Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/15c343e89df6378c3adb414e770e747e2bfebadc.roa
File:                     15c343e89df6378c3adb414e770e747e2bfebadc.roa (raw, json)
Hash identifier:          zXQgWruglHBdyOhB1bMZ/hZuWVyhpqzwPLSB5ucKt3c=
Subject key identifier:   40:B7:34:80:7B:F1:3D:5D:74:3D:C8:C8:6F:67:CC:3B:16:0D:7C:35
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1BB65F
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/15c343e89df6378c3adb414e770e747e2bfebadc.roa
Signing time:             Tue 27 Sep 2022 22:42:19 +0000
ROA not before:           Tue 27 Sep 2022 22:40:45 +0000
ROA not after:            Fri 27 Sep 2024 22:40:45 +0000
asID:                     11830
IP address blocks:        190.10.93.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1816159 (0x1bb65f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 27 22:40:45 2022 GMT
            Not After : Sep 27 22:40:45 2024 GMT
        Subject: CN=15c343e89df6378c3adb414e770e747e2bfebadc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d7:96:ac:7a:1f:cc:f0:36:45:8a:43:80:b5:
                    4a:0d:be:48:3d:55:bd:68:40:73:a1:da:9f:d8:e9:
                    6a:a8:19:e5:49:e9:45:43:f1:7a:13:e9:9e:6f:08:
                    4a:fa:9b:74:a9:aa:04:91:8e:b1:f5:54:a4:19:b5:
                    f8:7f:26:8a:8e:a7:f3:c6:d9:bb:1f:e1:c6:6c:9f:
                    85:19:ae:87:25:53:7a:28:2d:fd:d7:2c:ba:7b:50:
                    00:ba:2b:ae:ec:7c:44:33:1d:9d:87:38:3b:8e:69:
                    ba:e3:c8:ab:f3:b0:ef:fb:4e:31:ae:ed:14:de:fb:
                    10:24:20:de:c1:6d:62:ae:8e:c0:96:87:37:b2:89:
                    f0:f7:e3:78:27:49:58:bd:35:90:e8:62:fc:74:8c:
                    34:e9:5d:3f:15:48:5e:43:2b:6e:e4:7e:28:7b:96:
                    28:3e:25:87:79:28:58:aa:82:20:a0:8d:f8:57:a6:
                    e6:d9:c6:28:91:b2:01:e9:fb:98:dc:8a:48:9e:b2:
                    05:6d:54:36:0b:b9:69:38:d1:9d:a5:7f:52:64:9d:
                    f7:40:7c:38:3d:b4:18:d0:10:57:bd:42:e1:8c:4c:
                    c6:b1:44:c8:28:72:72:d0:29:a2:2f:e4:2c:e2:41:
                    b1:c2:17:2c:59:55:22:d3:0e:8c:85:a5:e4:8e:f8:
                    45:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B7:34:80:7B:F1:3D:5D:74:3D:C8:C8:6F:67:CC:3B:16:0D:7C:35
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/15c343e89df6378c3adb414e770e747e2bfebadc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:dd:00:73:de:b2:c2:fd:b4:55:fa:12:8f:fd:0e:e0:6c:b8:
         e2:f9:da:d8:d1:7a:9d:25:08:d6:07:fc:93:8a:48:fb:13:bb:
         73:71:e3:9b:53:15:83:da:c4:18:5e:6d:53:de:64:5e:ce:fc:
         c2:e0:09:5f:2f:e3:d2:56:ca:32:ee:66:a4:67:37:1b:f8:f7:
         e4:b6:0f:22:8f:77:d7:57:1b:5d:2d:98:28:dc:aa:28:79:71:
         b4:28:af:14:29:6a:c3:70:30:78:ab:2b:ad:44:e1:4e:21:09:
         55:b6:b3:56:0c:90:ef:11:13:ac:9f:a9:e1:21:bd:53:cd:7c:
         ab:d3:b9:5e:0f:d0:7b:a7:5a:2c:c6:4d:e9:d1:a3:de:24:f8:
         53:a6:45:7e:44:7e:9c:d8:52:6b:3d:c2:a7:5b:89:ba:06:f4:
         55:d4:2a:a3:67:d0:a6:00:2d:8b:05:7b:d7:c9:e0:ca:93:7b:
         e7:67:1e:fe:8a:e5:d9:d4:2a:74:9b:92:76:34:64:7d:51:c3:
         1b:58:cb:ac:1f:d5:50:29:6c:c6:2f:a3:0f:6b:d3:8c:66:e9:
         83:30:c7:e7:9c:ba:67:03:05:d4:79:76:de:66:a8:ad:3e:de:
         ea:0b:a5:16:af:05:21:ee:5c:9e:c2:28:c6:93:32:c7:bd:f3:
         64:ae:1f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-ams.rpki-client.org