Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/24c31613563757fa8429163c8306f68a079b5d21.roa
File:                     24c31613563757fa8429163c8306f68a079b5d21.roa (raw, json)
Hash identifier:          ghNQ7AOod3BMWF6AZVraA0QknDpxMIy69mylIOcJ4s0=
Subject key identifier:   38:2E:27:72:EF:61:EE:70:C3:0F:58:72:6B:E0:06:A0:21:D8:DB:34
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1CDCCB
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/24c31613563757fa8429163c8306f68a079b5d21.roa
Signing time:             Wed 28 Sep 2022 17:01:59 +0000
ROA not before:           Wed 28 Sep 2022 17:00:56 +0000
ROA not after:            Sat 28 Sep 2024 17:00:56 +0000
asID:                     11830
IP address blocks:        190.241.141.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1891531 (0x1cdccb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 28 17:00:56 2022 GMT
            Not After : Sep 28 17:00:56 2024 GMT
        Subject: CN=24c31613563757fa8429163c8306f68a079b5d21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bb:b5:2b:07:31:d6:9d:1b:58:03:cb:87:fc:
                    19:27:14:87:9d:a4:fe:1d:c7:57:d4:76:7b:f2:45:
                    ae:5e:c6:3f:7c:6f:22:15:0d:6d:9f:3c:41:2f:61:
                    0b:0b:63:40:98:85:da:01:b4:83:aa:c4:55:d1:f8:
                    c7:db:fb:3d:59:97:f9:5b:01:a1:f3:57:67:d9:58:
                    77:8a:e0:82:a4:ea:1d:fc:8d:bb:e7:18:5d:be:f1:
                    87:9c:eb:00:dc:60:1f:46:e2:7f:30:ac:db:e2:0e:
                    2c:a4:4c:df:08:78:89:1d:f3:82:d6:15:85:0f:77:
                    be:a3:cc:f6:b9:10:4a:3b:72:8b:b6:63:4d:0f:18:
                    a2:7f:8f:bf:c4:9a:13:e9:85:dd:ff:58:b3:7f:0f:
                    75:0d:fc:e2:96:2b:98:75:b6:6a:d8:16:6a:f0:71:
                    5d:53:ae:f5:d5:f9:c5:95:63:33:ac:f4:f6:88:5f:
                    4e:78:d4:b4:03:5d:4f:e3:94:92:e4:a7:12:b9:a2:
                    ca:0b:45:32:8c:7a:82:4b:2e:9a:0b:ea:04:4a:f5:
                    57:68:e2:4b:d8:68:1d:26:a2:3b:c3:a1:e8:c1:15:
                    08:27:6e:d4:b2:1f:ea:12:d0:2a:6d:71:1e:39:0f:
                    8b:82:45:4a:a4:d7:83:d6:7e:d1:06:cf:8c:2a:7b:
                    de:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:2E:27:72:EF:61:EE:70:C3:0F:58:72:6B:E0:06:A0:21:D8:DB:34
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/24c31613563757fa8429163c8306f68a079b5d21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.241.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:6f:55:a7:a9:ab:9d:7f:d7:5c:b5:f4:91:2f:50:d3:5e:b9:
