Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/0302c6929322090b67050c5cfc60628f1b0b2ee5.roa
File:                     0302c6929322090b67050c5cfc60628f1b0b2ee5.roa (raw, json)
Hash identifier:          lyqJVSxqZUULjs9/it870smb8DhDZubVquCP8QK9zlE=
Subject key identifier:   60:DA:58:00:4C:03:43:25:DB:75:98:E2:9B:C2:55:21:CA:AF:45:C3
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       192394
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/0302c6929322090b67050c5cfc60628f1b0b2ee5.roa
Signing time:             Thu 15 Sep 2022 20:17:57 +0000
ROA not before:           Thu 15 Sep 2022 20:17:30 +0000
ROA not after:            Sun 15 Sep 2024 20:17:30 +0000
asID:                     3790
IP address blocks:        190.10.20.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1647508 (0x192394)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 15 20:17:30 2022 GMT
            Not After : Sep 15 20:17:30 2024 GMT
        Subject: CN=0302c6929322090b67050c5cfc60628f1b0b2ee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5d:72:2e:25:2e:26:4e:c7:bf:dd:d5:f7:62:
                    09:d1:b6:90:17:68:74:cb:38:a6:30:ce:45:59:e2:
                    23:c4:81:c3:de:37:86:57:5b:3f:24:34:98:1b:99:
                    60:cf:1a:49:4f:24:ba:f9:72:e4:ed:91:d2:66:f6:
                    72:e4:11:a1:e6:d5:92:95:a7:01:dd:29:6c:95:e0:
                    8f:47:01:16:55:3d:93:03:72:48:d4:cb:68:a0:ed:
                    a1:28:a4:af:77:30:4e:72:95:d4:ed:b6:2d:c2:4a:
                    45:a6:09:7a:b8:ca:6a:dc:05:7c:ab:bd:91:a4:51:
                    e6:66:2e:99:34:71:39:08:dc:dc:05:38:14:4b:fd:
                    3c:c4:c7:3f:14:2b:4f:67:14:cf:f2:d9:4f:aa:3c:
                    65:2e:9f:52:f0:3b:0e:c8:9e:bf:e1:b1:79:9a:db:
                    75:12:9a:3a:0e:bd:2b:0a:77:5e:08:54:02:95:4d:
                    68:9f:d0:ac:99:a1:c8:4c:b3:c3:fd:84:b0:d5:47:
                    c6:35:44:8a:d9:de:88:18:bf:56:8e:c5:a4:9c:6e:
                    cb:1b:08:7b:e3:97:03:22:08:92:f6:9b:f7:08:48:
                    db:d9:03:33:6f:ad:c0:e8:84:28:e0:ba:f6:c0:70:
                    27:04:f4:e9:3e:2f:25:59:97:5e:0f:0d:80:7f:58:
                    dd:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:DA:58:00:4C:03:43:25:DB:75:98:E2:9B:C2:55:21:CA:AF:45:C3
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/0302c6929322090b67050c5cfc60628f1b0b2ee5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:a2:b7:00:40:12:bd:6f:96:db:22:15:31:da:df:fe:49:8c:
         bf:eb:2e:67:c8:f2:5e:06:d7:ae:23:af:7a:10:a6:3f:a0:5b:
