Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/2ccd13b2177478a0731c42b931b62e9554575b76.roa
File:                     2ccd13b2177478a0731c42b931b62e9554575b76.roa (raw, json)
Hash identifier:          AOiav0tAkhW1k7LYw1GLs3/5lW/XsaMSXjUJwX4ZSqE=
Subject key identifier:   8A:B0:03:D1:AA:70:DE:2A:91:89:5D:F3:B3:EA:DC:A1:55:20:7F:0C
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1CD549
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/2ccd13b2177478a0731c42b931b62e9554575b76.roa
Signing time:             Wed 28 Sep 2022 16:58:21 +0000
ROA not before:           Wed 28 Sep 2022 16:57:30 +0000
ROA not after:            Sat 28 Sep 2024 16:57:30 +0000
asID:                     11830
IP address blocks:        190.241.138.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1889609 (0x1cd549)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 28 16:57:30 2022 GMT
            Not After : Sep 28 16:57:30 2024 GMT
        Subject: CN=2ccd13b2177478a0731c42b931b62e9554575b76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:cb:19:41:24:a2:10:6e:a1:c6:6d:c9:f1:a7:
                    4f:c3:19:61:4d:29:15:e4:d7:ee:27:e0:c2:fe:53:
                    a0:ef:04:ee:08:2a:66:8d:b4:fd:1b:de:53:1c:2d:
                    4a:22:c8:c2:bd:6d:9f:9e:e5:f6:cf:d2:08:89:35:
                    8f:6b:9f:ad:e5:f7:e1:a5:2e:84:6e:a8:cd:55:02:
                    d9:da:84:7e:ca:8f:52:b9:d7:77:a8:0b:ef:5d:80:
                    66:15:50:2a:49:80:20:c0:5c:70:a6:cf:8a:44:36:
                    df:a3:79:94:5c:eb:f3:cf:54:07:5d:90:fb:d2:81:
                    8c:5f:db:b1:b0:1c:d3:a1:cd:d4:4e:10:4a:da:b9:
                    bd:e0:1a:be:d7:db:02:64:11:f5:35:1a:f8:42:df:
                    4d:bc:1c:c6:5f:e0:6b:ab:d1:20:0c:a3:08:83:43:
                    4c:c9:51:d0:82:19:e5:94:f5:79:f4:b3:ff:03:b4:
                    f8:a7:f8:e0:dc:42:e8:23:96:55:1f:25:ce:12:be:
                    a3:bf:05:43:fc:07:b2:51:87:8b:3d:6d:39:95:28:
                    2a:8c:e0:93:c9:4b:dc:ae:47:9c:fa:42:9d:1a:50:
                    cc:38:09:9c:fd:b7:72:b8:6b:06:a5:3a:64:7d:1a:
                    eb:40:86:0b:12:0b:c7:00:b7:7f:f5:65:81:a7:5e:
                    ee:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B0:03:D1:AA:70:DE:2A:91:89:5D:F3:B3:EA:DC:A1:55:20:7F:0C
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/2ccd13b2177478a0731c42b931b62e9554575b76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.241.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:a6:7a:45:f0:92:a4:cd:62:d3:2c:2f:ef:a0:ac:32:7c:02:
         13:25:47:89:cc:43:8f:de:f6:4b:41:25:d7:78:ea:77:1b:06:
         37:53:dc:1b:6a:d9:d0:dd:38:f9:34:32:00:21:bf:75:12:05:
         e7:5d:d4:49:29:ff:c6:10:db:5c:79:35:d8:5f:c3:a9:9e:e1:
         3e:dc:4a:da:6c:d1:cf:37:6a:cd:0b:18:44:0d:e6:90:3e:48:
         17:e3:98:f5:a2:9a:bb:99:bd:c4:16:a6:7f:f2:68:dd:8a:d6:
         ce:d3:b5:aa:fe:73:8e:dd:fa:87:ff:44:63:a7:b5:bf:e7:0d:
         d8:36:0c:8a:a5:22:2a:29:ca:79:c3:06:e2:85:8a:01:c3:cb:
         70:49:10:68:94:54:b7:04:5c:eb:2e:3d:4f:3a:31:7d:73:e3:
         28:51:80:9f:fc:08:49:35:f7:d0:a6:5a:f9:af:09:2b:bf:e2:
         fa:43:86:d3:1c:93:2f:fd:ee:c8:78:15:fb:c5:ad:28:9e:ee:
         f6:fa:fa:b4:24:58:1a:f4:e8:c0:58:15:e9:68:ef:7e:5c:9a:
         3f:66:10:3d:32:a6:98:f5:c9:0e:12:76:cc:36:77:9c:59:b0:
         19:e9:c9:b9:b6:c9:21:6d:0a:c0:12:45:a1:cc:13:5d:b9:80:
         94:18:4b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-fra.rpki-client.org