Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e064098be007c55a403621da1cc53cffe217072e.roa
File:                     e064098be007c55a403621da1cc53cffe217072e.roa (raw, json)
Hash identifier:          Ai4fAbxcKdLWEyJS4wsmltTynHv7hBZnq2Gt4UiQghY=
Subject key identifier:   D4:59:2E:C4:B9:88:47:CE:B5:AC:A8:09:C2:72:98:00:76:C0:B4:FC
Certificate issuer:       /CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
Certificate serial:       228FE4
Authority key identifier: 7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e064098be007c55a403621da1cc53cffe217072e.roa
Signing time:             Fri 04 Aug 2023 16:04:26 +0000
ROA not before:           Thu 03 Aug 2023 16:04:26 +0000
ROA not after:            Mon 04 Aug 2025 16:04:26 +0000
asID:                     147186
IP address blocks:        190.93.76.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2265060 (0x228fe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
        Validity
            Not Before: Aug  3 16:04:26 2023 GMT
            Not After : Aug  4 16:04:26 2025 GMT
        Subject: CN=e064098be007c55a403621da1cc53cffe217072e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a6:ea:fb:2c:f2:12:21:5a:a4:b2:82:3e:2b:
                    3b:04:73:37:53:e4:3a:80:a9:25:86:bc:c8:c3:c8:
                    6b:6b:6b:28:8a:e9:76:a2:c6:e1:f2:9c:1e:0c:64:
                    0c:40:36:9f:05:19:4a:cc:07:cc:7a:5f:9a:e9:de:
                    20:99:c7:5e:9b:69:ed:a7:80:5c:0d:34:c7:f4:d4:
                    94:58:b4:2f:75:93:b9:8a:54:64:8b:38:af:6f:7c:
                    24:0e:4c:56:5c:b0:ab:7e:a5:1f:d7:3d:82:2c:d4:
                    0c:d3:a5:b3:fc:61:4d:3a:23:ca:c5:37:f2:ea:84:
                    ee:46:1f:fe:4a:b6:3b:2a:7d:cb:41:10:06:1a:97:
                    dc:81:78:ea:b0:70:9f:81:4f:08:f5:31:54:05:ca:
                    86:af:94:38:55:01:96:a1:f1:c3:4e:e2:bc:77:0a:
                    90:16:6d:b9:bd:98:eb:5a:e4:36:e1:9c:14:78:4f:
                    c6:cc:b5:6d:63:c8:0a:ad:4e:7d:35:3d:7e:5c:33:
                    3e:08:c9:f7:01:85:6e:b5:7e:b6:aa:b6:91:70:36:
                    75:cf:0d:d1:68:ef:c6:26:8f:dc:42:c3:04:ec:d5:
                    4e:bb:7e:ba:d8:84:62:8d:33:f5:fa:50:4d:1e:e5:
                    2a:0f:5e:2e:6a:df:ca:b0:c3:12:14:b0:01:5c:96:
                    4e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:59:2E:C4:B9:88:47:CE:B5:AC:A8:09:C2:72:98:00:76:C0:B4:FC
            X509v3 Authority Key Identifier:
                keyid:7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e064098be007c55a403621da1cc53cffe217072e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:06:97:4b:b0:a8:f1:5d:b6:ab:05:d4:17:96:3d:bb:d7:d0:
         0d:36:4a:7b:ec:f5:bd:0b:e6:3b:c0:42:48:7b:10:fc:3f:67:
         52:be:b9:79:ce:c9:4c:9f:6f:1a:15:3b:b5:1e:3c:1d:ba:a2:
         85:98:8a:3b:ec:57:c8:33:17:c2:c0:b0:a1:90:e2:ec:12:1f:
         13:fc:3b:52:b5:d9:cb:5c:56:c3:af:4c:1b:f9:92:6b:78:b8:
         a1:af:6e:9e:87:f7:b0:98:51:f6:95:d6:33:41:5a:15:8a:23:
         bc:a6:e3:c5:27:61:97:23:db:4f:07:e6:fa:b7:f5:0d:87:10:
         2a:8f:bf:b3:d5:23:90:65:4e:0a:92:1f:3c:d3:08:ae:93:45:
         81:e7:c0:b4:1f:23:b9:c5:55:8c:c6:06:97:a4:ee:0b:f6:cf:
         f6:df:3e:60:a7:69:0e:a8:c0:1c:a6:78:7b:93:34:ea:5d:a9:
         bf:9a:de:a2:d7:e5:42:47:a5:dd:7c:9e:ee:51:db:86:c9:ad:
         5a:0d:95:3c:b3:6c:66:53:1f:37:4b:1a:63:df:06:df:fd:01:
         46:16:60:25:c7:d6:44:f3:72:26:2b:12:dc:4d:0e:16:6e:7e:
         ed:8f:5a:46:9a:9b:6d:fc:0c:fb:4d:33:20:5e:2b:46:76:6f:
         56:5b:95:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 19:56:13 2023 by rpki-client on console-ams.rpki-client.org