Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/22a79202a199df3574b6425440811b505f4914e6.roa
File:                     22a79202a199df3574b6425440811b505f4914e6.roa (raw, json)
Hash identifier:          IoHqeMFZeBh6cJs6D5TYcz6AIyl1KNRgnOv3lMWaZaI=
Subject key identifier:   A5:FF:87:6C:82:4F:30:45:31:E2:03:E4:47:49:03:27:8A:E4:41:CC
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1C638D
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/22a79202a199df3574b6425440811b505f4914e6.roa
Signing time:             Wed 28 Sep 2022 16:11:26 +0000
ROA not before:           Wed 28 Sep 2022 16:10:38 +0000
ROA not after:            Sat 28 Sep 2024 16:10:38 +0000
asID:                     11830
IP address blocks:        190.171.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1860493 (0x1c638d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 28 16:10:38 2022 GMT
            Not After : Sep 28 16:10:38 2024 GMT
        Subject: CN=22a79202a199df3574b6425440811b505f4914e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:73:b6:62:f6:bb:27:a3:ad:b3:ea:6f:01:d1:
                    f1:dd:d8:90:6f:91:36:20:71:e2:70:b4:9b:b8:48:
                    a0:50:64:e7:3e:be:66:0c:1e:1c:88:fa:bf:5e:74:
                    74:2b:26:be:bb:a2:65:ef:c5:df:b5:5e:d1:0a:92:
                    9f:d3:7b:a8:3b:37:4e:41:1b:f6:47:a6:ac:9d:bc:
                    22:8b:2e:ef:39:e8:ae:26:9e:52:92:2f:b2:07:86:
                    56:a1:15:d4:97:ed:6a:bb:67:1b:86:b0:38:e2:65:
                    fd:d3:8f:e6:e2:c6:c5:bf:95:21:05:18:56:20:9f:
                    d2:6a:79:96:ff:d3:15:41:07:8e:f2:31:30:50:03:
                    2d:83:c4:39:58:0f:a3:e8:d8:f8:fa:75:b0:60:a7:
                    63:8d:fa:ac:c4:d5:ff:6a:fd:d5:d2:18:d4:49:b3:
                    15:06:5f:79:72:d2:09:54:1f:05:bf:a0:64:30:f1:
                    88:b8:9b:af:9f:22:f4:7a:9e:1e:e0:18:1f:4c:8b:
                    d1:2e:d0:bf:ab:48:07:ce:54:0f:bc:a4:6d:f1:56:
                    1a:bb:8a:58:b3:14:65:46:35:bf:70:26:b2:c3:9b:
                    49:fc:e3:38:2d:1f:84:a1:4f:be:4b:c3:63:dd:39:
                    a1:22:1b:3e:c9:18:27:e3:8f:da:f6:15:6d:ee:fa:
                    d4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:FF:87:6C:82:4F:30:45:31:E2:03:E4:47:49:03:27:8A:E4:41:CC
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/22a79202a199df3574b6425440811b505f4914e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:7f:31:c6:d0:1b:70:63:39:c9:a6:5c:8a:a0:23:f9:d7:88:
         36:45:7f:af:83:93:4c:31:4c:41:b3:7d:8b:57:a5:6f:04:0f:
         d4:f7:3d:37:3f:03:34:15:ef:bc:e0:ae:11:55:e4:3a:9c:8e:
         9b:f4:2e:d2:3f:c8:40:a6:56:5f:dd:7e:09:b0:ab:07:52:56:
         ab:9c:13:cd:e8:84:31:c4:be:2b:da:1e:4c:44:9d:53:9b:15:
         60:7b:f8:a8:33:eb:70:cd:c4:c5:31:c2:b7:9e:51:a0:3e:20:
         f7:f6:5e:b4:25:2d:67:0f:1f:49:57:c2:c0:55:8b:0b:e5:57:
         af:e3:9d:6f:26:ba:b0:35:1c:ee:28:1c:00:ea:aa:c8:65:07:
         d5:60:f6:02:2d:9b:3b:29:19:6a:72:1e:3d:8e:4e:2d:af:19:
         34:49:7a:96:d8:4a:7c:c0:c7:21:f7:c4:18:d4:17:c4:c5:c9:
         12:15:12:4a:87:c0:58:26:45:07:61:95:2a:de:19:7f:9d:63:
         7c:58:f7:b7:7f:3f:0d:2c:a9:92:40:c4:39:ea:8e:8f:bd:c8:
         a1:f5:fc:b6:b6:a2:3e:93:f6:0c:6a:4a:10:a7:d6:9b:14:b3:
         d1:b9:82:e4:6d:04:ea:bd:79:7f:6a:70:b7:6c:62:6d:9e:f1:
         a9:ed:9e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-ams.rpki-client.org