Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/558939f74321fa941fb222c27965fdf4973701f9.roa
File:                     558939f74321fa941fb222c27965fdf4973701f9.roa (raw, json)
Hash identifier:          iQK6CIvbB5icvS0tqpyV7ARw1CjMwLDj1dvLQ2RDb9I=
Subject key identifier:   09:72:57:DC:90:3F:87:24:74:D7:DC:28:76:1D:AC:79:A5:3B:1C:FF
Certificate issuer:       /CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
Certificate serial:       22DF13
Authority key identifier: 7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/558939f74321fa941fb222c27965fdf4973701f9.roa
Signing time:             Mon 07 Aug 2023 15:20:00 +0000
ROA not before:           Sun 06 Aug 2023 15:20:00 +0000
ROA not after:            Thu 07 Aug 2025 15:20:00 +0000
asID:                     197842
IP address blocks:        190.93.95.0/24 maxlen: 24
                          190.93.79.0/24 maxlen: 24
                          190.93.82.0/24 maxlen: 24
                          190.93.83.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2285331 (0x22df13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
        Validity
            Not Before: Aug  6 15:20:00 2023 GMT
            Not After : Aug  7 15:20:00 2025 GMT
        Subject: CN=558939f74321fa941fb222c27965fdf4973701f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1c:36:6e:c6:05:51:55:ce:49:f5:d6:75:7a:
                    d7:85:3f:c6:4b:5c:51:eb:ee:6e:cb:f4:6d:68:bc:
                    f0:30:b8:2c:a1:e7:31:85:4a:dd:4a:c1:86:21:bf:
                    55:5e:42:32:b4:c1:15:9c:39:4d:85:a9:2d:51:20:
                    b2:08:2e:07:d2:5c:a2:f7:db:1f:ca:f3:6a:4c:0e:
                    ee:01:35:3e:2a:1e:c9:61:43:3f:b4:c0:65:0c:18:
                    61:f2:31:07:98:6f:57:2c:dd:5c:1d:32:46:4a:74:
                    91:95:b3:2c:ae:9a:bd:1c:8f:43:28:19:aa:fa:77:
                    f8:44:a8:c0:f7:b6:c2:21:0e:01:0d:a5:be:91:88:
                    f4:dd:b0:38:6f:e2:5e:45:c4:2d:af:ec:21:9e:e9:
                    f1:43:d4:ea:f2:13:82:77:ef:ea:46:a4:75:1b:08:
                    30:37:5e:96:97:ce:3f:f8:23:b3:91:1e:e6:47:3b:
                    13:77:73:83:91:d1:c8:67:87:d8:ce:e9:12:e0:df:
                    28:ce:b0:83:18:92:92:cc:81:90:d1:a2:8f:d7:3d:
                    c0:34:99:b1:ad:32:61:74:bb:db:34:c8:1b:5f:d4:
                    ee:c6:f4:8e:83:d3:86:4a:63:39:98:58:f4:a4:bc:
                    f8:0b:1c:83:42:db:6f:42:71:10:36:eb:c7:26:9f:
                    cf:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:72:57:DC:90:3F:87:24:74:D7:DC:28:76:1D:AC:79:A5:3B:1C:FF
            X509v3 Authority Key Identifier:
                keyid:7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/558939f74321fa941fb222c27965fdf4973701f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.79.0/24
                  190.93.82.0/23
                  190.93.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:4f:f2:c1:70:4b:27:d1:83:65:9e:a1:da:f9:a7:b7:76:8b:
         50:93:b3:9f:59:94:61:95:3c:de:27:a6:7a:20:91:02:0e:1d:
         ea:ab:21:2a:ac:6c:ed:4b:4c:17:5d:e7:38:4f:76:e6:a9:78:
         aa:3e:d9:c3:38:45:d1:6b:f3:a1:35:61:fa:ff:32:56:1e:75:
         9c:f7:dc:60:8e:61:8e:ce:3c:c9:e1:4c:f7:84:b1:a6:4d:b0:
         31:18:ed:d5:09:a4:aa:47:7d:b7:ec:80:d7:8f:e3:09:b1:9a:
         e1:f5:c1:0b:f9:13:55:81:a7:e4:03:0e:ff:6c:9a:b3:a8:18:
         b7:eb:87:2b:80:a2:e6:12:5d:d4:d0:e6:5d:60:47:23:3e:c9:
         c6:85:de:12:61:b8:06:be:c9:9c:04:67:0b:b1:4f:5f:cf:dd:
         e3:12:78:cb:e2:d8:31:73:e9:4c:94:30:05:e4:dc:a3:8b:c7:
         8d:04:ce:2f:7a:5c:2b:f3:15:e5:3c:e1:c2:8f:a9:2a:91:f9:
         c1:91:04:ec:4c:8c:76:c4:24:d8:4c:35:8d:86:70:6d:e7:2e:
         43:80:3a:bd:18:81:31:87:00:3c:26:47:41:4a:6b:0c:85:bc:
         ca:f3:16:cb:b0:d1:a2:2a:c1:06:1f:e7:ba:a8:fd:34:2e:1e:
         5a:31:6a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 19:55:48 2023 by rpki-client on console-fra.rpki-client.org