Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/027871539f73f58ecda956a5d6f3e520e600d235.roa
File:                     027871539f73f58ecda956a5d6f3e520e600d235.roa (raw, json)
Hash identifier:          I2j34mXyjy5G31/2+54SduvuQRDNm8NExpDZxbF5OUU=
Subject key identifier:   5D:D0:13:C8:50:5D:1A:D1:24:69:53:68:03:7E:99:FB:D0:89:1B:CB
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1CEC14
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/027871539f73f58ecda956a5d6f3e520e600d235.roa
Signing time:             Wed 28 Sep 2022 17:09:37 +0000
ROA not before:           Wed 28 Sep 2022 17:07:00 +0000
ROA not after:            Sat 28 Sep 2024 17:07:00 +0000
asID:                     11830
IP address blocks:        196.40.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1895444 (0x1cec14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 28 17:07:00 2022 GMT
            Not After : Sep 28 17:07:00 2024 GMT
        Subject: CN=027871539f73f58ecda956a5d6f3e520e600d235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a4:75:92:df:e1:ca:b3:f9:fa:4a:13:fc:69:
                    5c:8a:5a:46:4b:a3:aa:40:e1:07:92:99:ba:ab:42:
                    ac:c8:90:19:ec:2f:93:85:90:fe:56:92:a9:f7:7c:
                    3e:6d:02:bb:f5:7f:55:00:99:ca:7c:70:b4:f0:1c:
                    3b:b4:fb:1a:89:2e:03:dc:7f:51:3c:00:12:ef:c9:
                    a8:ab:7f:d8:c3:6b:04:ae:c5:83:41:52:91:8a:a3:
                    cf:12:d5:e5:f1:4f:74:c8:f6:5b:2e:48:11:03:22:
                    b2:a8:99:d9:2d:4c:b5:01:eb:90:8e:f9:bf:27:19:
                    21:96:11:45:e4:08:91:e6:cf:63:1a:27:2b:9c:d8:
                    be:66:29:49:2e:50:d4:ef:ab:70:3d:3c:3a:0f:0c:
                    db:0c:b5:d4:f6:6c:a5:6b:82:9d:3a:d3:b3:64:a3:
                    0c:94:4b:26:84:d0:15:14:bf:eb:98:6f:a6:18:a7:
                    6a:5b:bf:3f:60:ac:0a:5f:53:11:84:25:b5:47:e4:
                    ea:2d:ea:67:3d:23:6e:43:66:5d:5a:90:d1:f1:3a:
                    40:6f:54:40:e8:b9:fd:3d:ab:46:f2:30:27:2d:5b:
                    fd:42:ef:34:a7:38:dd:94:dd:86:ad:13:ce:64:46:
                    5e:e3:70:a6:ad:12:b5:96:7c:1b:2e:3e:75:88:9a:
                    97:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D0:13:C8:50:5D:1A:D1:24:69:53:68:03:7E:99:FB:D0:89:1B:CB
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/027871539f73f58ecda956a5d6f3e520e600d235.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.40.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:a0:d2:02:10:c9:35:34:66:9a:ce:36:23:6c:77:2d:6d:96:
         c4:23:2e:2f:27:2a:b7:0a:4f:ab:eb:52:61:0c:d4:93:88:c2:
         2f:f6:54:b8:39:86:1b:74:53:1a:8a:29:9e:5d:13:50:70:f3:
         49:98:82:e9:d4:16:92:4f:41:8c:3f:c6:97:35:2c:54:a8:39:
         16:4e:3f:22:00:7d:9a:93:32:5b:ed:d6:71:a1:28:be:98:b0:
         b1:28:21:9b:01:a6:3d:75:40:d9:c4:71:cf:b8:61:d8:71:e4:
         1b:e0:e0:0b:bb:2b:12:61:8a:0c:07:0d:8f:03:0e:66:12:1f:
         ec:7f:c1:c1:80:9e:52:b7:06:57:71:85:31:f9:29:fc:0c:3b:
         53:2f:54:d4:15:7a:4a:0e:a4:b6:46:9b:71:9a:c6:a1:ee:d5:
         ce:cc:3d:a8:ac:19:b7:6f:cb:f5:bb:74:50:a3:d8:77:fb:0d:
         d9:4e:bd:43:8b:b4:94:74:9e:c7:66:ca:b8:e1:4a:48:e6:14:
         45:c7:4c:18:95:80:dd:fe:f2:df:5c:fe:0d:4b:2c:2d:d5:42:
         af:09:6a:59:85:64:4c:6d:30:28:16:40:bc:40:f9:8f:f9:8b:
         d2:d4:87:49:5e:fe:70:b1:e8:eb:f0:21:e3:67:32:2b:8f:13:
         d3:bb:39:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-ams.rpki-client.org