Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/2e6755f5413324939a93db507a573843dd3e49f2.roa
File:                     2e6755f5413324939a93db507a573843dd3e49f2.roa (raw, json)
Hash identifier:          dEXa1ouQgmVdHRFveDXvJPt6s/JiURr5CVLnDiTgnv8=
Subject key identifier:   AC:57:30:55:07:66:C6:7B:C5:E0:D6:9E:CF:A9:0A:5F:87:F3:7F:93
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1BCEB9
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/2e6755f5413324939a93db507a573843dd3e49f2.roa
Signing time:             Tue 27 Sep 2022 22:50:02 +0000
ROA not before:           Tue 27 Sep 2022 22:49:00 +0000
ROA not after:            Fri 27 Sep 2024 22:49:00 +0000
asID:                     11830
IP address blocks:        190.10.99.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1822393 (0x1bceb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 27 22:49:00 2022 GMT
            Not After : Sep 27 22:49:00 2024 GMT
        Subject: CN=2e6755f5413324939a93db507a573843dd3e49f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:5e:a3:1c:0d:e4:b3:a4:05:a9:3d:99:c2:05:
                    f6:5e:c9:32:85:b2:f8:32:fd:0e:cc:7f:59:da:1c:
                    6b:1f:f3:9f:9b:ef:79:d0:09:3f:ee:29:31:c9:e2:
                    54:51:2f:b3:f9:9b:50:a1:3e:ed:b5:40:c1:66:9a:
                    83:fb:2a:de:05:f8:e6:fe:80:75:52:e4:24:14:1b:
                    ce:74:ff:f4:3c:4d:42:79:40:d6:11:c1:b8:87:dd:
                    0d:55:a0:05:b2:be:d0:93:0a:b7:2e:7d:23:16:b7:
                    c8:9f:51:75:4b:38:b4:95:55:42:3c:38:87:2b:fd:
                    f9:e3:8e:8c:ee:0e:01:c4:79:aa:7a:b1:48:d0:b6:
                    71:b4:65:ff:95:6a:7a:4a:f5:eb:d0:8c:83:fc:52:
                    04:ea:49:97:a2:7a:89:64:62:10:e6:90:d9:0c:2d:
                    5b:dc:fb:62:4f:7b:2b:9b:ce:14:ba:05:f1:5d:cf:
                    78:52:dd:8b:82:37:39:10:12:01:77:e8:2e:9d:eb:
                    03:0b:69:3a:5a:65:d8:d6:80:b4:5e:d1:5f:73:58:
                    28:de:59:49:de:8a:92:23:13:03:bd:13:98:be:23:
                    84:9f:6f:f4:16:80:db:36:a5:06:7d:56:6c:7e:3b:
                    f5:ed:9b:91:c8:59:81:66:67:22:2d:1a:ab:f7:3f:
                    16:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:57:30:55:07:66:C6:7B:C5:E0:D6:9E:CF:A9:0A:5F:87:F3:7F:93
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/2e6755f5413324939a93db507a573843dd3e49f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:a0:82:90:d2:22:d0:1c:a3:6a:9d:02:35:22:96:c4:d7:68:
         62:db:28:77:ae:9c:00:13:23:77:23:80:08:61:e5:ed:51:0b:
         a1:be:c8:a1:7b:3c:83:55:72:58:0c:f9:18:91:f8:61:fc:f9:
         e1:9c:90:7a:df:e3:80:10:d2:34:3c:55:a6:63:06:3c:d2:a7:
         7e:8c:c0:e8:7c:22:1d:64:b4:f9:db:72:c4:40:46:67:44:0c:
         0d:be:bb:8c:8e:ac:1a:d6:75:51:31:08:20:06:a2:ce:ba:94:
         94:05:80:c8:98:d9:1c:0e:c4:3a:fc:f7:03:16:44:6b:f9:81:
         b5:8f:b1:38:1d:3a:c1:be:c1:2a:98:e7:38:e0:0e:bc:64:8e:
         9b:b1:af:ac:56:09:1d:bd:71:6b:e4:94:40:ea:d7:00:d3:24:
         ff:14:71:7c:ec:64:9d:98:2f:3d:f5:1d:d4:2c:90:c1:5e:4d:
         05:bd:4c:12:10:06:54:9d:cd:b5:4e:4a:19:df:03:a3:1e:0b:
         93:2c:5b:ff:b9:5a:65:f1:91:3a:0e:f6:c3:f5:16:d6:8c:c6:
         1b:ba:3c:21:a5:b3:58:1c:dd:8c:37:aa:a0:46:ec:d7:10:6d:
         4f:4e:d5:20:cd:2b:09:33:bb:fb:a0:d3:56:c4:45:e3:42:63:
         ee:e9:ae:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-ams.rpki-client.org