Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/2f347c62dfb2e207d82ac1fde87518ee57ed92df.roa
File:                     2f347c62dfb2e207d82ac1fde87518ee57ed92df.roa (raw, json)
Hash identifier:          hVRfhyBub6956mduPAAMzqkl62mqh8m7WXqrTGozVg4=
Subject key identifier:   AD:94:88:66:E0:BC:98:C4:C8:A3:BB:E1:16:0F:58:B6:67:51:92:57
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1C5462
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/2f347c62dfb2e207d82ac1fde87518ee57ed92df.roa
Signing time:             Wed 28 Sep 2022 16:08:22 +0000
ROA not before:           Wed 28 Sep 2022 16:07:28 +0000
ROA not after:            Sat 28 Sep 2024 16:07:28 +0000
asID:                     11830
IP address blocks:        190.171.10.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1856610 (0x1c5462)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 28 16:07:28 2022 GMT
            Not After : Sep 28 16:07:28 2024 GMT
        Subject: CN=2f347c62dfb2e207d82ac1fde87518ee57ed92df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:18:87:1e:22:43:09:4a:a2:0f:1a:db:2c:62:
                    fd:7a:5d:da:0f:fa:da:f5:ab:64:b6:7d:97:47:8d:
                    cb:dd:b5:66:41:2d:02:39:11:d3:6e:9a:81:aa:ce:
                    47:99:0e:68:7b:37:1d:9a:23:cf:60:7b:8f:0f:37:
                    7b:d3:ab:75:3f:50:92:8b:8d:29:9f:af:1a:76:f0:
                    71:c8:84:b9:b6:91:33:99:d3:6f:d4:08:10:0f:af:
                    0a:47:a5:c4:b3:16:22:18:c0:43:36:0f:a6:cf:f6:
                    42:e8:fa:38:64:84:49:60:a2:d5:96:19:e6:2a:9c:
                    a0:81:30:6f:69:fa:4e:1c:2f:a6:21:3d:82:23:94:
                    c0:ff:b2:7f:a1:76:50:ea:6b:c1:77:f7:3a:dd:1b:
                    cd:68:2d:c5:ee:c7:2b:74:13:5f:aa:81:b4:02:85:
                    d6:39:d4:11:2d:6c:77:63:30:f9:dd:69:6e:3e:c4:
                    87:7a:a5:61:5d:f2:da:d3:fb:ab:60:16:8e:b9:fd:
                    52:8e:37:f0:0c:58:7a:e9:a1:e0:b4:16:9d:3c:9a:
                    e0:4e:34:e7:0f:f1:d2:15:e0:bd:2b:89:9c:ed:e4:
                    e0:a1:a8:f3:34:49:1e:5b:4c:bb:bd:5a:82:a4:17:
                    51:ba:1e:05:11:04:fa:3b:f1:43:1a:71:6b:2b:40:
                    54:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:94:88:66:E0:BC:98:C4:C8:A3:BB:E1:16:0F:58:B6:67:51:92:57
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/2f347c62dfb2e207d82ac1fde87518ee57ed92df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:07:f1:89:d3:e1:4f:b3:18:f5:71:58:15:6d:a1:b1:c8:8b:
         37:fd:56:9f:15:10:63:52:60:58:12:8c:f7:ad:3d:8b:85:86:
         8e:af:57:73:26:c5:80:89:cf:f7:48:69:b3:1e:f3:d0:d6:b6:
         10:e1:83:a6:96:da:4c:e2:31:27:74:f7:e5:e2:32:5b:20:3e:
         4e:86:6a:c1:90:b0:ec:7a:d4:f9:84:66:d9:97:a6:8e:b9:39:
         5a:b3:fb:5d:ba:2e:3a:16:ae:cf:c6:e4:cb:d9:84:c4:91:3c:
         00:44:7a:07:b7:c1:85:5b:95:bf:64:3c:0c:e6:d0:79:fc:e9:
         a1:99:ea:a0:46:b3:d8:e6:06:34:a3:bc:de:0b:db:3b:a0:3a:
         23:15:aa:b8:c9:27:76:05:54:ec:d9:4f:64:57:09:2c:64:78:
         24:a8:f0:24:4d:12:8c:e0:a8:68:1a:b3:3a:58:81:ca:07:66:
         68:d8:73:0e:b8:10:8d:84:6c:a5:f8:85:72:fc:2f:99:42:37:
         e4:e8:85:23:49:45:f0:2a:b1:ff:79:61:4b:9b:a5:f0:ee:89:
         7f:30:fb:8e:e1:56:3d:b5:d1:52:60:ca:fa:1f:90:e7:71:be:
         51:b5:4a:4e:10:af:c7:e5:9e:ac:2d:cb:19:b6:2e:b1:97:4b:
         fc:79:68:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-ams.rpki-client.org