Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/d2812e0d1b4db0296f4deec193e444becff12f60.roa
File:                     d2812e0d1b4db0296f4deec193e444becff12f60.roa (raw, json)
Hash identifier:          RrZc1ZOQ2uvk7CrJrqePNOYLYYaGGDtJXltNxd68YFA=
Subject key identifier:   5B:03:91:E8:51:8F:B2:7A:59:3E:E9:74:47:8F:B7:47:95:22:23:8A
Certificate issuer:       /CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
Certificate serial:       22AAB4
Authority key identifier: 7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/d2812e0d1b4db0296f4deec193e444becff12f60.roa
Signing time:             Fri 04 Aug 2023 16:10:54 +0000
ROA not before:           Thu 03 Aug 2023 16:10:54 +0000
ROA not after:            Mon 04 Aug 2025 16:10:54 +0000
asID:                     208287
IP address blocks:        190.93.81.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2271924 (0x22aab4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
        Validity
            Not Before: Aug  3 16:10:54 2023 GMT
            Not After : Aug  4 16:10:54 2025 GMT
        Subject: CN=d2812e0d1b4db0296f4deec193e444becff12f60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8b:37:1f:87:18:bd:35:44:d0:a5:68:f6:dd:
                    93:67:ca:5e:8a:6c:23:e9:bb:c5:35:6b:e2:7a:6a:
                    84:af:03:d7:02:0a:57:17:de:cd:f5:88:48:3d:ec:
                    aa:bf:35:d4:33:47:e2:7e:4c:6e:1f:d9:8a:bc:eb:
                    28:41:9b:ae:6c:55:44:14:31:d8:bb:33:2a:c5:d8:
                    ba:8e:d7:e7:d3:74:d2:72:e0:dd:0b:60:23:61:dc:
                    dc:de:b5:06:2d:89:41:fe:dc:9d:45:a2:8a:a4:39:
                    5c:6c:66:65:79:39:61:ea:ae:cd:ac:13:89:6c:28:
                    93:0d:03:9d:b4:3b:97:2c:30:51:2d:4b:f6:8e:5c:
                    4d:36:06:2b:63:50:15:88:34:c3:2b:1a:24:32:fb:
                    93:18:4e:40:69:57:c6:21:c9:e8:de:94:b8:cb:c0:
                    48:10:6e:65:f2:62:f6:94:79:60:88:9e:45:02:d7:
                    01:01:04:4a:6c:e5:93:6b:64:c8:7d:5c:56:17:0a:
                    9e:87:d1:9c:ce:32:5e:67:ec:0a:bc:81:8e:f2:d4:
                    c7:45:59:71:74:10:0f:40:43:28:97:e0:9e:d2:a8:
                    8d:1c:07:ef:ad:b9:47:8a:4b:57:ed:22:1d:95:20:
                    ce:9a:ed:11:7d:8d:2b:f5:2c:7f:3c:69:d4:6d:cc:
                    60:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:03:91:E8:51:8F:B2:7A:59:3E:E9:74:47:8F:B7:47:95:22:23:8A
            X509v3 Authority Key Identifier:
                keyid:7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/d2812e0d1b4db0296f4deec193e444becff12f60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:f7:4d:17:6e:f8:a2:c9:9d:74:0b:14:c9:56:cf:57:05:00:
         8e:ec:21:a0:37:ce:a8:ac:46:4c:fb:76:cd:65:93:d1:be:c5:
         ff:a2:8d:6c:a0:37:ed:77:4d:f6:3a:ef:c2:3a:39:72:5b:2a:
         02:5f:db:b3:1e:23:f7:91:c5:01:50:bd:3c:be:8c:51:fa:9a:
         00:af:7c:e7:c8:32:8f:15:27:ae:f9:8c:9b:b7:76:ec:a8:29:
         89:4c:f6:30:dc:74:32:b1:88:f4:79:3c:86:60:1b:10:75:c6:
         8b:ff:6e:b9:ce:02:ef:1f:61:a5:9c:31:ab:0a:b0:a4:e6:ad:
         ea:88:27:2a:59:35:da:aa:c6:0d:a1:a4:1c:27:df:90:be:68:
         c7:9c:3f:71:57:dc:c1:d5:62:be:9f:29:74:42:18:e0:fe:38:
         72:42:43:e2:eb:2e:53:31:62:d5:ce:d0:8d:7c:89:5d:b5:bf:
         ae:53:65:d5:82:33:8b:ec:6a:39:72:6c:34:90:62:3d:76:eb:
         52:14:b6:dc:81:df:97:62:fb:c2:e5:6a:ce:a8:dd:ab:ed:28:
         70:4c:2e:91:b9:2d:18:27:0a:b0:b6:30:bd:89:4e:06:f6:1c:
         57:4f:3d:96:6d:d8:b3:f6:e9:f2:21:b9:31:c9:77:b7:d9:64:
         86:a0:7e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:07 2024 by rpki-client on console-fra.rpki-client.org