Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/ccb71a1696e6395926327a03540ae1adae6409f2.roa
File:                     ccb71a1696e6395926327a03540ae1adae6409f2.roa (raw, json)
Hash identifier:          8yDW4iJtZQEvqOappwovcv2mPkWsMXkclzWq2zzOhEA=
Subject key identifier:   8A:1B:FE:DF:C1:01:2F:B1:BD:67:28:50:1A:AF:D3:F0:0B:9A:44:19
Certificate issuer:       /CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
Certificate serial:       23002B
Authority key identifier: 7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/ccb71a1696e6395926327a03540ae1adae6409f2.roa
Signing time:             Thu 10 Aug 2023 15:16:31 +0000
ROA not before:           Wed 09 Aug 2023 15:16:31 +0000
ROA not after:            Sun 10 Aug 2025 15:16:31 +0000
asID:                     49468
IP address blocks:        190.93.84.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2293803 (0x23002b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
        Validity
            Not Before: Aug  9 15:16:31 2023 GMT
            Not After : Aug 10 15:16:31 2025 GMT
        Subject: CN=ccb71a1696e6395926327a03540ae1adae6409f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d1:27:85:f9:76:44:01:0d:e1:d3:6c:f7:e5:
                    df:f8:dc:89:dd:3f:22:f4:f9:60:f2:84:69:24:0a:
                    25:ab:c1:8b:88:f9:94:67:c8:bc:b3:97:a2:c8:ad:
                    2c:1c:ab:34:66:a0:14:c4:23:4a:ed:f3:a9:32:59:
                    5b:6c:d0:92:c2:21:e2:11:53:9a:d3:4f:f3:24:9c:
                    6f:83:a1:f2:c7:8b:44:e4:81:45:91:07:f2:95:fc:
                    45:02:7d:bb:cf:e9:26:a8:ef:93:84:da:04:89:6c:
                    64:bb:2f:7f:b5:95:c1:9f:f9:7b:5a:7c:bd:d6:e0:
                    f8:f8:48:2a:0b:4d:df:8c:0e:a4:0c:3c:89:d9:3f:
                    89:a4:e5:98:c9:06:65:fe:03:d9:a8:ae:77:2e:86:
                    f3:a2:c1:24:aa:03:10:1d:6c:32:a4:b4:fe:3d:aa:
                    b0:7f:3d:f8:60:23:fc:70:8c:f0:64:ad:4e:fb:7b:
                    ab:11:37:1e:8e:86:98:dd:fa:ea:1c:4a:62:80:75:
                    36:e3:58:38:8d:3a:7f:64:01:ea:79:3e:2a:70:5d:
                    37:48:36:c2:70:ad:6e:4e:9f:5a:60:4c:62:c5:29:
                    d4:bc:5d:48:c2:27:03:2b:b0:85:26:32:92:42:a1:
                    29:cf:8e:22:a6:40:c6:a4:65:9d:ed:d7:a2:4a:96:
                    7e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:1B:FE:DF:C1:01:2F:B1:BD:67:28:50:1A:AF:D3:F0:0B:9A:44:19
            X509v3 Authority Key Identifier:
                keyid:7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/ccb71a1696e6395926327a03540ae1adae6409f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:8c:78:ed:6a:18:4b:52:59:a3:85:9a:e4:c7:b2:36:aa:4e:
         a3:cc:8f:aa:24:e0:1e:07:24:e7:49:ad:df:b7:7f:9d:61:c7:
         57:4d:7e:90:0d:51:ed:e5:35:6d:08:fb:56:37:eb:67:9f:d8:
         a5:27:06:49:d7:06:b2:e4:f0:0e:6a:c5:7a:4a:84:9b:60:b2:
         5c:4e:af:59:46:fb:56:d3:80:fa:d6:9f:dc:46:48:f2:2e:77:
         06:87:40:9b:c3:e2:fc:66:ce:86:47:b6:83:1d:cf:a2:16:e7:
         8d:04:db:bb:d4:68:2e:8c:a5:71:aa:b6:3e:3d:5f:aa:08:11:
         8d:f7:6e:d1:c4:ac:51:6f:b5:3e:8d:a4:7b:50:10:23:b3:d2:
         9b:96:95:01:7f:de:fd:29:d8:89:b4:3e:a7:5b:73:93:ad:09:
         92:e4:b8:91:62:d0:e1:67:43:9a:8c:4e:22:be:7c:ce:4d:31:
         3c:e3:33:33:b7:c8:9c:7f:17:dc:c7:0b:a1:6b:45:2a:1a:ba:
         23:ed:0d:46:1b:db:11:75:4e:34:39:41:49:0c:ff:df:7f:1b:
         71:93:67:aa:93:25:1a:78:9f:7c:31:6c:92:70:86:53:86:49:
         0a:c1:bd:51:e4:53:90:33:b0:41:8b:c8:58:f4:c1:08:1c:3e:
         5f:24:05:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 19:55:48 2023 by rpki-client on console-fra.rpki-client.org