Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/49ab4e5456f6dd6c6b0e77021696bc5b9c20da76.roa
File:                     49ab4e5456f6dd6c6b0e77021696bc5b9c20da76.roa (raw, json)
Hash identifier:          v53QYNHlEfBV5F8mn0fjcXIS+dfGrWym2rM0cK8wMMA=
Subject key identifier:   27:22:C8:B0:11:65:9E:92:6D:5C:F4:4A:93:0B:97:F9:09:9C:71:C9
Certificate issuer:       /CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
Certificate serial:       22283B
Authority key identifier: 7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/49ab4e5456f6dd6c6b0e77021696bc5b9c20da76.roa
Signing time:             Mon 31 Jul 2023 12:08:56 +0000
ROA not before:           Sun 30 Jul 2023 12:08:56 +0000
ROA not after:            Thu 31 Jul 2025 12:08:56 +0000
asID:                     211826
IP address blocks:        190.93.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2238523 (0x22283b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
        Validity
            Not Before: Jul 30 12:08:56 2023 GMT
            Not After : Jul 31 12:08:56 2025 GMT
        Subject: CN=49ab4e5456f6dd6c6b0e77021696bc5b9c20da76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6d:b6:26:27:fd:41:37:0d:83:13:0d:7d:4f:
                    e0:d5:27:81:df:64:f8:92:cf:36:f8:d4:72:12:4c:
                    c0:4e:2d:94:4d:57:94:b8:24:09:a3:59:81:e1:7d:
                    ad:94:88:74:26:45:0a:77:41:2e:76:0e:73:7b:14:
                    6f:46:92:33:87:87:05:74:81:d8:1a:c0:57:fb:ce:
                    10:23:92:56:92:66:ef:5b:84:0c:0e:81:e6:0a:f7:
                    90:1a:a5:74:95:2e:a1:b3:57:ba:98:bc:64:22:c2:
                    9c:a5:5c:0f:ec:eb:0f:61:0d:a8:3a:18:d1:a5:96:
                    5d:71:39:da:c4:89:59:22:7e:24:4c:a9:61:d7:ee:
                    9c:ab:18:33:e3:60:01:8f:d0:43:7c:80:f0:ad:b8:
                    f6:45:f9:bd:7e:c4:66:3a:2c:78:ae:c9:eb:6d:0e:
                    96:8b:8c:6b:41:b2:71:9c:8b:bc:fb:50:7e:c9:f7:
                    b5:d8:90:da:b5:43:4a:85:03:56:44:54:17:7d:05:
                    d3:d7:29:2b:52:d7:12:80:1f:f5:da:87:59:5a:1d:
                    a8:90:3a:60:3e:cd:be:8c:c6:35:14:c3:0d:17:af:
                    87:83:0a:cf:db:eb:38:e4:c6:21:a0:16:90:cb:44:
                    b8:5d:17:28:83:69:86:0d:4e:6a:d2:2e:e1:62:57:
                    b0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:22:C8:B0:11:65:9E:92:6D:5C:F4:4A:93:0B:97:F9:09:9C:71:C9
            X509v3 Authority Key Identifier:
                keyid:7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/49ab4e5456f6dd6c6b0e77021696bc5b9c20da76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:ec:6a:d5:2d:33:61:5f:6d:f3:bf:2f:c7:6a:59:f1:b8:50:
         02:82:f3:d7:24:dc:92:a3:9d:af:aa:60:b1:74:c8:fd:7a:9a:
         ad:d0:1a:42:12:31:ca:80:ea:bf:59:ba:13:0c:61:30:2b:78:
         81:10:cc:2a:bf:cb:1a:8c:c1:3d:f1:f1:fe:d2:01:78:da:4b:
         01:bf:7b:b4:09:49:f6:48:a2:35:a9:22:b6:5e:4e:70:61:7d:
         51:ed:95:48:39:21:27:75:e8:d4:79:93:d6:a0:39:77:ec:59:
         9e:41:fa:87:06:45:9f:d1:36:59:e6:51:9a:6b:03:7f:b8:4d:
         3d:1e:21:cc:c3:db:7a:e8:50:bb:a4:8b:5d:0b:61:d8:c1:5b:
         76:82:28:9a:58:44:d3:64:65:e3:4a:47:08:0f:60:75:13:63:
         01:07:73:b4:59:a8:8b:24:82:bf:2f:5f:30:65:91:1f:86:52:
         fc:14:d6:ea:89:f1:05:e9:4f:5f:ce:0f:f0:30:9f:18:8c:75:
         16:a0:95:05:83:9d:a9:a0:c3:d5:ae:98:67:3e:62:35:29:ed:
         11:79:37:31:8a:45:72:be:d1:c3:ff:62:41:46:29:86:19:c9:
         f1:51:f9:1e:13:d8:e5:9b:0e:cd:be:22:c6:ad:b9:03:5f:e0:
         22:79:4e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 19:56:13 2023 by rpki-client on console-ams.rpki-client.org