Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/58517edcedd8b1612ad5e6088102ccaf9484dff8.roa
File:                     58517edcedd8b1612ad5e6088102ccaf9484dff8.roa (raw, json)
Hash identifier:          RYMl/kH9GFPu7ncIr68omsjGIOc7WZ3gbuM0b839fuM=
Subject key identifier:   7F:36:28:CF:1E:68:4E:2C:E4:6D:B7:20:65:5D:1C:DF:40:A1:F8:57
Certificate issuer:       /CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
Certificate serial:       23BDE1
Authority key identifier: 7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/58517edcedd8b1612ad5e6088102ccaf9484dff8.roa
Signing time:             Fri 01 Sep 2023 19:05:29 +0000
ROA not before:           Thu 31 Aug 2023 19:05:29 +0000
ROA not after:            Mon 01 Sep 2025 19:05:29 +0000
asID:                     36113
IP address blocks:        190.93.67.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2342369 (0x23bde1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
        Validity
            Not Before: Aug 31 19:05:29 2023 GMT
            Not After : Sep  1 19:05:29 2025 GMT
        Subject: CN=58517edcedd8b1612ad5e6088102ccaf9484dff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f0:62:a3:56:1e:4b:f5:33:51:7e:9d:14:b9:
                    ab:0e:aa:5e:9b:b5:97:3f:8c:d9:96:85:62:75:c0:
                    35:71:b7:0e:35:45:8f:b1:d9:2d:15:b6:23:07:7f:
                    da:c2:c3:c7:1e:4b:91:3e:60:86:d6:75:ad:e7:ce:
                    c6:ec:c1:ab:5c:66:cd:fc:b3:f5:9f:da:a6:7f:30:
                    5e:b8:08:de:5c:39:fe:31:73:32:ec:f9:00:fe:6d:
                    12:ca:b8:6d:68:22:2b:fc:cc:b3:30:93:22:f8:89:
                    ce:fd:02:05:f0:d3:20:f5:45:2c:c3:73:72:15:a7:
                    07:88:94:e4:2e:14:2c:ad:71:92:3e:ae:57:71:9d:
                    51:6b:ae:73:1c:b7:30:2b:9b:4d:e4:3d:c3:a2:76:
                    0c:37:ec:c2:30:bb:25:2e:de:90:cd:a9:a5:00:36:
                    b4:d1:a3:7a:60:a9:c1:da:54:a2:b4:f2:5c:37:88:
                    23:65:98:b7:b7:e6:d1:38:ec:d1:01:30:21:5c:db:
                    2b:7c:cc:a1:79:1e:74:5f:a0:1f:69:ac:80:fd:16:
                    d2:ee:e8:0e:bb:e4:73:fc:0e:bb:9d:a0:2c:c2:cd:
                    c0:e2:a6:d2:8b:e0:6f:7f:88:91:6c:7b:6b:be:39:
                    62:1d:33:39:9c:0f:0a:7e:e6:65:3b:52:c4:c0:99:
                    0e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:36:28:CF:1E:68:4E:2C:E4:6D:B7:20:65:5D:1C:DF:40:A1:F8:57
            X509v3 Authority Key Identifier:
                keyid:7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/58517edcedd8b1612ad5e6088102ccaf9484dff8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:4d:af:cc:94:65:b7:17:0c:49:87:3e:8e:57:43:bd:71:69:
         d8:0b:49:f3:20:ba:07:8c:a3:f7:b1:b8:1e:61:69:1e:4a:fd:
         e5:26:fd:ee:7c:d2:05:50:7e:fe:e0:d5:8a:f7:a4:16:08:86:
         02:60:9d:0f:5a:ce:6b:55:e2:0b:b0:78:b7:ec:88:f9:e3:ec:
         36:b2:1a:27:6c:ac:ab:f4:42:81:f7:f3:a0:b3:b5:a7:2a:b6:
         33:9f:99:69:23:9c:9a:b0:bd:6c:b0:d2:fd:dc:13:0e:f9:d1:
         83:0e:92:3f:74:6e:54:3e:4f:ed:d5:1c:27:31:07:97:3a:43:
         e2:49:91:b2:f4:0e:1a:7e:12:9b:30:99:82:18:c8:c2:7b:f6:
         6f:31:41:18:65:25:ac:17:aa:00:dd:15:45:7a:7b:cc:79:c1:
         d0:ec:b1:a6:61:49:a3:10:a4:3d:8f:e8:30:ec:ef:83:ca:dc:
         da:0f:99:e6:74:4e:ed:a8:86:ee:b5:fc:ba:2f:b0:4f:a3:2c:
         9e:44:8b:10:ca:18:2a:f4:58:0c:fe:d4:8b:c9:27:54:ea:bd:
         80:4a:bd:7b:3a:20:a1:5c:dd:ea:51:33:d3:6f:36:a3:5b:fc:
         f0:b6:6f:24:f8:99:29:e9:dd:73:96:a3:b7:92:47:bd:19:c4:
         bd:fc:47:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 19:55:48 2023 by rpki-client on console-fra.rpki-client.org