Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/3330d6836d49a33f075894d9402f044f7c48f919.roa
File:                     3330d6836d49a33f075894d9402f044f7c48f919.roa (raw, json)
Hash identifier:          beIta3z142HfvhJPoVQBl17G2yN9jnYXwUZ+nAqB5HY=
Subject key identifier:   85:F0:61:5E:BF:0E:35:6D:AD:FE:C4:BD:74:4F:A4:9F:72:FD:AA:30
Certificate issuer:       /CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
Certificate serial:       228BDB
Authority key identifier: 7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/3330d6836d49a33f075894d9402f044f7c48f919.roa
Signing time:             Thu 03 Aug 2023 16:16:10 +0000
ROA not before:           Wed 02 Aug 2023 16:16:10 +0000
ROA not after:            Sun 03 Aug 2025 16:16:10 +0000
asID:                     29802
IP address blocks:        190.93.91.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2264027 (0x228bdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
        Validity
            Not Before: Aug  2 16:16:10 2023 GMT
            Not After : Aug  3 16:16:10 2025 GMT
        Subject: CN=3330d6836d49a33f075894d9402f044f7c48f919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:76:45:e5:33:98:0a:96:17:fc:c7:a4:53:6d:
                    6e:58:ca:65:4a:2b:39:dd:ed:b2:10:2d:f7:56:4a:
                    7c:c0:85:86:59:1c:24:9e:91:a9:d5:52:13:bd:81:
                    64:3d:e8:17:8b:11:b2:87:6e:e8:10:bd:02:03:82:
                    1c:f3:4d:7e:c9:f7:9c:f6:fa:eb:94:dc:dc:82:c3:
                    70:78:d0:09:6c:05:44:ee:76:12:de:a2:66:0d:f0:
                    54:6e:ae:c6:ef:e3:8a:c9:bc:fe:8b:34:de:3b:1d:
                    c1:5e:6d:98:6c:6d:73:5a:a2:01:d4:ed:de:3b:6e:
                    13:b6:fb:51:a8:1d:b5:f9:f1:a9:9e:83:60:7b:30:
                    85:fe:fe:aa:23:45:ef:12:44:69:5c:6d:e6:73:24:
                    8c:3e:32:75:af:35:66:55:fe:fc:61:4a:f0:f2:26:
                    ec:c4:c2:d8:a0:b3:0f:da:f0:31:e6:3a:ec:19:7a:
                    2b:96:e4:92:29:21:74:ca:f3:fa:14:d0:ec:9f:e0:
                    60:c9:1d:a0:28:a0:ff:66:bf:ef:1d:48:c5:a4:36:
                    47:b5:b3:ad:b6:76:88:9c:36:70:2f:c9:03:04:ad:
                    37:22:5c:b6:28:9d:dd:f2:a4:7c:f8:c3:ce:5e:91:
                    71:22:5c:ae:96:f9:6b:a4:a1:9b:71:57:52:67:ca:
                    93:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F0:61:5E:BF:0E:35:6D:AD:FE:C4:BD:74:4F:A4:9F:72:FD:AA:30
            X509v3 Authority Key Identifier:
                keyid:7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/3330d6836d49a33f075894d9402f044f7c48f919.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:16:51:07:3a:ea:42:3b:13:bf:32:61:51:a4:d0:27:be:b3:
         d1:c8:c7:14:2d:d8:31:e3:b8:e7:00:b9:34:48:07:96:62:6c:
         cc:a8:4d:93:e7:81:ed:d1:05:74:64:53:c3:49:5a:98:2f:13:
         62:ad:8e:20:0d:32:18:47:a9:c4:de:05:24:ae:0e:43:11:fb:
         51:4e:14:06:30:ac:97:58:c8:17:5e:7c:d8:ac:94:2a:23:40:
         f3:4f:fe:1f:b9:03:c9:da:14:e1:07:d7:27:7b:d9:56:1c:c8:
         f8:77:94:8c:0d:74:82:98:a7:3f:ff:cf:1c:f9:ae:ea:6d:49:
         f8:ab:85:4b:c4:b6:66:9a:43:30:77:03:41:23:17:3d:e0:d0:
         4f:36:a6:52:6d:b9:63:25:8a:22:cf:26:a8:a3:a8:ed:46:31:
         08:b5:be:ff:59:f6:9d:49:09:21:3b:17:f8:3c:74:40:11:e9:
         ba:52:2f:31:4b:09:fd:8d:58:ac:7c:7a:f1:4d:6a:ca:8c:e2:
         fb:22:43:66:ee:d2:e2:79:06:c5:24:d9:a5:63:48:f3:20:9b:
         73:20:64:67:2f:e5:62:b7:2c:bc:8b:74:36:05:05:19:9b:31:
         a7:40:fb:4f:4b:bb:73:fb:5b:49:cb:b5:75:76:10:43:fb:5e:
         0c:03:6f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 19:56:13 2023 by rpki-client on console-ams.rpki-client.org