Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/b84edfdf127db082c8e0f840b1697cb874235b74.roa
File:                     b84edfdf127db082c8e0f840b1697cb874235b74.roa (raw, json)
Hash identifier:          V1PqjJJimsW2NQGw1pRlwwPpXD0mkGC0/ZPA7QOZHM4=
Subject key identifier:   15:3F:20:CD:B9:79:D6:57:BA:59:FD:98:C2:0A:C0:7D:90:B5:07:26
Certificate issuer:       /CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
Certificate serial:       2349E5
Authority key identifier: 7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/b84edfdf127db082c8e0f840b1697cb874235b74.roa
Signing time:             Mon 14 Aug 2023 17:55:47 +0000
ROA not before:           Sun 13 Aug 2023 17:55:47 +0000
ROA not after:            Thu 14 Aug 2025 17:55:47 +0000
asID:                     834
IP address blocks:        190.93.72.0/24 maxlen: 24
                          190.93.81.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2312677 (0x2349e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
        Validity
            Not Before: Aug 13 17:55:47 2023 GMT
            Not After : Aug 14 17:55:47 2025 GMT
        Subject: CN=b84edfdf127db082c8e0f840b1697cb874235b74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:16:3d:29:07:ca:24:32:b3:ac:78:8c:5c:a6:
                    9f:0d:bc:b8:93:61:ac:6e:10:00:cb:e9:25:7b:cc:
                    5c:33:e4:6d:3d:ea:64:6d:91:49:9b:9c:4e:69:31:
                    7c:03:f8:d4:84:af:2c:41:a5:cd:c7:1b:ad:c0:99:
                    ad:3c:f5:84:ea:b7:7f:c5:46:2f:85:ca:58:68:28:
                    21:f7:a8:3a:20:d2:1e:cb:86:c3:34:1b:62:1b:d7:
                    1a:65:55:80:18:32:96:99:f5:37:9b:50:e9:ff:ef:
                    07:7c:0f:0d:0e:0a:84:25:ce:29:8c:a3:b7:5e:c7:
                    0d:1e:28:73:9b:26:36:6e:3c:35:e1:3a:d6:cd:3b:
                    29:0f:d0:f8:80:36:91:e6:57:44:ba:84:e1:a5:b1:
                    01:0b:7d:4b:5a:cb:a3:55:77:e8:a4:03:c0:9d:51:
                    08:1a:2a:02:96:f5:f7:25:d5:ab:55:71:11:98:4b:
                    e8:27:e6:05:1d:fc:0d:cc:67:94:95:e0:59:6f:ae:
                    c3:7b:b8:e1:2e:96:6a:b2:90:c5:36:e9:c4:f6:5d:
                    b8:61:a6:e9:fb:d5:05:c0:ad:e6:c7:6f:cb:f7:1e:
                    54:78:92:e2:d4:96:a8:5d:ea:06:95:fe:e3:d3:b6:
                    0c:10:a8:f8:bd:1e:5d:6f:f3:a5:05:52:74:1d:91:
                    aa:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:3F:20:CD:B9:79:D6:57:BA:59:FD:98:C2:0A:C0:7D:90:B5:07:26
            X509v3 Authority Key Identifier:
                keyid:7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/b84edfdf127db082c8e0f840b1697cb874235b74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.72.0/24
                  190.93.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:71:e6:01:65:b4:e1:dd:b9:c5:7c:cb:0c:cd:f0:a1:37:67:
         e6:38:1a:57:c2:78:3c:a1:a9:75:b5:ec:a4:40:6a:ba:a5:ed:
         30:2d:f9:ca:76:71:53:2b:0f:20:01:23:8d:5d:c6:ed:fa:01:
         d9:2f:03:bc:e1:a7:e5:aa:7c:54:a3:9f:60:38:f7:00:b1:42:
         54:97:ba:8d:83:3b:4f:c1:69:ed:57:2a:1f:c0:77:72:d1:c2:
         2b:fc:a6:df:36:17:e1:83:b9:2f:9c:b3:3f:37:7f:a8:74:87:
         3a:3e:40:c9:d8:b0:b9:10:0a:d1:e5:4e:59:d6:6a:1b:a5:a0:
         b7:7d:d7:82:bb:bc:9e:41:25:80:e5:0e:cc:34:3c:21:59:02:
         01:0f:db:13:ef:72:88:4c:e8:1a:89:24:21:6e:bd:c8:20:c9:
         36:87:b9:2b:64:ba:e2:39:84:ec:83:cf:cf:3b:4f:fe:6e:2c:
         34:28:75:bd:4b:af:ae:38:db:68:ad:a0:9d:3a:2a:67:9d:67:
         a1:6c:b0:45:55:32:12:be:43:03:cd:d7:89:b5:2c:5e:e0:a8:
         3f:29:06:9b:10:7c:14:3a:60:0b:3f:da:04:59:db:c3:12:2c:
         72:c9:9f:de:f5:97:a3:a4:98:76:be:d8:f3:9d:3c:c8:d1:47:
         50:0a:71:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 19:55:48 2023 by rpki-client on console-fra.rpki-client.org