Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/1fb89fd2a79d8555c92e3656cd6e18a0337a18c3.roa
File:                     1fb89fd2a79d8555c92e3656cd6e18a0337a18c3.roa (raw, json)
Hash identifier:          O5cMbxE8hjdalQKEJA0GMyUOWV9YFbrgydvJmMw6c2g=
Subject key identifier:   25:A5:88:DF:47:DB:52:0A:2A:32:64:F3:85:65:BF:CE:B2:14:80:29
Certificate issuer:       /CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
Certificate serial:       2231C3
Authority key identifier: 7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/1fb89fd2a79d8555c92e3656cd6e18a0337a18c3.roa
Signing time:             Mon 31 Jul 2023 12:10:00 +0000
ROA not before:           Sun 30 Jul 2023 12:10:00 +0000
ROA not after:            Thu 31 Jul 2025 12:10:00 +0000
asID:                     56687
IP address blocks:        190.93.93.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2240963 (0x2231c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
        Validity
            Not Before: Jul 30 12:10:00 2023 GMT
            Not After : Jul 31 12:10:00 2025 GMT
        Subject: CN=1fb89fd2a79d8555c92e3656cd6e18a0337a18c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0f:34:c6:a8:7a:29:97:77:4d:e3:f8:bf:24:
                    bd:5b:6c:91:db:a6:7c:5b:23:5e:3a:f0:91:e4:a5:
                    b4:ab:71:e1:d9:82:99:26:ae:80:47:90:e3:18:e6:
                    95:39:34:d1:9b:fd:76:15:9f:c6:a6:c5:f9:3f:8f:
                    76:9b:75:21:9e:72:5a:8e:a6:78:52:5d:a6:13:72:
                    5f:90:a6:70:92:b3:1b:fc:63:44:27:d5:33:bf:95:
                    41:82:9b:f9:a6:43:c9:ae:1a:d8:ac:e1:fa:38:65:
                    df:a6:67:a8:8f:54:21:97:a6:67:42:d2:5c:85:dd:
                    18:6f:5e:60:75:c6:de:90:14:25:18:7f:f4:0b:a4:
                    3e:d7:06:25:54:d9:f0:d5:31:ca:06:d9:2a:72:48:
                    53:7d:01:a7:1d:d4:42:11:0f:d0:5f:8e:53:2d:78:
                    dd:df:3e:26:7b:03:1b:b5:55:ab:c9:b9:b3:de:a2:
                    02:6d:ab:b8:c3:78:dc:8e:d9:a6:24:54:25:9e:aa:
                    50:0a:db:b5:4d:af:d0:a7:58:19:69:0a:07:db:0e:
                    ce:a1:b5:cd:7c:a1:d6:f5:27:47:66:94:af:13:07:
                    f8:6f:95:1c:24:41:b6:db:0d:e1:a1:b4:39:df:b0:
                    17:01:58:b3:85:60:8b:7a:72:a4:77:53:fa:80:16:
                    12:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A5:88:DF:47:DB:52:0A:2A:32:64:F3:85:65:BF:CE:B2:14:80:29
            X509v3 Authority Key Identifier:
                keyid:7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/1fb89fd2a79d8555c92e3656cd6e18a0337a18c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:cc:93:71:8d:b3:47:7d:c0:ff:44:4c:17:b7:44:3d:69:9a:
         d8:09:8f:59:48:8e:27:76:0f:d7:32:a8:1e:60:af:ca:8a:a1:
         8d:60:73:f4:84:e6:e0:fa:0c:e3:48:13:23:46:51:0f:c1:a2:
         8a:73:0c:90:4b:1b:74:e3:bd:47:08:cd:a1:89:57:a7:c9:e9:
         12:b9:2b:df:03:8a:9c:c4:98:d3:49:b5:30:68:cc:f0:69:45:
         a7:8a:d1:22:a6:df:f3:ad:cf:48:e4:17:9b:85:34:3d:08:a3:
         2c:53:80:48:a2:92:9b:d0:75:9d:6d:24:b4:98:b0:03:55:76:
         87:ab:48:68:05:d4:d6:9f:69:b6:8a:28:dd:62:45:30:ff:eb:
         2d:7c:e6:4f:14:ca:66:08:2d:0a:7d:95:bb:a5:d0:14:05:dd:
         1a:23:60:df:5b:dd:63:ed:f6:ad:22:f3:8d:4f:9a:2e:ef:08:
         44:0d:ef:31:a3:86:46:da:74:ce:d0:36:62:97:17:ed:3f:ae:
         21:37:17:09:11:0e:29:53:43:77:f5:59:d0:fb:35:6a:44:64:
         69:c8:14:d7:9e:53:3a:61:a8:38:b7:84:b1:f0:94:5b:71:e7:
         10:36:f5:f1:0d:2c:9c:7a:d5:ce:89:65:dd:e3:b7:2a:2e:af:
         96:90:78:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 19:56:13 2023 by rpki-client on console-ams.rpki-client.org