Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/4068762949b861ebb341d723d22dd3feeb67b526.roa
File:                     4068762949b861ebb341d723d22dd3feeb67b526.roa (raw, json)
Hash identifier:          /p1kixctyXv0A9KbnkLWzBAt99v4UjWEAEDqIYXWIvs=
Subject key identifier:   55:41:98:94:76:1C:B2:5E:F1:82:5E:D1:4E:D1:33:AA:7C:93:5B:6C
Certificate issuer:       /CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
Certificate serial:       227E03
Authority key identifier: 7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/4068762949b861ebb341d723d22dd3feeb67b526.roa
Signing time:             Thu 03 Aug 2023 13:50:29 +0000
ROA not before:           Wed 02 Aug 2023 13:50:29 +0000
ROA not after:            Sun 03 Aug 2025 13:50:29 +0000
asID:                     5065
IP address blocks:        190.93.66.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2260483 (0x227e03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
        Validity
            Not Before: Aug  2 13:50:29 2023 GMT
            Not After : Aug  3 13:50:29 2025 GMT
        Subject: CN=4068762949b861ebb341d723d22dd3feeb67b526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9f:e9:51:ac:03:d4:67:b9:d6:22:29:7c:2f:
                    da:c3:e3:0d:bb:b6:54:a3:3c:bd:08:ac:87:5f:3e:
                    ba:0f:a8:02:27:a5:55:b1:73:1c:70:b0:3c:1d:13:
                    54:05:44:09:e5:06:92:7e:ca:f5:9f:2a:8a:b0:ab:
                    04:ba:14:65:b9:43:cd:3b:52:a8:36:3a:ff:1e:97:
                    2b:30:e5:48:73:b6:c3:ed:1b:ad:4a:d8:f4:a8:50:
                    e8:9b:b0:25:5f:b5:4e:04:18:6a:a2:4a:a1:b0:6d:
                    d6:6c:e2:42:2c:bd:9e:0a:34:01:7d:5f:cb:07:6a:
                    f7:8d:1a:f0:c9:40:1c:68:56:76:b9:f1:2a:64:4d:
                    9b:38:38:c7:98:39:c0:5c:38:cf:08:31:db:27:8f:
                    7f:97:66:6b:c6:a6:e6:8a:f1:07:be:56:98:da:ff:
                    ec:5c:94:9e:58:b5:81:ec:7d:1f:c0:dd:1f:fb:95:
                    d6:5b:90:ea:d6:93:c3:0d:b0:d8:25:9a:f7:56:b0:
                    4f:82:42:c6:a6:09:24:92:c2:28:a0:25:04:d5:31:
                    8c:d0:fa:c0:67:fa:2a:07:3d:02:bc:cd:40:15:a4:
                    8e:d9:ec:25:c8:3c:5e:8e:28:fb:34:8e:87:0c:f7:
                    3e:4a:88:f0:90:70:96:59:47:06:70:58:b5:1f:9c:
                    24:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:41:98:94:76:1C:B2:5E:F1:82:5E:D1:4E:D1:33:AA:7C:93:5B:6C
            X509v3 Authority Key Identifier:
                keyid:7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/4068762949b861ebb341d723d22dd3feeb67b526.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:fc:39:24:e6:57:4e:df:2f:10:41:69:0b:bf:ae:2a:0c:d2:
