Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/c09bd92cff4ec2e084c4ec900fa5b8ced7ae368b.roa
File:                     c09bd92cff4ec2e084c4ec900fa5b8ced7ae368b.roa (raw, json)
Hash identifier:          Lbkkw9i88nzk8M2wIxWZA7fl/p6hldAT94XwUnGLqVc=
Subject key identifier:   28:F5:64:C8:FD:33:68:ED:88:A7:F1:6E:80:B8:ED:40:B9:01:15:F2
Certificate issuer:       /CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
Certificate serial:       23C169
Authority key identifier: 7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/c09bd92cff4ec2e084c4ec900fa5b8ced7ae368b.roa
Signing time:             Fri 01 Sep 2023 19:06:17 +0000
ROA not before:           Thu 31 Aug 2023 19:06:16 +0000
ROA not after:            Mon 01 Sep 2025 19:06:16 +0000
asID:                     834
IP address blocks:        190.93.86.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2343273 (0x23c169)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
        Validity
            Not Before: Aug 31 19:06:16 2023 GMT
            Not After : Sep  1 19:06:16 2025 GMT
        Subject: CN=c09bd92cff4ec2e084c4ec900fa5b8ced7ae368b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:57:bd:10:5c:d6:ea:04:ab:16:0c:3f:b1:c9:
                    5a:f9:c5:cc:3e:ba:6f:d9:aa:1d:bf:9f:b0:8c:3e:
                    d3:16:d0:78:dd:d9:18:2d:98:7f:ba:fa:f7:74:90:
                    35:41:6f:1a:e2:7e:b7:c3:58:15:85:4b:72:d6:1b:
                    6d:e5:f5:1c:1b:4b:fc:ca:66:ee:e0:6a:25:e2:0b:
                    2b:bf:1e:5d:1d:85:f8:c4:dc:cd:d9:a9:08:47:85:
                    4f:7f:34:84:d8:8f:20:e5:5a:8f:bf:69:68:99:47:
                    d0:67:f8:40:20:26:45:df:70:9f:48:b5:1c:0a:a5:
                    45:15:7d:a9:f2:3d:d1:4f:65:92:80:12:53:8d:60:
                    f2:60:2d:ba:a2:5c:08:a1:73:14:dd:e1:88:58:74:
                    03:63:7d:70:bd:15:8d:d2:50:b6:1c:a1:8a:81:2e:
                    6a:ef:a4:fb:20:63:77:1b:c3:6b:66:aa:b8:1a:ab:
                    07:d7:48:97:79:29:c9:7c:62:15:e0:b2:c7:f3:06:
                    78:6d:c4:54:5f:ab:35:9c:54:41:51:3a:6f:15:ae:
                    48:bd:a5:11:03:fd:1a:71:8c:1d:de:64:25:d2:49:
                    b5:fe:74:c4:bf:6b:88:8c:1a:db:c9:ce:48:ad:ca:
                    cf:42:9c:31:b0:2d:52:e1:d5:44:f4:bb:58:2d:92:
                    d9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F5:64:C8:FD:33:68:ED:88:A7:F1:6E:80:B8:ED:40:B9:01:15:F2
            X509v3 Authority Key Identifier:
                keyid:7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/c09bd92cff4ec2e084c4ec900fa5b8ced7ae368b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:0f:45:b0:9b:3b:0d:48:15:8a:9e:53:36:3c:b0:ac:08:6c:
         f3:2a:39:1c:08:45:c3:01:24:7d:31:27:d5:2d:02:6a:3f:4e:
         84:4b:98:44:59:3d:ea:19:23:ce:9f:2a:01:84:5e:81:69:e2:
         74:14:53:04:10:9c:2d:07:15:91:d0:da:86:3a:ef:0d:b8:46:
         ad:69:46:24:14:62:ba:1c:ad:1d:65:1f:db:a8:f3:1f:d3:5a:
         45:1e:81:37:91:4f:37:95:29:6a:4d:63:07:dd:dc:11:aa:99:
         2c:80:a4:55:c4:9c:2d:4e:1e:94:a6:a6:77:17:22:69:72:72:
         40:4e:6b:ae:9a:ba:58:4e:91:ea:d4:ea:02:27:9f:7a:95:cd:
         64:b7:83:4c:1f:f4:0f:91:10:ba:33:45:bd:0c:9b:e3:53:98:
         14:a1:14:b2:ab:d1:5e:78:7e:32:e6:f6:fc:2a:68:7d:78:9b:
         69:b9:20:9a:76:af:9d:16:88:26:b5:37:35:7e:fd:cd:35:9c:
         69:df:af:26:c8:b7:a4:e4:64:17:5f:c4:3e:a0:64:67:79:be:
         5b:e8:53:c9:7d:63:e4:ca:7d:e0:4e:75:a6:47:4e:ba:a2:71:
         75:b6:bc:f5:e4:9b:f2:42:2f:9e:5e:ac:62:d9:de:90:60:53:
         88:a8:dd:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 19:55:48 2023 by rpki-client on console-fra.rpki-client.org