Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/163b5c457fe1867ef03c3cc8c152f068ae6ca029.roa
File:                     163b5c457fe1867ef03c3cc8c152f068ae6ca029.roa (raw, json)
Hash identifier:          skvZVaUXpb7TqncTTthprFJml1xIcVhEmXSuHZmn1OU=
Subject key identifier:   FB:AF:81:0E:E0:00:0E:BB:8F:0D:EA:39:45:54:1B:05:26:14:AA:64
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1A1F63
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/163b5c457fe1867ef03c3cc8c152f068ae6ca029.roa
Signing time:             Thu 22 Sep 2022 20:23:04 +0000
ROA not before:           Thu 22 Sep 2022 20:22:37 +0000
ROA not after:            Sun 22 Sep 2024 20:22:37 +0000
asID:                     3790
IP address blocks:        190.241.78.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1711971 (0x1a1f63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 22 20:22:37 2022 GMT
            Not After : Sep 22 20:22:37 2024 GMT
        Subject: CN=163b5c457fe1867ef03c3cc8c152f068ae6ca029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1b:64:99:de:05:ce:98:17:27:16:67:b7:f4:
                    11:9d:08:ca:11:fd:02:9e:ad:14:a8:ff:41:91:97:
                    0f:59:74:a0:ac:f8:e4:2d:25:f2:66:22:36:8d:d0:
                    4a:80:78:2f:c2:98:c6:a6:20:40:fb:2c:52:e1:2b:
                    01:ac:7b:06:0f:99:25:1d:1e:1f:50:cb:21:2c:5f:
                    5e:ff:0e:67:97:bc:9b:83:8c:3a:b7:6c:66:62:e7:
                    f0:76:9a:f7:9c:4d:64:12:28:f0:56:7a:9b:90:0a:
                    6e:35:d2:58:ba:81:62:21:86:0f:8f:6d:aa:fc:5a:
                    fb:97:33:72:bf:ca:45:03:2d:15:8e:00:12:4b:85:
                    30:6e:02:50:77:13:1b:dc:cd:63:65:3d:6b:0b:dd:
                    b4:4b:8e:ce:84:0c:96:10:8d:c3:b0:0c:85:73:a3:
                    75:70:4f:2c:1b:58:bc:14:7e:9a:a1:ad:62:03:a3:
                    53:2c:3d:8f:b0:4e:0a:6d:f3:6a:5d:02:7b:90:0f:
                    b6:58:b9:47:2a:5e:e3:df:d7:4f:05:06:cc:4c:46:
                    37:47:30:c3:d4:f1:92:94:47:0e:d2:e1:2f:4f:71:
                    c3:9f:19:78:53:6d:c0:dd:d1:3d:96:ec:a8:7e:64:
                    77:12:fe:ce:ee:49:e4:27:f2:e5:94:7c:2d:a0:6f:
                    92:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:AF:81:0E:E0:00:0E:BB:8F:0D:EA:39:45:54:1B:05:26:14:AA:64
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/163b5c457fe1867ef03c3cc8c152f068ae6ca029.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.241.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:a8:e3:f8:18:77:f0:3e:19:2f:28:9b:55:91:7d:21:93:9a:
         75:35:23:79:e6:e8:2a:7f:98:6b:5a:87:de:46:f2:e6:fc:75:
         29:93:a9:45:04:4b:ae:31:b3:58:b7:7f:bc:ec:b2:06:e1:38:
         59:f3:30:6e:81:f8:6f:d0:c6:d7:69:49:f8:e0:e2:c1:a5:62:
         18:0a:0a:b8:e9:69:0a:f1:96:99:ed:64:7c:3b:ab:0c:5c:05:
         63:88:4b:f1:bc:f8:c7:58:42:da:ab:d9:e1:67:13:c4:18:ae:
         4d:aa:a6:42:83:26:55:c4:77:22:29:b9:ac:81:9f:e0:09:a9:
         5f:df:68:a5:d3:d6:79:56:91:87:a9:95:d7:c1:b7:a9:5a:33:
         1e:a6:29:e6:a9:58:d0:98:99:43:32:10:97:87:0b:fe:8c:7d:
         5e:02:28:c7:ba:2b:2f:f7:64:55:23:fe:6a:95:18:a3:18:52:
         dc:7b:dd:b8:45:ee:90:f8:86:59:c9:c8:bb:5f:32:82:f7:16:
         bf:10:a2:1b:28:ce:04:e5:af:08:47:7c:d8:bc:c8:0d:ec:24:
         57:c2:f5:33:0e:99:f2:50:e3:06:4e:2f:35:e3:5e:e1:7e:98:
         90:67:1c:bc:85:7e:5d:c0:2f:74:c4:f7:39:de:73:b0:9b:7f:
         df:f0:41:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-fra.rpki-client.org