Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/151e6a2e2e879cdc386fb968e510f441a0ed04f7.roa
File:                     151e6a2e2e879cdc386fb968e510f441a0ed04f7.roa (raw, json)
Hash identifier:          pZUwIixX6SXazjA6/TmPx/MP5iB6Wg0osJQjlE0N504=
Subject key identifier:   18:16:84:A0:CD:61:7A:15:F9:B1:1D:42:01:68:21:3D:B4:A4:8F:27
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1C57E7
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/151e6a2e2e879cdc386fb968e510f441a0ed04f7.roa
Signing time:             Wed 28 Sep 2022 16:09:20 +0000
ROA not before:           Wed 28 Sep 2022 16:08:33 +0000
ROA not after:            Sat 28 Sep 2024 16:08:33 +0000
asID:                     11830
IP address blocks:        190.171.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1857511 (0x1c57e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 28 16:08:33 2022 GMT
            Not After : Sep 28 16:08:33 2024 GMT
        Subject: CN=151e6a2e2e879cdc386fb968e510f441a0ed04f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:af:90:b6:3a:25:53:e2:21:37:25:3a:52:de:
                    ef:8d:52:95:08:b0:01:fb:59:24:92:89:8e:28:b9:
                    6c:23:82:8f:ad:36:05:c7:37:0f:af:f4:ea:1f:05:
                    55:27:f6:f2:d1:c1:73:5b:83:50:77:7c:c3:40:65:
                    a7:cf:e8:63:0e:81:74:d2:74:af:0e:f5:57:d2:44:
                    fc:6a:8a:a3:ae:76:4a:ef:bb:e0:b4:f9:f1:33:b5:
                    1b:ff:35:49:4b:17:5b:bb:7e:90:36:24:9c:f0:87:
                    31:41:89:d5:45:a9:8e:07:84:eb:bd:64:58:5d:8f:
                    08:16:ee:31:4c:0a:23:98:e3:bb:7a:64:1e:3d:70:
                    62:97:88:98:a2:5f:4b:e7:94:6f:53:1f:4e:3e:97:
                    2a:f8:ff:3a:64:a4:7f:a1:7b:4e:c3:78:a5:72:81:
                    fb:7f:1e:bb:95:92:05:c2:d8:37:6f:a3:f9:b7:28:
                    ad:d6:92:13:7d:ca:6e:a7:1d:7f:11:ed:c3:49:b1:
                    48:91:d6:c8:7b:32:45:ea:86:0c:18:3a:0b:fe:e9:
                    02:6a:c7:11:90:b3:fc:08:86:06:ba:df:0f:c5:ff:
                    b6:9b:66:3a:d8:0e:2f:fb:ce:c9:b0:bd:be:f9:5f:
                    84:f8:50:92:4e:e8:7b:cf:9d:f2:b9:6d:d8:89:44:
                    e6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:16:84:A0:CD:61:7A:15:F9:B1:1D:42:01:68:21:3D:B4:A4:8F:27
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/151e6a2e2e879cdc386fb968e510f441a0ed04f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:c1:e9:db:38:6c:d8:bd:b9:2d:79:b8:98:b6:f8:f8:b5:e7:
         9d:6d:74:55:5f:99:a1:8d:12:f6:a1:1b:db:62:16:a0:23:86:
         2d:f1:36:b1:9b:eb:3e:04:e1:69:ab:fe:2a:b5:0e:9f:f1:ce:
         ba:b2:3d:5e:0a:02:13:94:a9:c4:13:4a:ae:ed:eb:cb:45:b5:
         e4:3a:de:19:dc:59:01:e2:f0:24:a0:30:47:54:e3:a5:1b:11:
         c5:3e:dd:d9:3f:6d:8a:47:97:10:58:e2:b0:bf:28:ea:57:83:
         54:4f:a3:a8:a4:3c:9b:b3:7c:16:09:4a:1f:c1:e5:94:8d:8f:
         db:2c:2b:f9:16:56:df:c5:18:1e:30:ca:41:3e:e6:a0:7d:a0:
         da:eb:89:f5:f9:cd:bd:f6:6b:49:c4:8c:25:39:56:93:a4:03:
         20:bc:4b:0f:c5:94:02:ea:10:86:a9:52:09:89:fe:d1:4e:cd:
         ae:8f:30:0a:74:04:11:fb:a3:f2:91:31:ec:64:0f:47:5f:6b:
         ed:87:5b:2f:cd:40:d9:74:0f:a3:28:b0:67:c0:d4:39:3f:8f:
         4d:13:6a:93:75:a4:d2:87:b3:6c:85:f0:b7:3e:da:29:19:ab:
         bd:ca:d1:7a:bc:3e:73:3f:65:d7:9a:ab:79:e8:0b:b7:a2:94:
         a3:7d:7b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:59 2024 by rpki-client on console-ams.rpki-client.org