Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/7e37843ec14ec0290670f5b9dbd379c8b0890c21.roa
File:                     7e37843ec14ec0290670f5b9dbd379c8b0890c21.roa (raw, json)
Hash identifier:          ODoPSwkrHKXEBVLhcGziTvPEsbpDa5oHGUsgWDadcfU=
Subject key identifier:   74:77:E3:5B:BD:B3:65:D3:82:C5:50:43:5E:E7:1D:ED:78:5D:DE:B4
Certificate issuer:       /CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
Certificate serial:       231D59
Authority key identifier: 7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/7e37843ec14ec0290670f5b9dbd379c8b0890c21.roa
Signing time:             Fri 11 Aug 2023 16:31:44 +0000
ROA not before:           Thu 10 Aug 2023 16:31:44 +0000
ROA not after:            Mon 11 Aug 2025 16:31:44 +0000
asID:                     199487
IP address blocks:        190.93.68.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2301273 (0x231d59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
        Validity
            Not Before: Aug 10 16:31:44 2023 GMT
            Not After : Aug 11 16:31:44 2025 GMT
        Subject: CN=7e37843ec14ec0290670f5b9dbd379c8b0890c21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:4b:3e:db:91:b7:01:fb:d6:ce:59:3e:9c:9c:
                    51:cd:34:f3:9e:34:f6:11:05:58:4d:89:29:51:ef:
                    1d:86:7f:07:49:c3:b5:95:cf:72:cc:85:b2:28:ca:
                    30:6a:30:66:8d:5b:eb:3a:6a:2e:a0:b1:a0:ed:f3:
                    da:44:9e:c9:f9:c9:10:b2:3f:66:65:a8:48:69:26:
                    de:18:ac:7b:02:4d:34:ea:32:7a:05:e7:9c:82:f0:
                    db:a9:8f:bc:01:0a:03:97:fb:b2:02:c6:05:18:63:
                    31:85:1f:dc:d0:42:93:3a:60:74:4d:a5:45:b4:7d:
                    3d:ec:27:15:ad:c0:d1:8f:6d:d4:a6:11:e6:90:75:
                    0d:e7:95:cc:13:49:1f:31:e2:1a:92:f5:54:c0:9e:
                    c6:1e:f2:37:ae:20:c6:55:d9:25:ea:be:f6:18:99:
                    ca:2d:bf:35:05:18:6d:b9:4c:ef:51:9f:ac:41:c2:
                    72:34:3f:f2:c3:5a:07:4e:b3:41:67:ec:91:6b:fd:
                    7b:87:d4:b7:31:26:78:53:0e:60:b0:bc:e1:93:da:
                    6d:b6:a0:93:4f:cd:35:4a:b6:b1:ee:f0:b0:e6:d3:
                    7b:c7:d6:c4:b7:2d:a8:bd:9e:2e:2c:a7:2c:11:a7:
                    a6:13:85:21:1b:97:24:67:8c:f0:29:5c:5a:6b:90:
                    b2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:77:E3:5B:BD:B3:65:D3:82:C5:50:43:5E:E7:1D:ED:78:5D:DE:B4
            X509v3 Authority Key Identifier:
                keyid:7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/7e37843ec14ec0290670f5b9dbd379c8b0890c21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:5d:bc:51:9f:15:57:de:0d:d0:98:83:51:28:e0:ab:9a:24:
         71:bf:ba:b7:17:0a:1b:5d:72:8e:94:fd:3c:b4:9d:0b:65:74:
         88:81:77:9a:ce:18:9c:c8:f4:0f:16:cf:86:0c:cf:9b:a5:cb:
         b0:7b:cf:e2:f6:07:b1:bd:3e:13:61:d9:a6:88:0c:0c:bb:e7:
         39:1c:0d:95:c4:ca:ef:57:64:3b:42:b4:36:28:96:34:8a:f8:
         fa:68:d1:70:07:b4:df:62:02:13:25:a3:27:16:ce:69:62:24:
         f6:09:f6:8b:eb:40:c8:65:89:58:9e:84:f3:d3:48:c1:4a:05:
         a3:7d:68:08:7d:b6:cb:c6:20:b2:d8:43:12:39:36:fe:61:64:
         f1:d5:3d:1a:19:69:2d:9d:b0:71:07:0d:5f:af:1f:5f:84:f0:
         fa:ae:ef:c2:b9:f2:6b:8e:6b:c9:61:97:81:20:8c:0d:73:8d:
         dd:56:5c:84:5f:cc:73:36:66:e8:26:de:ef:6c:6c:b6:32:9b:
         97:a9:37:48:0c:87:3c:27:b9:8d:09:34:42:63:af:8b:e6:b0:
         44:eb:a9:9a:3c:f6:3f:de:81:a2:de:41:f5:89:aa:97:d2:dd:
         cb:53:0e:ef:34:94:5b:4a:fc:e5:32:a4:d1:8c:62:66:35:47:
         05:ca:7e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 19:55:48 2023 by rpki-client on console-fra.rpki-client.org