Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/1dc961b29734819da621e345e1ffabd2818d013e.roa
File:                     1dc961b29734819da621e345e1ffabd2818d013e.roa (raw, json)
Hash identifier:          m5a2zvlNMufQDTYIX/VyQad2hk4/1stPPFc/agwTxVw=
Subject key identifier:   C8:4F:99:52:F9:86:80:46:0D:7F:A1:14:54:72:CF:87:52:DD:20:3D
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1C18CA
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/1dc961b29734819da621e345e1ffabd2818d013e.roa
Signing time:             Wed 28 Sep 2022 15:52:52 +0000
ROA not before:           Wed 28 Sep 2022 15:52:13 +0000
ROA not after:            Sat 28 Sep 2024 15:52:13 +0000
asID:                     11830
IP address blocks:        190.10.114.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1841354 (0x1c18ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 28 15:52:13 2022 GMT
            Not After : Sep 28 15:52:13 2024 GMT
        Subject: CN=1dc961b29734819da621e345e1ffabd2818d013e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d1:af:c7:07:84:d2:76:4b:f2:42:b2:ad:ce:
                    0d:f5:ee:60:ac:d4:30:ab:8e:b9:f4:cd:26:35:72:
                    b3:f3:35:57:63:52:8d:18:71:d8:0e:bb:38:e4:63:
                    5f:05:53:3e:82:c0:72:79:32:37:5f:33:7d:9c:1c:
                    f0:d5:87:33:08:85:d2:82:be:95:ba:97:90:3d:c3:
                    15:e6:d2:ee:09:46:9a:8f:45:d3:12:df:e4:3e:91:
                    70:2f:dd:05:6e:0d:76:1b:d9:ca:68:f9:03:74:5e:
                    bc:30:5c:55:7c:e1:dd:c6:e5:89:cc:0d:ce:bc:f4:
                    1c:e2:35:e3:c1:50:c4:e0:2f:5b:7e:ac:e4:7a:6b:
                    14:01:3d:66:b5:91:13:1b:e3:34:e3:5c:42:d2:a2:
                    95:1b:22:62:3f:f1:d6:95:3d:0f:e3:00:0a:3f:f3:
                    62:5e:01:9b:5b:02:53:c9:a8:ed:b4:91:f6:b5:4f:
                    3b:ec:c3:44:6e:8d:77:cc:78:31:ce:6d:3e:4c:3f:
                    63:f8:97:08:d9:fa:03:69:13:5a:91:48:3e:e7:93:
                    6f:88:c7:ea:5d:20:f4:92:09:bc:75:76:55:69:88:
                    1e:d2:b6:7c:fb:da:85:3b:60:4e:9b:d9:00:3e:ac:
                    0f:e4:01:13:a3:2b:fe:00:e6:9d:91:75:42:3d:b8:
                    02:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:4F:99:52:F9:86:80:46:0D:7F:A1:14:54:72:CF:87:52:DD:20:3D
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/1dc961b29734819da621e345e1ffabd2818d013e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:e0:20:ea:4e:e1:c3:aa:be:44:81:e3:9e:d4:ff:b4:b1:87:
         05:82:2a:a9:a5:03:90:1c:58:9d:e2:43:0f:d0:01:04:79:66:
         4e:e7:2f:9c:30:05:89:ea:b6:ef:6f:f6:23:ab:a2:bd:c1:3a:
         47:3f:71:17:9e:b3:be:e0:8c:17:e0:eb:6f:f9:db:0b:fa:a1:
         2b:20:c2:82:f5:c9:38:72:74:a4:b2:20:ba:55:e8:ac:ca:f3:
         0f:7b:aa:fd:d8:5d:35:f9:9b:e3:c1:5e:fe:22:ab:98:25:ba:
         aa:32:f9:c2:05:f7:7e:59:62:7f:6f:2c:1a:8c:09:11:c2:a8:
         86:14:88:d6:23:77:4f:e8:37:78:ac:98:ba:50:da:85:b1:b3:
         4a:7b:ba:4c:c2:31:93:25:3c:2a:78:aa:7e:2c:ff:77:5f:86:
         f6:c9:c2:83:84:51:67:c7:92:8d:84:ba:ab:dd:78:c6:ff:78:
         1f:ed:6e:9a:9e:11:e6:88:64:88:46:8d:24:e7:d7:2f:7d:c1:
         c9:cd:78:cc:45:33:6d:60:ac:d0:c2:2c:67:2d:df:ff:bd:8f:
         31:f3:38:75:30:aa:43:db:e9:fc:2f:bb:6e:c9:9e:b1:58:0c:
         1f:dd:84:62:5f:85:e1:9e:5f:b1:51:64:84:52:61:55:d4:b1:
         c1:d4:ce:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:59 2024 by rpki-client on console-ams.rpki-client.org