Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/2b5e0d764dac7e97dc126f85009b59dc8405c0dc.roa
File:                     2b5e0d764dac7e97dc126f85009b59dc8405c0dc.roa (raw, json)
Hash identifier:          hQ2mxGmoY079tm+otDnIUP16wzBf3EkbosvW8LsdClg=
Subject key identifier:   FC:81:63:42:FD:2F:22:D2:20:80:E0:1B:DB:3E:11:32:0B:EA:73:90
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       19710C
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/2b5e0d764dac7e97dc126f85009b59dc8405c0dc.roa
Signing time:             Thu 15 Sep 2022 20:47:08 +0000
ROA not before:           Thu 15 Sep 2022 20:46:22 +0000
ROA not after:            Sun 15 Sep 2024 20:46:22 +0000
asID:                     3790
IP address blocks:        190.10.121.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1667340 (0x19710c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 15 20:46:22 2022 GMT
            Not After : Sep 15 20:46:22 2024 GMT
        Subject: CN=2b5e0d764dac7e97dc126f85009b59dc8405c0dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:97:44:ec:91:52:d0:fe:e7:7d:7a:5c:20:fc:
                    95:df:18:9b:83:54:69:62:cb:4a:46:cc:ee:ce:64:
                    c2:aa:53:45:f5:10:e1:a1:b1:3f:5d:b3:ac:ce:a7:
                    83:76:05:38:ea:1f:d8:16:5f:17:f3:4f:6e:86:89:
                    4a:63:0b:83:cc:bd:12:7c:56:18:82:ec:ca:64:20:
                    2f:79:5d:38:0d:cd:c7:2a:64:35:00:60:d8:bc:b4:
                    bf:86:0a:49:c0:0f:67:e4:c4:18:58:cc:f2:58:35:
                    20:c6:a6:7d:20:2c:07:32:52:4f:33:ee:65:e1:81:
                    e5:79:2c:63:3d:6b:a9:22:58:4f:6e:ee:23:d6:3a:
                    e0:0e:fa:b4:d5:1d:5e:d3:a0:34:57:a0:0c:12:ae:
                    7c:cd:3b:03:20:82:a5:f6:0c:9b:e1:27:59:df:d4:
                    fa:bf:9d:48:e6:09:da:45:6e:96:a6:42:12:d7:35:
                    d6:d7:e8:28:2c:80:28:b6:f3:15:2a:e4:65:e4:f6:
                    4d:e2:14:af:fb:8b:46:3f:e5:aa:2c:19:37:08:ef:
                    f6:22:76:06:9a:31:19:9f:16:8f:36:d8:31:60:82:
                    38:23:1c:a5:01:80:d4:21:80:b0:2b:e0:2d:b1:61:
                    cb:c0:0b:ce:be:f4:8a:b1:47:6f:f3:3f:43:9d:29:
                    33:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:81:63:42:FD:2F:22:D2:20:80:E0:1B:DB:3E:11:32:0B:EA:73:90
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/2b5e0d764dac7e97dc126f85009b59dc8405c0dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:17:bb:51:be:04:07:8a:e1:1a:3c:2d:e5:48:4e:84:c5:e3:
         7e:89:03:7c:5c:e5:d2:16:38:e1:04:15:d7:8e:29:ee:e5:03:
         95:26:81:e5:2d:3f:6b:d1:0b:c2:af:4b:25:c6:b5:a2:17:3c:
         73:5d:90:eb:02:1c:95:c8:b4:8f:25:1a:6c:a6:4f:49:99:67:
         34:09:dd:b2:ad:91:8a:67:98:6b:99:2e:89:64:ef:95:00:3a:
         42:71:f8:1f:32:fe:8e:da:d4:0c:8e:8c:dc:37:6d:a8:a1:4d:
         d7:41:88:ff:c6:e1:1b:ca:ec:35:6d:3b:a0:9d:89:99:a5:d6:
         42:32:e3:f8:3b:a8:82:5d:ae:b0:ac:54:a6:bd:e2:6e:80:53:
         d6:b5:7f:69:eb:27:66:27:60:14:4e:ba:ef:b2:63:98:38:34:
         ea:20:b2:bc:41:0c:35:ec:33:38:e8:2e:55:fd:7b:73:50:7d:
         51:82:a8:fa:60:4b:89:c3:9c:67:a5:2b:9e:01:bd:9c:13:1d:
         cd:9e:8b:70:50:16:4c:dc:69:71:47:10:b4:a9:00:8a:00:af:
         16:3b:55:85:3b:e9:d8:f0:2b:27:31:ac:c6:42:33:21:00:53:
         5a:74:24:88:75:e8:09:b9:7c:79:b9:c8:c6:32:fe:b5:61:1b:
         5e:1d:bb:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-ams.rpki-client.org