         3e:36:d3:04:38:c8:b3:2e:81:a9:49:4f:a1:d5:ef:b0:bf:14:
         6b:f0:71:31:2c:d0:b7:5f:4e:89:e9:b7:64:57:26:13:69:84:
         0d:d9:f6:87:7f:98:93:5f:37:47:0e:f0:d5:c3:61:b9:ca:69:
         48:fd:74:da:03:d7:a4:a5:02:f3:bf:d1:4b:4c:fe:14:7f:52:
         63:55:b1:b2:43:08:5c:84:5d:0e:b8:92:34:25:73:d7:ae:ed:
         69:10:d4:45:d4:fe:f7:0e:05:dd:3d:5c:e9:de:52:9c:b3:88:
         2b:b4:a6:67:36:77:7a:61:eb:75:47:a9:fd:85:59:01:5c:07:
         47:88:8b:4b:60:c2:dd:b4:0a:4a:a1:63:39:9f:e0:03:0c:c4:
         4f:32:3d:f8:05:b5:ca:41:73:61:b0:bd:5d:3b:b9:c8:c5:22:
         33:b3:ad:ff:3e:03:27:80:61:7d:c5:9b:d1:aa:55:3f:4e:15:
         e7:e7:70:cb:a2:0d:90:ed:0d:ae:2e:ba:03:28:50:31:f9:7d:
         13:e7:72:97:dc:b1:17:21:ca:a6:74:28:d1:06:36:49:d2:1b:
         ce:49:68:c7:8a:b9:bc:eb:f6:ae:f2:84:4a:22:5b:fe:4f:a5:
         c7:bb:b6:e0
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIn4DMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZi
MmMzM2ZhMDE5MDFmNzAzZTM3MzBlMjhlOTllYjhiYzRjYmE2MmEwHhcNMjMwODAy
MTM1MDI5WhcNMjUwODAzMTM1MDI5WjAzMTEwLwYDVQQDEyg0MDY4NzYyOTQ5Yjg2
MWViYjM0MWQ3MjNkMjJkZDNmZWViNjdiNTI2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmZ/pUawD1Ge51iIpfC/aw+MNu7ZUozy9CKyHXz66D6gCJ6VV
sXMccLA8HRNUBUQJ5QaSfsr1nyqKsKsEuhRluUPNO1KoNjr/HpcrMOVIc7bD7Rut
Stj0qFDom7AlX7VOBBhqokqhsG3WbOJCLL2eCjQBfV/LB2r3jRrwyUAcaFZ2ufEq
ZE2bODjHmDnAXDjPCDHbJ49/l2ZrxqbmivEHvlaY2v/sXJSeWLWB7H0fwN0f+5XW
W5Dq1pPDDbDYJZr3VrBPgkLGpgkkksIooCUE1TGM0PrAZ/oqBz0CvM1AFaSO2ewl
yDxejij7NI6HDPc+SojwkHCWWUcGcFi1H5wk7QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFVBmJR2HLJe8YJe0U7RM6p8k1tsMB8GA1UdIwQYMBaAFH4HMs9XSoQiKTbT
qOxlLvM30lKkMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmIyYzMz
ZmEwMTkwMWY3MDNlMzczMGUyOGU5OWViOGJjNGNiYTYyYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzcwZGE1MWEtYzFjNC00NjQ4LTg4ODctMzhkYTRm
MTdiZjg2LzQwNjg3NjI5NDliODYxZWJiMzQxZDcyM2QyMmRkM2ZlZWI2N2I1MjYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jNzBkYTUxYS1jMWM0LTQ2NDgtODg4Ny0zOGRh
NGYxN2JmODYvNmIyYzMzZmEwMTkwMWY3MDNlMzczMGUyOGU5OWViOGJjNGNiYTYy
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL5dQjANBgkqhkiG9w0BAQsFAAOCAQEANfw5JOZXTt8vEEFp
C7+uKgzSPjbTBDjIsy6BqUlPodXvsL8Ua/BxMSzQt19Oiem3ZFcmE2mEDdn2h3+Y
k183Rw7w1cNhucppSP102gPXpKUC87/RS0z+FH9SY1WxskMIXIRdDriSNCVz167t
aRDURdT+9w4F3T1c6d5SnLOIK7SmZzZ3emHrdUep/YVZAVwHR4iLS2DC3bQKSqFj
OZ/gAwzETzI9+AW1ykFzYbC9XTu5yMUiM7Ot/z4DJ4BhfcWb0apVP04V5+dwy6IN
kO0Nri66AyhQMfl9E+dyl9yxFyHKpnQo0QY2SdIbzklox4q5vOv2rvKESiJb/k+l
x7u24A==
-----END CERTIFICATE-----
Generated at Fri Sep 1 19:55:48 2023 by rpki-client on console-fra.rpki-client.org