Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/b1ca3d118165182aea91e6da38b0b28fd1339c27.roa
File:                     b1ca3d118165182aea91e6da38b0b28fd1339c27.roa (raw, json)
Hash identifier:          tRU5K3Ed9vcS6gLpBMwXPp4t6NaikJm+R+sRHUqsTv0=
Subject key identifier:   AB:8C:4C:0E:85:B0:98:EE:6E:B9:62:B8:4B:DD:0A:E3:C3:9C:73:3F
Certificate issuer:       /CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
Certificate serial:       227429
Authority key identifier: 7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/b1ca3d118165182aea91e6da38b0b28fd1339c27.roa
Signing time:             Thu 03 Aug 2023 13:34:12 +0000
ROA not before:           Wed 02 Aug 2023 13:34:12 +0000
ROA not after:            Sun 03 Aug 2025 13:34:12 +0000
asID:                     147186
IP address blocks:        190.93.73.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2257961 (0x227429)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
        Validity
            Not Before: Aug  2 13:34:12 2023 GMT
            Not After : Aug  3 13:34:12 2025 GMT
        Subject: CN=b1ca3d118165182aea91e6da38b0b28fd1339c27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ba:56:69:e8:55:65:62:12:7e:c1:28:be:42:
                    68:d7:fa:08:89:d1:a4:96:f8:3e:77:dc:38:53:8d:
                    bf:fa:d7:bb:78:72:ce:62:8d:ba:b2:85:e7:10:0f:
                    47:75:a3:c7:56:a8:f4:8a:7e:0a:e8:ae:26:2b:bc:
                    09:c0:d6:d4:6b:0e:79:f5:5f:97:73:43:77:34:38:
                    9a:d1:1a:59:4a:fa:5f:45:a6:d6:c9:da:25:88:e4:
                    c8:20:4e:ba:0a:e8:ec:d9:9c:b7:38:22:71:32:8a:
                    7e:c9:11:a1:8e:84:cc:77:d4:a5:92:63:fd:2d:94:
                    e0:83:8d:9d:f0:cd:4b:8c:a3:7f:0d:f2:9e:91:24:
                    b0:92:73:63:19:d6:e7:88:28:2d:60:d4:ba:1a:8b:
                    73:c3:d3:1e:c6:74:5b:a5:a3:f9:b8:03:5c:bd:8b:
                    9e:77:42:f8:b0:ef:ea:dd:f3:62:54:d9:c0:bf:fd:
                    76:08:8c:7b:20:2d:8a:18:57:4b:4b:86:8a:77:7d:
                    6c:d7:3b:28:48:e3:6f:43:e0:22:c3:69:3b:f9:62:
                    21:7f:2f:51:44:00:9b:cc:52:09:1a:83:3e:5f:25:
                    86:c8:66:4c:cb:37:03:32:90:6d:ad:75:f4:d7:00:
                    65:6d:bf:e4:9a:06:97:c8:fd:1d:90:8e:e3:50:ec:
                    96:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:8C:4C:0E:85:B0:98:EE:6E:B9:62:B8:4B:DD:0A:E3:C3:9C:73:3F
            X509v3 Authority Key Identifier:
                keyid:7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/b1ca3d118165182aea91e6da38b0b28fd1339c27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:be:2d:7e:84:76:50:3a:b1:8b:47:2d:5a:82:2e:c3:38:14:
         51:46:0f:3f:9a:21:4f:0a:e8:69:37:9f:3a:5b:88:1f:cf:ec:
         0b:98:db:04:50:b6:62:db:ff:c3:61:bb:02:b9:76:4c:e3:44:
         ab:35:ee:2d:15:2c:47:65:39:2b:1e:5e:f7:37:46:b7:d7:0f:
         5e:9e:44:86:65:1f:4e:a6:22:64:0a:3b:d7:67:6a:80:29:2b:
         47:b6:c0:e2:15:e3:33:50:8d:90:96:37:80:18:20:ee:7f:d7:
         7a:04:8b:4e:2f:4d:ba:fb:af:10:5d:e4:ff:1e:52:2d:1e:33:
         88:9a:d5:55:7b:2c:e5:44:f8:ea:e8:6c:cf:40:22:c5:6c:b5:
         98:d2:23:31:0d:32:11:f0:d2:8e:22:0f:5f:b3:84:29:37:2d:
         32:36:0c:e5:9d:49:6d:b6:23:d9:ab:ca:fa:c0:2e:71:a4:6e:
         9a:de:73:70:f3:4e:08:08:75:22:c8:d3:40:11:3b:ea:cf:17:
         20:7e:0a:a5:15:bb:e0:b1:30:af:1c:4c:2c:f6:c1:4a:37:f2:
         44:01:7c:06:c1:c9:62:2f:22:64:d8:5d:64:06:2b:c0:6c:76:
         58:0c:63:96:6c:2e:9b:91:ab:86:6d:d8:e6:1f:59:b4:b5:6f:
         41:b4:a6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 19:55:48 2023 by rpki-client on console-fra.rpki-client.org