         d0:5a:ac:39:8b:13:54:61:7a:d4:79:67:5b:c6:1d:7d:49:db:
         c2:5a:fb:7c:97:0c:2f:f1:ed:e7:c7:6b:03:9e:5f:51:0f:65:
         36:6b:b7:df:87:bf:3c:fe:f1:14:b8:08:9b:11:4d:8a:b8:c3:
         01:47:66:98:bc:6d:37:e1:bd:d6:0c:b7:b4:7d:9a:f8:d1:df:
         0a:fc:7d:77:94:13:5c:7a:72:b5:86:03:88:e2:98:a3:58:8a:
         ea:77:ef:63:7f:92:3d:1f:a0:f7:84:7d:fe:37:7f:8a:6a:a6:
         45:d0:09:e4:48:b2:60:9b:34:e4:fb:54:d9:df:41:29:9f:68:
         52:84:cd:db:14:cf:54:fe:60:5c:e9:c8:5d:b9:a8:79:58:54:
         ce:6d:b0:68:5e:99:55:ab:42:0d:21:c5:d2:d2:04:9b:17:c8:
         8e:00:fb:45:ff:34:b2:72:70:f9:88:b2:89:4d:06:68:e9:97:
         c7:80:12:d0:97:8f:6b:78:3f:dd:b4:09:6c:62:4e:a2:90:cb:
         35:08:70:70:47:ec:de:8c:aa:e3:08:58:48:ca:8f:01:46:e0:
         9d:d5:3a:7c:b0:ba:33:4f:6c:c0:1e:a3:e3:8d:b8:9e:e6:bb:
         0c:75:97:9b
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHNzLMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZj
M2YzY2JmOTcxYjMxZDRhMGZiNDhhMDYzZWQ4NmYwYjU5NGFjM2UwHhcNMjIwOTI4
MTcwMDU2WhcNMjQwOTI4MTcwMDU2WjAzMTEwLwYDVQQDEygyNGMzMTYxMzU2Mzc1
N2ZhODQyOTE2M2M4MzA2ZjY4YTA3OWI1ZDIxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsbu1Kwcx1p0bWAPLh/wZJxSHnaT+HcdX1HZ78kWuXsY/fG8i
FQ1tnzxBL2ELC2NAmIXaAbSDqsRV0fjH2/s9WZf5WwGh81dn2Vh3iuCCpOod/I27
5xhdvvGHnOsA3GAfRuJ/MKzb4g4spEzfCHiJHfOC1hWFD3e+o8z2uRBKO3KLtmNN
Dxiif4+/xJoT6YXd/1izfw91DfziliuYdbZq2BZq8HFdU6711fnFlWMzrPT2iF9O
eNS0A11P45SS5KcSuaLKC0UyjHqCSy6aC+oESvVXaOJL2GgdJqI7w6HowRUIJ27U
sh/qEtAqbXEeOQ+LgkVKpNeD1n7RBs+MKnve/wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFDguJ3LvYe5www9YcmvgBqAh2Ns0MB8GA1UdIwQYMBaAFNgLQZU9gBToGKPM
I8FMT5TRqMEbMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmMzZjNj
YmY5NzFiMzFkNGEwZmI0OGEwNjNlZDg2ZjBiNTk0YWMzZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmE3ODYyZTgtZDJkYi00OGVhLWI4MDktZDRiOTcw
ZDFkODkyLzI0YzMxNjEzNTYzNzU3ZmE4NDI5MTYzYzgzMDZmNjhhMDc5YjVkMjEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82YTc4NjJlOC1kMmRiLTQ4ZWEtYjgwOS1kNGI5
NzBkMWQ4OTIvNmMzZjNjYmY5NzFiMzFkNGEwZmI0OGEwNjNlZDg2ZjBiNTk0YWMz
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL7xjTANBgkqhkiG9w0BAQsFAAOCAQEASm9Vp6mrnX/XXLX0
kS9Q01650FqsOYsTVGF61HlnW8YdfUnbwlr7fJcML/Ht58drA55fUQ9lNmu334e/
PP7xFLgImxFNirjDAUdmmLxtN+G91gy3tH2a+NHfCvx9d5QTXHpytYYDiOKYo1iK
6nfvY3+SPR+g94R9/jd/imqmRdAJ5EiyYJs05PtU2d9BKZ9oUoTN2xTPVP5gXOnI
XbmoeVhUzm2waF6ZVatCDSHF0tIEmxfIjgD7Rf80snJw+YiyiU0GaOmXx4AS0JeP
a3g/3bQJbGJOopDLNQhwcEfs3oyq4whYSMqPAUbgndU6fLC6M09swB6j4424nua7
DHWXmw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-ams.rpki-client.org