Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/1c446702aa3ad9c816bd5998e46c026aa768b513.roa
File:                     1c446702aa3ad9c816bd5998e46c026aa768b513.roa (raw, json)
Hash identifier:          0aGVIwdriZuZH/LP994TNPqud9EtSM1zWfmOcRIl5e0=
Subject key identifier:   54:7B:F4:6C:7F:92:F8:31:DF:7A:B8:E0:21:A0:68:33:CB:50:CD:CD
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       197F0C
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/1c446702aa3ad9c816bd5998e46c026aa768b513.roa
Signing time:             Thu 15 Sep 2022 20:49:55 +0000
ROA not before:           Thu 15 Sep 2022 20:49:25 +0000
ROA not after:            Sun 15 Sep 2024 20:49:25 +0000
asID:                     3790
IP address blocks:        190.171.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1670924 (0x197f0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 15 20:49:25 2022 GMT
            Not After : Sep 15 20:49:25 2024 GMT
        Subject: CN=1c446702aa3ad9c816bd5998e46c026aa768b513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c9:10:3e:13:8c:00:45:d4:38:f0:18:9d:a2:
                    d1:09:c1:1f:37:a9:2c:63:82:8b:a8:f2:76:d8:58:
                    45:88:1d:c0:6b:a3:a2:d8:eb:6d:f5:27:43:dd:81:
                    92:f5:2d:c5:1d:47:d5:c4:7a:26:44:10:26:1f:e0:
                    1c:d8:6d:08:a2:d5:b8:aa:a4:92:1a:ba:5d:d4:ea:
                    d2:53:1a:8d:73:3c:32:68:bb:bb:ff:75:f0:d9:cd:
                    85:02:6b:77:01:18:2d:56:41:07:dd:79:57:59:ae:
                    90:fd:ab:b2:37:58:83:9a:b6:4d:6f:a2:19:7b:1a:
                    cf:37:18:65:98:13:81:ec:5e:0c:14:9a:ab:15:e5:
                    4a:4c:51:07:12:37:ad:b3:24:fc:09:3a:4e:5c:a2:
                    9a:d6:21:49:ec:7d:32:7c:b2:41:e0:02:94:ea:30:
                    40:ae:ff:b3:5e:ec:4f:78:9e:e8:30:b6:1d:b2:14:
                    ca:bf:45:52:d4:03:8d:62:96:44:01:51:cb:05:74:
                    fc:4a:6a:87:99:d1:f3:c9:ce:bd:ec:64:c1:30:41:
                    1f:1d:66:48:ac:8c:6e:fb:e2:5e:b4:16:07:f2:53:
                    9a:bf:23:ab:90:52:23:90:0c:0c:be:e4:a6:48:62:
                    08:5b:bb:f8:a4:18:8e:60:5e:a0:35:96:77:dd:d7:
                    f5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:7B:F4:6C:7F:92:F8:31:DF:7A:B8:E0:21:A0:68:33:CB:50:CD:CD
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/1c446702aa3ad9c816bd5998e46c026aa768b513.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:e6:81:d9:cf:f8:3f:91:07:66:32:ea:07:73:da:13:b7:4b:
         1f:b1:54:ae:e2:5d:9d:72:ae:e5:e1:c5:bf:68:a7:74:9e:58:
         41:dc:39:58:5d:3e:91:bf:60:30:b7:01:38:1e:c5:4d:5e:0a:
         3e:a1:3b:f6:c6:f0:4d:db:1e:e5:64:ca:14:8a:ec:4c:c2:ed:
         9b:3d:4f:da:4e:4d:7d:3a:57:32:69:36:ed:ca:34:03:e4:cc:
         ff:3a:38:35:00:95:92:ac:c0:21:1d:53:1a:8e:b0:3e:d6:4a:
         4f:4f:d7:89:17:a6:52:bd:3a:a2:16:e3:83:3b:ea:72:08:ac:
         f6:d6:b2:4f:d1:81:05:9a:33:26:b8:75:03:c1:47:87:53:3a:
         af:39:b4:51:e4:15:f7:c9:42:5c:02:40:1c:a9:8b:e9:fd:7e:
         c2:3a:88:97:9f:44:be:08:92:b3:83:82:f0:a5:f3:82:b3:8f:
         b1:7f:1e:dc:ef:8e:77:7a:16:60:4d:e4:44:39:64:09:56:3f:
         c5:23:65:9d:ed:2d:1e:53:60:09:36:61:df:b2:e7:6a:a2:20:
         b4:74:67:98:35:6d:25:d7:05:db:cb:14:ae:5a:57:e4:35:0d:
         a4:bc:7e:be:c4:13:d5:6b:9d:1e:ec:07:c6:ce:54:02:6a:c5:
         73:3e:7b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-ams.rpki-client.org