Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/3407c796cde2026c743cd8624f89c22927c11711.roa
File:                     3407c796cde2026c743cd8624f89c22927c11711.roa (raw, json)
Hash identifier:          GFbfyPmUvj6pJtoPnNc4iDFFKLzSHZ6p+H//9jA++YA=
Subject key identifier:   B6:7D:34:5F:48:3E:D5:62:E8:28:03:67:7C:C0:59:6C:EA:79:22:E8
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1CDF29
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/3407c796cde2026c743cd8624f89c22927c11711.roa
Signing time:             Wed 28 Sep 2022 17:04:02 +0000
ROA not before:           Wed 28 Sep 2022 17:02:12 +0000
ROA not after:            Sat 28 Sep 2024 17:02:12 +0000
asID:                     11830
IP address blocks:        190.241.198.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1892137 (0x1cdf29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 28 17:02:12 2022 GMT
            Not After : Sep 28 17:02:12 2024 GMT
        Subject: CN=3407c796cde2026c743cd8624f89c22927c11711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b3:eb:c5:00:ec:d1:5a:76:94:70:fb:87:d5:
                    74:66:53:6e:bb:97:72:01:46:83:ce:6c:58:1c:2e:
                    0f:2b:f3:61:69:ee:92:72:9e:35:c5:57:7c:4f:d0:
                    e3:38:d7:20:92:ba:a3:46:a5:63:35:4d:d5:e3:e4:
                    4a:23:b8:ea:e8:b9:0d:84:d0:53:97:52:e2:f3:d3:
                    3c:d4:61:d4:34:e4:f2:83:a9:6b:11:b3:9f:58:f5:
                    e5:a2:2e:81:87:90:9b:29:f4:12:bf:9c:2e:7d:ec:
                    ba:f0:d0:6c:b4:30:44:1a:bf:f7:4e:7a:26:a8:93:
                    03:2d:d7:60:b8:0d:15:93:74:0c:32:3b:70:13:ee:
                    4d:36:43:ec:34:69:ec:e5:8d:de:c7:30:11:44:3a:
                    f0:45:e8:6b:36:7f:af:5d:84:ad:8d:fb:6e:f2:a9:
                    8c:92:7a:63:98:b3:89:63:1b:ad:54:2e:e6:ab:c1:
                    45:d4:73:c0:49:ce:3c:8c:63:f6:b0:34:06:8e:e5:
                    37:d6:ee:67:f5:76:0a:ed:d2:f3:dc:cd:27:fd:f7:
                    9a:ed:a5:41:f8:67:26:66:17:e5:d9:ce:d0:7f:20:
                    59:42:6e:71:bb:eb:3e:6a:76:99:72:78:f6:70:c1:
                    9f:7c:dd:e9:ce:e1:1a:3d:94:b0:3c:f9:65:69:3d:
                    93:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:7D:34:5F:48:3E:D5:62:E8:28:03:67:7C:C0:59:6C:EA:79:22:E8
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/3407c796cde2026c743cd8624f89c22927c11711.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.241.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:f7:07:6d:2e:55:b4:67:0c:89:8a:50:e4:f5:8a:c8:ce:fd:
         fd:69:60:c9:75:b4:f8:af:ab:8a:b9:0e:31:22:a6:3e:45:7a:
         27:41:41:4c:d8:67:b7:8a:29:18:cc:d6:bb:ea:83:a2:ac:e3:
         c7:c8:72:c2:a7:fc:46:4a:89:02:6f:53:f7:6b:88:71:87:91:
         85:2b:ca:da:92:94:1e:3d:0f:74:b1:7b:46:b6:a0:de:17:47:
         82:a0:eb:6c:a0:a8:43:6a:26:ee:69:a3:ed:4c:e7:5a:e8:7f:
         11:d7:0e:6c:0c:6c:aa:20:54:fb:38:8a:b9:63:42:1d:65:e8:
         98:fc:dc:c0:9c:65:71:37:03:34:cc:4c:88:a3:ab:ab:7a:7f:
         d4:68:4f:71:ec:bf:7c:23:e2:9b:21:9a:0e:df:5e:76:9e:e3:
         54:8c:c9:5f:f4:b9:4b:52:20:04:6b:9d:74:ef:f6:c0:d8:0f:
         2e:f8:d3:46:44:14:08:be:23:af:81:3c:ea:0c:04:66:34:5d:
         a9:c5:bc:44:3b:85:a2:e8:b8:1f:0d:96:c1:e3:46:ce:0e:e5:
         d4:c7:ed:f3:55:88:23:4f:f3:9d:de:40:bf:69:79:91:7d:cb:
         12:dc:8a:f2:56:15:f8:08:e8:4a:90:d7:51:60:62:3d:6e:86:
         b7:e6:34:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-ams.rpki-client.org