Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/38a42ceb59ab0ab59a19731a129264b6fce5f9e9.roa
File:                     38a42ceb59ab0ab59a19731a129264b6fce5f9e9.roa (raw, json)
Hash identifier:          CWRgb7du8V4bTgPkqyqOBfyCJJZ24koT5u8ruL71CMk=
Subject key identifier:   B0:69:F4:22:33:F8:D4:9F:7F:89:77:56:37:C9:E7:2B:2C:BE:BB:30
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1C9C7D
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/38a42ceb59ab0ab59a19731a129264b6fce5f9e9.roa
Signing time:             Wed 28 Sep 2022 16:30:22 +0000
ROA not before:           Wed 28 Sep 2022 16:29:33 +0000
ROA not after:            Sat 28 Sep 2024 16:29:33 +0000
asID:                     11830
IP address blocks:        190.241.76.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1875069 (0x1c9c7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 28 16:29:33 2022 GMT
            Not After : Sep 28 16:29:33 2024 GMT
        Subject: CN=38a42ceb59ab0ab59a19731a129264b6fce5f9e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2b:4e:2e:5e:d4:00:ab:a0:93:32:27:8e:b2:
                    76:d1:bb:89:2d:cd:99:15:4f:78:a2:a5:a9:d8:75:
                    ab:e2:c5:43:31:79:bf:61:64:0f:14:2b:db:92:6d:
                    0f:dc:34:8b:8e:cf:1e:81:ab:70:0c:ff:5d:f9:b3:
                    f2:13:1d:ae:87:54:78:fd:d1:42:6e:fd:91:cf:93:
                    47:4e:6b:00:b8:ce:58:c7:8e:91:d1:67:ee:f8:32:
                    c4:0b:a2:c9:ce:bd:c4:20:fd:e4:b7:59:c7:27:51:
                    e4:be:29:f9:77:46:3c:71:ef:2a:59:59:a7:76:e2:
                    14:86:24:d0:0e:63:c7:50:47:8e:11:ab:56:13:18:
                    a9:0f:eb:5a:58:e2:b9:ac:ec:7c:8b:09:12:fa:7e:
                    44:51:22:8d:12:38:98:1a:e5:73:e2:e6:85:17:a4:
                    39:23:82:54:06:ac:1a:44:21:1c:8d:87:38:33:15:
                    8b:6a:cc:70:7a:ae:55:29:7e:ee:ee:99:92:17:1a:
                    bd:05:e8:d0:d3:f5:b2:50:bd:3c:3d:4a:97:fb:56:
                    09:c7:dc:50:a3:70:f6:27:9f:33:6f:7c:0d:e9:66:
                    28:28:ef:14:41:4a:52:9b:6e:d0:50:37:b5:97:d3:
                    17:d2:b0:31:6e:7e:d1:12:d0:e8:f9:a7:26:4a:37:
                    4a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:69:F4:22:33:F8:D4:9F:7F:89:77:56:37:C9:E7:2B:2C:BE:BB:30
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/38a42ceb59ab0ab59a19731a129264b6fce5f9e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.241.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:7a:40:b6:2b:eb:dc:92:bb:b9:3c:1e:3a:52:34:5c:2d:df:
         ec:34:4c:b2:d1:a9:92:2a:56:ee:35:32:b2:d6:de:da:cc:2a:
         ac:fe:8d:4c:66:54:20:9d:1b:f1:40:c8:b5:32:93:50:6b:bf:
         68:da:bc:11:85:7d:ee:e4:f8:f5:da:ac:c3:7d:40:a8:dc:89:
         d6:3d:9f:52:cc:3f:4e:ef:aa:ce:0a:58:e6:7e:32:e5:ff:58:
         50:cd:d9:2b:bf:1d:d3:a4:16:a9:7e:bc:2e:1e:30:b3:c3:73:
         25:9e:d6:9f:5f:82:d0:c7:ed:12:5f:ca:fb:81:a4:5f:02:c3:
         8c:02:75:5f:4b:19:ea:a9:ab:46:32:47:c9:89:f2:1b:e8:32:
         12:1b:0e:fc:57:d6:e5:f9:0a:3a:5e:b9:05:50:02:bb:d9:95:
         6a:20:4f:ea:04:b9:df:5c:ff:a1:cd:60:de:e1:a7:61:47:cc:
         a7:34:e4:6c:d5:c1:6a:61:70:5d:c8:c0:e2:35:9d:a3:97:58:
         d1:13:c1:79:cb:f1:0f:20:d8:c7:83:26:78:98:6a:16:b2:6f:
         af:4e:8e:11:0a:21:48:ac:9c:91:c6:31:aa:c6:45:a5:30:9d:
         4b:70:fd:2e:e4:7c:69:da:30:02:48:56:73:31:bd:58:03:c5:
         33:69:14:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-ams.rpki-client.org