         5c:86:c7:0f:a5:dd:d2:3a:4f:a5:14:03:9c:4e:8c:12:2e:db:
         a8:b7:1c:54:9b:b5:9d:4a:51:0d:a7:df:28:f4:0c:af:d9:95:
         21:cb:bc:ba:c7:d6:12:01:40:82:38:25:02:1c:88:5f:eb:d4:
         87:99:68:10:79:b8:21:ff:30:db:8e:f1:95:d5:4b:f8:3a:21:
         4e:09:01:c6:76:ec:11:3c:7f:dd:16:5f:f1:c8:74:e6:c6:8b:
         39:aa:a4:6d:c9:b5:68:fd:57:3d:20:8d:da:43:8e:7d:a1:83:
         88:1b:16:67:28:84:5d:03:8a:db:19:a0:79:4a:18:1e:df:cb:
         bd:f6:2e:f5:e1:e7:d7:75:ff:ef:36:71:12:ab:8e:31:3b:de:
         aa:3a:b0:f1:21:bd:82:b5:e4:11:03:a8:6e:78:1a:33:02:50:
         84:84:30:bd:1c:74:5a:f1:18:72:66:59:cc:06:ca:50:0f:89:
         77:5f:fc:8d:1b:01:fc:63:57:75:fb:3f:a7:8c:3c:0a:e3:3e:
         94:d3:69:b8:bb:ad:24:a1:14:e7:d8:64:dd:f1:dd:9d:29:2d:
         69:e5:17:e9
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGSOUMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZj
M2YzY2JmOTcxYjMxZDRhMGZiNDhhMDYzZWQ4NmYwYjU5NGFjM2UwHhcNMjIwOTE1
MjAxNzMwWhcNMjQwOTE1MjAxNzMwWjAzMTEwLwYDVQQDEygwMzAyYzY5MjkzMjIw
OTBiNjcwNTBjNWNmYzYwNjI4ZjFiMGIyZWU1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwF1yLiUuJk7Hv93V92IJ0baQF2h0yzimMM5FWeIjxIHD3jeG
V1s/JDSYG5lgzxpJTyS6+XLk7ZHSZvZy5BGh5tWSlacB3SlsleCPRwEWVT2TA3JI
1MtooO2hKKSvdzBOcpXU7bYtwkpFpgl6uMpq3AV8q72RpFHmZi6ZNHE5CNzcBTgU
S/08xMc/FCtPZxTP8tlPqjxlLp9S8DsOyJ6/4bF5mtt1Epo6Dr0rCndeCFQClU1o
n9CsmaHITLPD/YSw1UfGNUSK2d6IGL9WjsWknG7LGwh745cDIgiS9pv3CEjb2QMz
b63A6IQo4Lr2wHAnBPTpPi8lWZdeDw2Af1jdowIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGDaWABMA0Ml23WY4pvCVSHKr0XDMB8GA1UdIwQYMBaAFNgLQZU9gBToGKPM
I8FMT5TRqMEbMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmMzZjNj
YmY5NzFiMzFkNGEwZmI0OGEwNjNlZDg2ZjBiNTk0YWMzZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmE3ODYyZTgtZDJkYi00OGVhLWI4MDktZDRiOTcw
ZDFkODkyLzAzMDJjNjkyOTMyMjA5MGI2NzA1MGM1Y2ZjNjA2MjhmMWIwYjJlZTUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82YTc4NjJlOC1kMmRiLTQ4ZWEtYjgwOS1kNGI5
NzBkMWQ4OTIvNmMzZjNjYmY5NzFiMzFkNGEwZmI0OGEwNjNlZDg2ZjBiNTk0YWMz
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAr4KFDANBgkqhkiG9w0BAQsFAAOCAQEACKK3AEASvW+W2yIV
Mdrf/kmMv+suZ8jyXgbXriOvehCmP6BbXIbHD6Xd0jpPpRQDnE6MEi7bqLccVJu1
nUpRDaffKPQMr9mVIcu8usfWEgFAgjglAhyIX+vUh5loEHm4If8w247xldVL+Doh
TgkBxnbsETx/3RZf8ch05saLOaqkbcm1aP1XPSCN2kOOfaGDiBsWZyiEXQOK2xmg
eUoYHt/LvfYu9eHn13X/7zZxEquOMTveqjqw8SG9grXkEQOobngaMwJQhIQwvRx0
WvEYcmZZzAbKUA+Jd1/8jRsB/GNXdfs/p4w8CuM+lNNpuLutJKEU59hk3fHdnSkt
aeUX6Q==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-fra.rpki-client.org