Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/1750c87628e810579a4546038dc4422fde41bf04.roa
File:                     1750c87628e810579a4546038dc4422fde41bf04.roa (raw, json)
Hash identifier:          0mCdQVVQAFpdISTZbc25jHDUrCbsOrsSvPjbMCy/Ogw=
Subject key identifier:   16:06:C0:62:20:27:71:4E:3E:FA:F6:18:34:AC:8E:B9:F8:C6:1B:F6
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1C36E0
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/1750c87628e810579a4546038dc4422fde41bf04.roa
Signing time:             Wed 28 Sep 2022 16:01:54 +0000
ROA not before:           Wed 28 Sep 2022 16:01:01 +0000
ROA not after:            Sat 28 Sep 2024 16:01:01 +0000
asID:                     11830
IP address blocks:        190.10.124.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1849056 (0x1c36e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 28 16:01:01 2022 GMT
            Not After : Sep 28 16:01:01 2024 GMT
        Subject: CN=1750c87628e810579a4546038dc4422fde41bf04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:92:ab:79:c7:d4:3e:10:a5:64:38:6b:89:f6:
                    d1:f6:f9:35:4b:72:e6:6b:90:bf:72:36:04:a0:8c:
                    c7:39:02:4a:a0:fe:83:63:3b:b2:23:98:e2:a7:8a:
                    5b:2e:d8:19:fc:23:70:58:c1:0c:d1:cc:5c:e9:e3:
                    71:81:cf:3a:6d:f9:fc:27:67:eb:ec:7b:db:72:95:
                    66:1c:02:1c:41:86:86:4b:ff:f9:c5:a6:52:e7:2c:
                    dc:3c:f7:64:5b:0f:1e:d7:ce:38:fa:6f:5d:7d:24:
                    2e:58:64:89:1f:45:70:94:d3:9c:9e:86:b4:d7:86:
                    2f:05:5d:f7:d8:3d:e0:39:a9:66:ec:20:ee:67:2c:
                    ad:fd:ec:42:f1:fe:97:af:e7:94:a3:ce:c0:08:cc:
                    53:43:01:07:b8:97:c6:de:68:3e:9f:a6:a5:db:a4:
                    93:2f:90:bf:d0:34:f4:ec:42:0a:ed:2b:f1:56:0d:
                    1e:0b:b8:97:e6:e2:9d:c2:d4:cf:23:3c:91:e2:79:
                    13:b3:2f:76:37:4d:0a:60:c1:59:ca:75:03:13:91:
                    5b:1c:24:d7:c4:5b:a3:e3:6f:45:01:97:6c:5c:0f:
                    1e:e9:21:7a:ef:c7:72:62:53:ec:52:83:74:72:7c:
                    ce:f9:3a:49:14:f0:a4:ef:30:a1:2f:c8:7b:50:72:
                    a6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:06:C0:62:20:27:71:4E:3E:FA:F6:18:34:AC:8E:B9:F8:C6:1B:F6
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/1750c87628e810579a4546038dc4422fde41bf04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:bc:bc:98:78:bb:14:1b:25:80:22:0e:4b:14:ff:1f:12:7a:
         2d:56:25:e6:06:36:37:77:e9:22:11:36:2b:0d:b0:2d:f0:df:
         d8:3a:06:10:1c:d2:ec:b0:1e:4f:3b:0c:7e:22:41:a6:d6:40:
         59:dc:b6:0a:98:1d:93:a9:ed:7c:f4:91:a1:1b:90:c4:02:bf:
         76:cd:83:a5:99:5b:63:99:b9:c8:03:42:1a:2c:9b:d7:d6:b4:
         c1:a1:c8:14:4f:4b:f7:a9:bc:1e:c2:ea:72:57:4f:75:8e:2b:
         d6:19:db:eb:3a:ce:2c:6b:ae:1c:fe:69:99:58:0d:cc:21:9c:
         09:32:15:c2:5b:e0:08:06:d4:d9:67:d8:d1:b7:c4:fd:73:a3:
         cd:c6:2f:e6:50:cb:ee:c8:ac:9b:ee:24:97:e3:ad:ba:4b:21:
         4c:fd:48:fa:92:8a:86:63:1e:50:32:36:f6:1a:f2:e0:b2:ad:
         4b:fa:e8:81:df:da:0e:a4:76:f0:f0:11:aa:a1:8e:44:47:ed:
         b3:fe:16:9e:59:8e:88:35:7a:ee:b3:5f:e5:e9:51:82:86:4a:
         d9:38:c4:7a:38:b7:cc:6d:80:04:76:09:87:1b:76:4a:09:bb:
         e5:e4:65:fa:ef:30:ef:81:15:f0:5b:19:b5:3f:25:af:4c:ba:
         93:d3:38:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-ams.rpki-client.org