Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/d082a96e299a86abb61f32ea91afc1109c83e156.roa
File:                     d082a96e299a86abb61f32ea91afc1109c83e156.roa (raw, json)
Hash identifier:          kk5+k0JG7gUEniIWjj8fIEIPa23eoxjLHMkeVfdqnkE=
Subject key identifier:   AE:6D:AB:3C:9D:B4:FC:E6:9D:51:15:3B:A2:90:DF:EF:3C:C5:DC:03
Certificate issuer:       /CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
Certificate serial:       2102FC
Authority key identifier: 7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/d082a96e299a86abb61f32ea91afc1109c83e156.roa
Signing time:             Mon 12 Jun 2023 15:18:26 +0000
ROA not before:           Sun 11 Jun 2023 15:18:26 +0000
ROA not after:            Thu 12 Jun 2025 15:18:26 +0000
asID:                     27789
IP address blocks:        190.93.96.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2163452 (0x2102fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
        Validity
            Not Before: Jun 11 15:18:26 2023 GMT
            Not After : Jun 12 15:18:26 2025 GMT
        Subject: CN=d082a96e299a86abb61f32ea91afc1109c83e156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:92:4d:17:20:04:cc:7a:99:26:25:14:2f:d9:
                    26:28:5f:dd:60:14:73:1a:36:69:f3:e5:d7:be:9f:
                    20:a8:66:ce:01:b2:ae:e9:94:e5:4c:77:08:b8:63:
                    0f:66:42:30:63:65:dd:a5:2e:a4:e7:8c:38:ca:da:
                    b7:03:23:ac:7b:55:cd:83:88:36:87:93:64:5a:d5:
                    3f:69:97:05:f8:60:53:bc:12:8e:76:f9:e3:d5:a7:
                    8a:0f:0d:bd:09:95:2b:31:dc:f2:21:c5:a2:dd:a6:
                    dd:e6:6e:72:63:8f:87:88:16:a1:d0:90:9b:7f:56:
                    55:59:19:0d:09:65:74:96:fd:56:dd:79:ec:20:14:
                    1a:90:01:69:6c:10:da:d2:c2:2d:cd:e3:23:4a:e9:
                    c2:dc:1b:88:02:25:08:1c:39:51:d4:52:73:c4:6f:
                    1f:dd:68:27:c9:47:13:d8:6d:b6:c4:33:8f:9f:73:
                    4d:74:06:95:1d:91:94:23:c4:74:04:6e:3b:9e:74:
                    31:c6:e9:d9:61:6b:06:90:e4:73:1b:4e:9b:5a:ee:
                    b6:b3:4b:0c:ab:ab:4b:de:7f:b6:d5:d5:95:f7:53:
                    34:6f:cd:97:38:83:8d:82:91:c5:d9:08:f0:8a:26:
                    84:83:93:44:3a:9a:07:1c:f0:6b:a9:58:9f:44:1a:
                    bc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:6D:AB:3C:9D:B4:FC:E6:9D:51:15:3B:A2:90:DF:EF:3C:C5:DC:03
            X509v3 Authority Key Identifier:
                keyid:7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/d082a96e299a86abb61f32ea91afc1109c83e156.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         55:bd:96:2f:42:26:f4:0a:74:73:a6:f7:dc:b7:32:7b:0f:16:
         d9:46:c0:ce:b5:b7:b5:24:62:92:19:e4:54:bb:e1:75:01:50:
         17:6f:a8:65:bb:d7:11:52:f4:aa:df:71:31:6a:ca:08:8f:e4:
         dd:45:b6:10:93:5d:97:05:88:60:ec:b4:d3:bd:2b:e9:76:01:
         97:a9:5a:f1:2d:f3:25:35:2e:00:30:d4:cf:0e:ca:a7:43:05:
         69:de:24:bb:12:ed:17:04:5d:ad:5f:a7:e4:56:c3:12:82:d5:
         0b:4e:d1:84:80:43:1d:b5:1f:07:51:8b:84:62:03:3d:1b:ec:
         85:fe:3d:95:60:31:66:61:4a:1f:4a:81:0e:9a:2c:27:e7:d3:
         3f:29:bb:f5:8d:df:52:cb:f7:0f:bd:0a:b4:12:bc:b6:c8:8b:
         04:6b:62:f9:9d:82:c6:fd:72:e1:8a:7a:f4:1d:f7:62:26:04:
         c5:ce:6a:b0:c1:84:9c:13:c8:3f:46:3a:72:2c:bc:42:96:34:
         8d:76:b3:4f:93:b4:81:90:68:b5:8a:94:12:63:58:bd:70:fb:
         3d:35:a4:3b:48:9e:00:36:d5:f6:44:65:02:8a:fc:5a:2a:ba:
         f4:5f:cb:84:4d:31:b9:eb:3e:6b:65:4a:45:2c:89:ac:da:3b:
         1e:07:85:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 19:55:48 2023 by rpki-client on console-fra.rpki-client.org