBCwUAA4IBAQAJJDCm
UwQMYJggpGsImt/xF5y+j4hdS5jijykZpSteDkdNf68LR69K2C+D2Q6OFb9TF4d+
3tubNdiLo6pEFHh8i11bnYJLb5OlxyUGchbWqJHZzgtM9cCSUa23kDhzCsYen7dw
hJ6etPu+F6z0usExJtJ0cE1LMY609odusKPG3IL+hxxqOKWwJbp60+UHpgEf5N6D
+w/Rai23tbgTXOjngj8SeneifSN/9BmuujUr0xPVOvR326FKjLPl/p+5eunDqrfS
oPDWT92r5ZNdJASxHFXYMmKd8TvLN57zSZEHNVVQjr7cZspUlXwWCo+rrFufOHe8
dsUFwtkCTgj8u7oq
-----END CERTIFICATE-----
Generated at Fri Sep 1 19:55:48 2023 by rpki-client on console-fra.rpki-client.org