Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/93794ae6d71191eba44d6656ea7b3b449e41ef76.roa
File:                     93794ae6d71191eba44d6656ea7b3b449e41ef76.roa (raw, json)
Hash identifier:          /888CDywp98VkwUGBCp6uVR92CXbeIYR/tYMRlJezVE=
Subject key identifier:   86:CD:FD:80:47:FF:19:91:33:23:54:B0:9A:AB:3E:EA:33:90:61:89
Certificate issuer:       /CN=c69b99fc2d2eefbdb75ba663d575a10ac84f78c1
Certificate serial:       22E62B
Authority key identifier: 26:32:3A:4B:C0:9F:4A:66:92:5C:34:E7:A0:CD:05:9E:A1:ED:05:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/93794ae6d71191eba44d6656ea7b3b449e41ef76.roa
Signing time:             Tue 15 Aug 2023 21:53:05 +0000
ROA not before:           Mon 14 Aug 2023 21:53:05 +0000
ROA not after:            Fri 15 Aug 2025 21:53:05 +0000
asID:                     6306
IP address blocks:        161.140.0.0/16 maxlen: 16
                          200.31.128.0/19 maxlen: 19
                          200.31.128.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2287147 (0x22e62b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c69b99fc2d2eefbdb75ba663d575a10ac84f78c1
        Validity
            Not Before: Aug 14 21:53:05 2023 GMT
            Not After : Aug 15 21:53:05 2025 GMT
        Subject: CN=93794ae6d71191eba44d6656ea7b3b449e41ef76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:31:31:18:58:5c:18:bd:ae:e8:96:d3:d0:0b:
                    91:30:21:c1:3d:fc:7c:46:f3:e8:43:e1:7f:7a:f5:
                    b1:64:ee:6f:50:9e:4f:b4:fb:9b:d4:42:84:20:ec:
                    26:ea:71:06:9f:df:99:9c:66:c1:81:7d:34:dd:52:
                    5c:37:ea:fd:12:f4:43:c8:50:75:e0:25:09:64:c7:
                    6d:73:81:08:e5:06:b5:08:cb:3f:0b:65:cc:ff:43:
                    03:48:10:d3:05:6e:ad:b8:75:6b:1f:54:56:07:90:
                    20:35:c0:c7:a6:08:fe:41:97:e9:8b:91:3d:8e:ab:
                    06:be:58:76:4f:be:d7:08:7b:7c:3f:20:ab:62:fd:
                    8c:90:71:f2:e4:89:82:69:91:5c:10:1a:1a:bd:6e:
                    9b:1e:11:33:fa:55:43:2b:54:4b:8e:fd:59:32:de:
                    73:b9:69:46:99:e0:58:0e:99:5a:04:d4:6f:d6:88:
                    6e:02:af:aa:06:11:ce:99:35:6d:5a:e3:f4:c9:63:
                    eb:03:7b:ec:7f:e0:da:f4:1a:f6:63:04:78:06:89:
                    d4:8d:d5:5f:67:a4:55:bb:25:85:86:51:c8:c0:ab:
                    96:0e:bf:a8:d0:67:73:86:22:db:c4:bc:e9:be:19:
                    68:df:68:61:5e:ba:53:1a:5b:0e:93:ef:72:62:12:
                    32:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:CD:FD:80:47:FF:19:91:33:23:54:B0:9A:AB:3E:EA:33:90:61:89
            X509v3 Authority Key Identifier:
                keyid:26:32:3A:4B:C0:9F:4A:66:92:5C:34:E7:A0:CD:05:9E:A1:ED:05:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/93794ae6d71191eba44d6656ea7b3b449e41ef76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.140.0.0/16
                  200.31.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         03:93:ee:30:c0:85:7f:ee:79:fe:97:7f:33:7e:85:35:75:07:
         c0:ca:0d:79:eb:ec:26:b5:38:07:6a:fc:a9:e6:68:1e:c0:af:
         3b:fe:2b:70:97:37:8a:01:a3:87:6d:d3:c0:7d:1d:e3:1c:87:
         08:8c:05:bf:92:66:5f:d4:bf:fd:97:77:a0:61:4d:61:d6:56:
         46:33:4e:07:8f:4d:24:33:c2:3a:df:11:fe:08:14:01:e9:ef:
         df:09:82:fd:3b:f5:da:48:a5:79:5f:aa:dd:6e:90:94:4b:22:
         5b:dd:67:c2:e4:c9:92:b9:22:b0:7d:ff:b8:a3:06:66:36:a3:
         d8:16:de:4c:ae:db:ea:32:03:1d:d0:39:8d:97:91:60:6f:63:
         e2:2e:1d:ed:31:59:38:b5:eb:37:cf:d7:aa:f4:0e:63:8a:86:
         4e:15:97:e3:b4:ea:bd:28:d1:a9:1d:dd:09:7e:e0:72:a3:00:
         f9:f3:ab:31:7e:10:7b:67:2c:dc:51:8e:49:6b:c2:56:04:6e:
         e5:32:fd:5a:f1:9c:bf:c2:4f:a2:6b:e5:d9:b4:ba:5d:31:44:
         d4:8f:d0:25:56:88:e8:fc:7a:86:51:60:b6:2e:c1:ac:ce:dc:
         6b:ff:10:f3:a7:93:c1:00:bc:ac:9a:8e:c5:e6:c8:d8:95:b9:
         d3:dc:58:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org