Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/32a84a4a36e2bda4a9f5cb9e670c0ef0b1a56bb3.roa
File:                     32a84a4a36e2bda4a9f5cb9e670c0ef0b1a56bb3.roa (raw, json)
Hash identifier:          JmYJtJFzYueaZLTA1P7LrK5kAWCFTUThOITIfD3eKQc=
Subject key identifier:   6E:77:8A:38:91:6F:4F:8E:82:7B:15:65:E9:B5:3C:12:CE:54:C7:EE
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1C49CB
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/32a84a4a36e2bda4a9f5cb9e670c0ef0b1a56bb3.roa
Signing time:             Wed 28 Sep 2022 16:06:18 +0000
ROA not before:           Wed 28 Sep 2022 16:05:31 +0000
ROA not after:            Sat 28 Sep 2024 16:05:31 +0000
asID:                     11830
IP address blocks:        190.171.1.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1853899 (0x1c49cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 28 16:05:31 2022 GMT
            Not After : Sep 28 16:05:31 2024 GMT
        Subject: CN=32a84a4a36e2bda4a9f5cb9e670c0ef0b1a56bb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8b:56:af:a5:27:d4:29:01:f7:17:e7:ad:4a:
                    b4:e0:31:2a:aa:a0:4e:cd:8b:ea:5e:2c:ec:fc:c2:
                    f7:f4:93:5e:9f:e2:83:a2:e9:6f:4b:0d:c7:59:14:
                    bf:0d:38:fa:7a:2e:ef:91:78:7f:c9:66:3d:e5:99:
                    f9:ae:1c:15:b4:1c:d4:5f:c8:8f:d8:8d:96:80:f8:
                    d1:84:03:bf:8f:9a:84:01:ec:44:11:a4:57:2f:94:
                    d6:ed:66:2a:dd:fc:48:1c:dd:77:e4:60:01:03:55:
                    60:dc:2a:5b:02:aa:8f:74:69:f8:76:f6:fe:0e:e7:
                    a5:b8:44:58:8f:91:5e:aa:31:3b:af:97:6d:cf:f5:
                    09:f9:b3:6e:8d:7a:52:d9:18:4a:2a:d7:91:93:83:
                    73:09:93:4e:29:77:5f:4e:bc:f7:8c:42:26:f3:55:
                    55:2f:19:8a:1a:e4:4b:68:2f:a9:51:86:b3:f7:1e:
                    01:60:8a:2c:1f:7e:63:e0:16:c6:e9:2e:f3:d9:b9:
                    4d:c6:48:e1:b6:c4:a0:bb:9f:8b:9f:b7:5b:84:d2:
                    a9:f5:f7:27:b6:5c:f3:ea:76:2b:c4:70:4d:bf:38:
                    ea:2a:4e:e2:55:0b:e2:eb:a5:29:0b:b4:9c:ed:49:
                    e3:76:d4:21:e1:2f:65:be:ab:0f:4d:00:2e:28:7f:
                    90:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:77:8A:38:91:6F:4F:8E:82:7B:15:65:E9:B5:3C:12:CE:54:C7:EE
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/32a84a4a36e2bda4a9f5cb9e670c0ef0b1a56bb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:d6:54:27:ae:2f:dc:36:1e:30:b8:5a:c5:29:3a:4f:b4:1e:
         df:01:0d:b6:48:76:45:a2:b3:a7:00:e8:a4:af:5c:7e:31:45:
         14:ac:90:b0:19:3a:d5:36:c0:a1:a0:b0:52:1e:4b:c8:70:b9:
         67:d0:18:09:7f:e9:db:c2:ff:c3:9f:3c:7e:21:01:a1:95:84:
         f5:5e:a1:3f:4e:55:70:87:40:d9:70:8d:1b:ca:80:b5:ad:52:
         de:b1:a0:b8:e9:6b:36:9e:6d:5d:89:f5:de:76:ef:8d:e4:f2:
         77:d8:53:93:f8:3d:7e:cd:1e:66:c4:e4:fc:3d:59:07:28:b7:
         27:d9:39:08:1f:39:66:2d:6e:b8:66:68:5a:e2:fa:8f:f5:2f:
         c1:69:2d:90:a6:4c:58:6b:36:c8:6e:f5:b0:6e:23:08:99:81:
         eb:54:ad:48:01:8e:22:a8:42:8b:15:6a:a9:d7:0d:da:45:5e:
         d3:b5:b7:50:59:27:2a:53:b7:4c:1b:ed:1a:50:0a:11:6c:3a:
         85:39:2e:ca:de:02:b1:1e:8a:30:d9:63:74:9a:c6:06:ec:77:
         8f:bd:44:2f:6a:f5:27:0f:0c:40:11:1e:12:b2:0c:c5:03:af:
         2b:b5:ef:fe:d4:26:ee:ab:f1:ec:a6:67:ba:8d:4a:a5:82:83:
         83:dc:83:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-ams.rpki-client.org