Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/2baa6547d4a999598453b22bdc489590f3a80fd8.roa
File:                     2baa6547d4a999598453b22bdc489590f3a80fd8.roa (raw, json)
Hash identifier:          czfUIHMhIqdoDDX6Hya7HIlGNWXD73TDZSry8rUmegg=
Subject key identifier:   CC:8C:37:E9:15:E6:40:B2:49:73:B3:12:82:60:52:78:0E:B2:E4:F4
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1986A3
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/2baa6547d4a999598453b22bdc489590f3a80fd8.roa
Signing time:             Thu 15 Sep 2022 20:51:04 +0000
ROA not before:           Thu 15 Sep 2022 20:50:29 +0000
ROA not after:            Sun 15 Sep 2024 20:50:29 +0000
asID:                     3790
IP address blocks:        190.171.8.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1672867 (0x1986a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 15 20:50:29 2022 GMT
            Not After : Sep 15 20:50:29 2024 GMT
        Subject: CN=2baa6547d4a999598453b22bdc489590f3a80fd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d0:f7:b1:b1:9c:84:a3:ac:1a:02:c4:cc:0e:
                    99:23:b6:d2:31:69:06:aa:40:52:da:f7:20:48:10:
                    c7:3e:bd:16:0d:30:87:27:29:6e:74:77:21:94:c9:
                    01:62:ed:f7:c3:93:ae:e9:45:77:33:85:34:2c:e9:
                    e8:1b:41:91:59:67:d9:2a:51:a8:cb:4d:2b:3a:12:
                    bc:68:f8:fe:1c:7d:bb:cb:de:d7:93:5e:31:20:43:
                    c8:4f:dc:c4:30:7f:b8:53:ce:11:ed:9a:50:e8:09:
                    e3:54:66:a0:5a:27:f4:d5:a6:36:fb:a5:aa:47:27:
                    29:9c:b7:dc:95:0a:7b:0f:3c:03:4a:2e:42:9f:36:
                    07:6f:f7:fd:50:68:1e:35:b5:e7:43:3a:0f:7f:b8:
                    a3:40:55:63:fb:bc:6f:0f:ae:35:90:35:d4:0e:7c:
                    ee:17:2e:a5:38:3d:ee:32:f3:8e:f3:97:97:ff:5e:
                    31:12:30:5e:45:3b:14:09:4b:13:d8:ff:0f:e5:a6:
                    b2:47:ab:60:e3:55:2c:43:b6:5f:72:78:45:86:1e:
                    2a:8b:b4:28:03:f7:12:8e:c5:5f:8b:0c:2c:fa:47:
                    16:a3:7c:4f:37:ff:7e:34:13:2a:99:ac:6c:98:ce:
                    82:ce:28:2c:5a:fb:5f:c7:38:42:3f:90:91:a1:6f:
                    44:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:8C:37:E9:15:E6:40:B2:49:73:B3:12:82:60:52:78:0E:B2:E4:F4
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/2baa6547d4a999598453b22bdc489590f3a80fd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:84:33:86:57:31:5b:be:d9:b5:8d:db:f7:d4:d0:06:6c:47:
         47:09:9e:a8:c1:c1:22:5e:1b:97:66:08:44:fe:69:2c:d0:84:
         15:b7:fe:00:77:ed:b9:50:13:28:3e:39:5a:bc:2c:ab:c5:f4:
         f2:09:b8:8e:37:22:c0:37:4e:54:e5:bd:6b:bd:17:d8:73:01:
         d7:e9:61:d8:97:05:b7:cf:b2:76:d3:be:53:99:7f:2e:03:fe:
         4f:a5:9b:53:df:9e:dd:a9:0c:08:17:12:ea:29:37:7f:07:b7:
         3e:45:e5:14:3c:35:28:51:88:c2:2a:b3:45:2e:a4:9b:8d:ce:
         af:c9:c0:bb:be:e3:d1:3f:2b:c8:07:b4:6f:6d:24:e6:d1:1e:
         d1:42:0b:e5:bc:9f:9f:35:82:be:54:cc:d4:76:5e:1b:4a:de:
         50:fc:13:92:f3:e2:20:64:98:22:0f:fd:c6:65:f4:ee:a6:c4:
         d5:c8:c1:35:d7:1e:fe:a4:ca:af:22:e6:7b:7e:17:b5:a1:8b:
         6e:11:e4:a7:5c:5c:4c:c2:2a:21:b9:b8:81:b6:d8:e6:24:70:
         38:06:52:27:f5:49:c4:3a:fe:93:f6:11:3e:05:a5:6f:5f:19:
         a0:bb:8c:35:ae:c5:8a:f3:cb:e4:fd:c9:a0:0f:27:95:96:c8:
         95:1a:85:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-fra.rpki-client.org