Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/05a50be9a5138b9940d107b4b1353b284eff5c75.roa
File:                     05a50be9a5138b9940d107b4b1353b284eff5c75.roa (raw, json)
Hash identifier:          WWcMe/dlb5OeAtvfIQFRfDl9dVtAlGvGgRFhdNmCNY4=
Subject key identifier:   BE:1B:AC:CE:EC:9D:2D:48:F7:B6:A3:70:8C:10:54:F6:5D:80:8D:53
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1ADAB3
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/05a50be9a5138b9940d107b4b1353b284eff5c75.roa
Signing time:             Thu 22 Sep 2022 23:04:00 +0000
ROA not before:           Thu 22 Sep 2022 23:03:04 +0000
ROA not after:            Sun 22 Sep 2024 23:03:04 +0000
asID:                     11830
IP address blocks:        190.10.35.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1759923 (0x1adab3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 22 23:03:04 2022 GMT
            Not After : Sep 22 23:03:04 2024 GMT
        Subject: CN=05a50be9a5138b9940d107b4b1353b284eff5c75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:94:9a:a0:b6:d9:44:ee:57:2f:5e:f3:58:5a:
                    9e:50:31:c9:55:e8:c2:05:0f:98:a5:de:38:7d:20:
                    5b:57:60:4b:4f:b9:b3:d3:d5:7a:9f:9d:6a:45:42:
                    31:17:a7:39:ff:d1:c1:9f:bb:b6:e9:0e:57:2b:58:
                    d2:05:03:84:6a:b9:98:9a:73:06:6e:e8:98:0d:73:
                    ab:4f:c0:b1:16:29:37:4b:98:ba:f6:7e:ce:c7:8f:
                    62:e7:1a:bd:04:e9:1d:aa:85:d9:10:5d:7c:1e:52:
                    18:27:62:23:f2:0f:f2:d7:18:5c:75:c1:8a:6e:c2:
                    de:fa:97:69:6c:e7:c2:b9:c1:c1:5f:73:8c:d2:c6:
                    33:1c:c0:0b:1f:04:18:18:1d:ed:3e:2b:f1:a8:61:
                    28:90:2b:71:59:6b:2c:1a:cf:73:f0:d3:95:aa:f4:
                    48:27:bf:cc:89:10:d0:5c:fa:20:97:22:1a:b9:ab:
                    c2:25:89:ca:65:90:28:65:47:a0:34:d8:fb:0e:a0:
                    a6:4f:f2:d2:c8:f7:8e:5e:10:b8:c7:e7:5c:7e:aa:
                    27:ad:0b:74:d3:21:cb:1b:46:82:28:61:52:d6:77:
                    8e:8e:da:e9:98:b2:92:3f:ea:85:1b:9a:8a:fc:44:
                    bd:47:dd:eb:db:67:d4:5c:85:68:39:85:5a:ae:b0:
                    37:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:1B:AC:CE:EC:9D:2D:48:F7:B6:A3:70:8C:10:54:F6:5D:80:8D:53
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/05a50be9a5138b9940d107b4b1353b284eff5c75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:06:51:67:7e:f5:73:a5:1b:df:27:a1:55:9a:03:d6:60:9a:
         f9:9a:0d:11:3e:a3:08:a4:eb:da:3e:94:25:e1:ec:55:13:f0:
         04:4b:46:3b:30:76:30:b5:de:68:6c:a1:80:69:07:18:37:83:
         03:74:b3:0b:e1:7d:40:a4:9a:d0:63:05:89:ff:6f:a3:f5:ff:
         73:68:cb:74:71:f2:19:2f:c1:ac:a3:e9:c7:ad:a0:67:f6:25:
         d4:0a:48:84:5d:42:69:a6:2d:74:cb:5b:fa:91:9c:dd:81:8e:
         e9:af:68:eb:61:d0:71:13:a9:7f:5b:b7:18:37:eb:87:7a:81:
         9f:37:9e:10:a5:03:3a:b8:2e:dd:4a:fc:f1:b8:93:a4:a0:b4:
         1d:20:86:cc:0e:c4:2e:74:a6:df:7c:21:e8:b0:c4:51:60:a4:
         35:4b:74:eb:30:c0:84:d5:fe:dd:56:88:7c:21:c1:22:73:ca:
         b3:d4:b3:10:1f:83:d0:b2:54:bb:a2:37:1f:e2:27:89:77:fc:
         fa:30:30:36:a6:76:3e:dc:85:aa:8b:a9:1d:e2:de:bd:80:8b:
         dc:ad:16:b2:a1:bc:92:5d:90:07:ed:36:4a:4e:6a:11:ad:e5:
         44:27:6c:51:70:f9:d5:1c:fb:7e:a3:fd:d9:13:69:d3:59:6d:
         ab:1e:85:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-ams.rpki-client.org