Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/225eefc83d9b8d91373887f35bcd7f2c8e4a631a.roa
File:                     225eefc83d9b8d91373887f35bcd7f2c8e4a631a.roa (raw, json)
Hash identifier:          1+LEjhoWPhdHPNwzBu0yl1TdoT/8HBGaCSXaQmBMCgY=
Subject key identifier:   4E:D6:2C:64:B9:5A:85:58:72:C7:F7:EC:FD:66:7B:16:FF:8E:88:04
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1C3AC8
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/225eefc83d9b8d91373887f35bcd7f2c8e4a631a.roa
Signing time:             Wed 28 Sep 2022 16:02:52 +0000
ROA not before:           Wed 28 Sep 2022 16:02:05 +0000
ROA not after:            Sat 28 Sep 2024 16:02:05 +0000
asID:                     11830
IP address blocks:        190.10.125.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1850056 (0x1c3ac8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 28 16:02:05 2022 GMT
            Not After : Sep 28 16:02:05 2024 GMT
        Subject: CN=225eefc83d9b8d91373887f35bcd7f2c8e4a631a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:47:28:5a:38:cd:00:f9:f8:60:07:45:09:33:
                    41:59:10:6a:df:f2:38:9c:c2:87:f8:d4:a4:e7:a3:
                    79:26:4a:3f:df:74:87:39:2b:8b:fa:a6:f5:8d:27:
                    12:d2:fe:2e:e1:f7:91:7e:31:6c:4c:fe:2c:60:d4:
                    0d:36:ca:0f:c2:82:3d:c2:92:02:bd:ad:1c:ac:66:
                    21:d2:fe:3d:45:66:0d:17:f4:ad:db:9c:09:4b:8f:
                    d4:e4:e2:ab:b3:9c:93:ff:bc:27:97:b6:f8:7b:d1:
                    35:01:74:5f:16:75:3b:9f:d3:d5:9f:58:65:ce:a7:
                    4f:77:6a:b2:93:a9:11:a6:30:da:f6:9e:6f:ff:ae:
                    b5:c7:ce:ad:67:dd:70:02:8f:82:50:42:6e:7a:94:
                    e2:b3:0b:01:d3:55:4d:ab:ab:f7:aa:32:14:7c:47:
                    6d:c1:95:04:63:13:89:59:2b:9b:6e:01:5d:e3:96:
                    65:4f:ce:f3:93:73:5a:66:bf:d9:36:3f:a4:38:79:
                    00:8f:9e:61:b7:00:ec:ae:75:d4:ea:57:e1:2a:24:
                    7d:c8:67:d7:1e:0b:c1:39:11:c3:89:d3:12:b8:f3:
                    09:a7:2a:e4:e2:ed:45:b2:0a:1d:73:d3:78:2a:e2:
                    f1:ec:9f:2d:15:a1:93:da:2b:28:ab:2e:2e:14:79:
                    d1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D6:2C:64:B9:5A:85:58:72:C7:F7:EC:FD:66:7B:16:FF:8E:88:04
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/225eefc83d9b8d91373887f35bcd7f2c8e4a631a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:88:b8:0a:95:0f:0b:76:64:d9:3b:73:c7:35:29:29:01:f5:
         8e:84:da:ee:36:35:59:5b:dc:cc:9e:0d:86:bc:3d:bb:34:9c:
         38:f7:2b:8e:23:bd:5a:24:84:f0:f9:d3:21:09:18:87:d1:d2:
         14:35:7d:e8:5f:f0:23:51:f5:a1:31:77:73:d4:f8:35:d0:06:
         14:91:5f:ba:ab:6b:e2:30:15:db:ec:2f:a0:56:cb:26:a4:65:
         f1:8c:d1:66:ea:e9:5e:09:02:f8:c0:5e:88:a3:06:b7:b8:f7:
         e7:fe:99:ba:59:69:f0:6e:36:87:b8:6b:ea:12:77:37:d4:3e:
         7a:fa:1e:9e:de:8a:be:a3:99:13:eb:1e:e3:46:f8:d8:75:0e:
         25:1c:25:9f:b7:13:45:41:43:0d:c9:15:c0:56:3a:fe:be:b2:
         7c:cd:bb:d0:04:3a:a2:5e:7a:f8:57:2e:a7:4f:5a:2c:5f:14:
         fa:ab:8e:6f:1f:90:df:d3:92:bd:e8:03:f5:af:9a:60:18:72:
         a0:b8:e1:41:4b:58:ea:16:a6:c7:b4:68:88:13:50:04:97:38:
         2a:82:15:12:16:17:ee:9c:50:1d:e4:00:78:2a:2a:ab:e6:bc:
         34:bc:d0:78:20:a9:38:83:a7:94:cc:82:f5:29:91:d5:29:3e:
         83:87:0a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:59 2024 by rpki-client on console-ams.rpki-client.org