Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/114913ed8f27e34b5e1450938cba0745f328a6d6.roa
File:                     114913ed8f27e34b5e1450938cba0745f328a6d6.roa (raw, json)
Hash identifier:          xpn9BDHyhWZL5tITEK6HxRGLGz67jTtDRnEmorUP3Gw=
Subject key identifier:   DF:CC:C7:1C:7E:1D:85:11:B4:2F:C5:DA:2F:0E:71:98:5A:7B:31:28
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1C7487
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/114913ed8f27e34b5e1450938cba0745f328a6d6.roa
Signing time:             Wed 28 Sep 2022 16:17:02 +0000
ROA not before:           Wed 28 Sep 2022 16:16:09 +0000
ROA not after:            Sat 28 Sep 2024 16:16:09 +0000
asID:                     11830
IP address blocks:        190.171.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1864839 (0x1c7487)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 28 16:16:09 2022 GMT
            Not After : Sep 28 16:16:09 2024 GMT
        Subject: CN=114913ed8f27e34b5e1450938cba0745f328a6d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:60:68:1a:af:26:23:04:3d:55:9b:f0:33:c8:
                    40:0d:ff:aa:66:27:75:45:0e:49:4d:d1:24:e2:16:
                    29:bf:9f:b3:12:2f:42:4a:06:62:60:d7:9a:9c:fd:
                    a6:8c:24:9a:a8:ad:d5:48:1f:c2:77:bf:17:4a:39:
                    85:c4:29:cf:5b:d0:bf:80:60:6e:01:c2:92:5f:cb:
                    5e:6e:f0:03:d0:40:fd:ba:f3:b1:ee:fa:d6:94:cc:
                    28:a9:e5:90:bf:29:29:11:39:0b:52:38:72:47:01:
                    c5:e6:c2:02:76:61:6a:14:60:2a:64:1c:de:45:e4:
                    a7:96:fa:2d:6c:16:1b:cd:53:e8:61:9e:5a:ca:cd:
                    4a:91:4a:d5:5d:ed:7a:7e:9e:c2:94:a2:d8:f5:65:
                    60:cd:13:e9:c9:04:c7:45:c6:da:21:31:ef:4a:65:
                    fe:24:4c:bc:13:0d:9d:15:d7:ad:a6:0e:52:ba:64:
                    d2:42:2d:c6:5c:1f:26:41:b5:2e:d9:1e:03:57:58:
                    61:59:1b:e1:9a:20:85:bf:3c:64:76:71:06:6e:c6:
                    93:d0:15:1f:5b:f6:a6:d6:1d:f4:f2:8b:8c:d4:b5:
                    ed:6e:d7:11:a2:8c:c2:55:6f:70:1b:de:24:0e:ac:
                    f5:74:90:79:bf:34:69:0d:9b:46:0f:42:94:3f:f0:
                    eb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:CC:C7:1C:7E:1D:85:11:B4:2F:C5:DA:2F:0E:71:98:5A:7B:31:28
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/114913ed8f27e34b5e1450938cba0745f328a6d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:f4:d5:ca:e9:4d:b7:d8:dc:3f:18:fd:b1:f0:fb:dd:33:ad:
         f7:f2:7b:52:af:ea:ff:6f:c7:82:6c:7b:70:28:d7:a6:9b:aa:
         6c:a8:b8:85:ae:e7:5d:16:e4:29:38:ea:1e:9c:65:b5:97:78:
         35:65:5e:74:9e:e7:9d:1c:c8:39:34:0f:e7:97:94:2e:64:89:
         ad:81:f6:08:78:6c:da:07:f8:b2:66:a8:92:2c:af:a6:d5:43:
         eb:77:79:e4:cd:6b:a6:e7:49:71:3a:db:4e:43:2e:90:e4:60:
         64:da:86:01:14:3d:af:10:e9:7d:dc:42:3f:45:68:f8:9f:12:
         06:ab:0a:68:e0:92:86:64:57:8c:4b:8f:27:1c:f7:56:5e:3a:
         11:bf:d4:42:31:47:69:20:40:35:50:74:eb:0b:37:8d:5a:fa:
         fb:d8:04:d7:b5:22:e7:d2:51:da:65:b0:6c:9d:2e:c1:cd:9b:
         d4:2a:9c:93:6c:06:5f:c6:58:c3:46:59:4c:d9:18:12:a8:3c:
         40:72:30:a5:78:9f:06:07:9b:99:8a:f2:23:05:2d:5d:70:6f:
         ff:32:a3:a2:d6:55:b8:f9:34:c3:13:c6:91:ca:68:d8:a9:b0:
         7e:d0:ee:4a:27:b2:2f:53:95:dd:c9:06:fa:33:71:0e:9e:4a:
         79:21:1e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-ams.rpki-client.org