Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/050000ca75bbbc7477c5b64de2af6db588750c95.roa
File:                     050000ca75bbbc7477c5b64de2af6db588750c95.roa (raw, json)
Hash identifier:          bMyTbsliFfedrfRcJFSMevsYO31zEMqgg9gHm/1NaXY=
Subject key identifier:   E6:F5:83:80:11:0C:78:1E:C2:BD:85:19:00:8E:7B:43:F4:67:15:E3
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       198BF1
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/050000ca75bbbc7477c5b64de2af6db588750c95.roa
Signing time:             Thu 15 Sep 2022 20:52:22 +0000
ROA not before:           Thu 15 Sep 2022 20:51:50 +0000
ROA not after:            Sun 15 Sep 2024 20:51:50 +0000
asID:                     3790
IP address blocks:        190.171.16.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1674225 (0x198bf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 15 20:51:50 2022 GMT
            Not After : Sep 15 20:51:50 2024 GMT
        Subject: CN=050000ca75bbbc7477c5b64de2af6db588750c95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:71:74:9c:27:df:af:f1:4e:89:1d:a9:fe:64:
                    8b:69:d1:f3:d2:06:79:26:02:cb:4f:9f:34:54:28:
                    d7:93:84:cb:98:11:ef:a3:01:9a:9e:a0:3b:67:40:
                    dc:99:ce:0e:dc:fc:5d:3a:30:f2:c3:c3:29:32:fb:
                    73:43:fd:6a:e7:dc:9e:0c:86:2b:ff:35:fa:39:58:
                    2d:02:a7:c0:34:2b:0f:92:92:d7:73:66:aa:7b:96:
                    5d:5c:0b:f8:dd:c9:8f:16:25:79:8e:fd:4e:be:7e:
                    26:36:26:cb:2d:54:4b:1e:09:f1:53:29:f9:f3:91:
                    50:ae:ac:97:fa:f7:84:7a:0f:42:16:b6:73:dd:4a:
                    0f:2d:de:15:2e:eb:27:66:e4:66:85:f1:ec:73:a2:
                    48:30:66:28:43:97:2b:87:e2:9f:2b:8c:82:2b:14:
                    13:bd:5c:32:e1:4b:96:bd:5f:a4:d2:1a:fc:b9:0a:
                    8e:2f:63:08:0c:27:5d:5d:94:2a:c3:f5:98:46:ce:
                    28:64:2a:a1:3e:42:23:85:4c:5d:c4:f0:72:fa:26:
                    5c:f9:ca:59:ac:ce:52:c6:11:83:c4:37:b8:2b:a5:
                    65:bd:d1:60:e0:fc:c9:0e:ab:65:d1:b4:ba:3f:e9:
                    a2:c6:de:19:ce:b7:a5:1d:27:37:47:d3:c5:f2:3a:
                    0b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F5:83:80:11:0C:78:1E:C2:BD:85:19:00:8E:7B:43:F4:67:15:E3
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/050000ca75bbbc7477c5b64de2af6db588750c95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:4e:78:ca:1a:18:8e:e6:1a:a9:5b:d3:b3:39:fe:4a:0f:d0:
         c3:c2:d2:27:9d:85:e7:4e:f6:3c:0d:77:ee:00:cd:c8:6e:23:
         7d:fb:bf:03:73:94:93:6a:f8:f2:8b:d4:5a:b1:aa:15:d5:d3:
         b5:07:9d:dc:c3:5f:5a:bb:ee:dc:c5:90:51:ef:b2:6b:1b:5f:
         61:04:46:7c:a9:ad:12:39:f2:46:65:ba:68:27:9b:98:70:e8:
         39:51:f0:7a:eb:f1:6e:fe:e0:5d:38:8a:13:cf:f1:f1:58:ac:
         89:36:38:c9:fb:2c:72:d4:69:b8:74:91:db:67:e1:e0:47:8c:
         e7:bb:d2:3c:5e:7f:ff:50:03:35:60:0e:fe:fc:2a:ba:bd:2f:
         36:b0:9e:30:e0:ed:65:d6:85:cd:9c:fb:22:42:cc:c8:35:91:
         19:5a:73:83:34:0b:77:31:4a:70:8a:25:7d:e4:92:b8:94:12:
         9e:b4:2e:e3:07:59:86:2a:0a:38:14:39:07:08:69:3c:83:18:
         d9:72:6c:43:ee:31:fb:e5:66:3e:a9:92:7a:2c:d9:f0:0f:ba:
         f2:66:08:1e:cf:a3:90:63:27:15:d0:8e:61:18:f1:01:ae:52:
         02:37:c7:26:02:ff:6a:4b:4a:c3:3e:ad:68:88:1f:5d:b8:ee:
         43:c6:6a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-fra.rpki-client.org