Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/40203d0406d5034eed9daeed08e50ff0c6fb1d53.roa
File:                     40203d0406d5034eed9daeed08e50ff0c6fb1d53.roa (raw, json)
Hash identifier:          2gsKG2vZxQ0zuA+BNtNjMI7jGyxQgVW9NZsZunxAtT4=
Subject key identifier:   A7:B4:1D:60:BE:15:BC:C4:97:B0:0A:76:56:57:DB:96:12:79:19:81
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1C260B
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/40203d0406d5034eed9daeed08e50ff0c6fb1d53.roa
Signing time:             Wed 28 Sep 2022 15:55:51 +0000
ROA not before:           Wed 28 Sep 2022 15:55:04 +0000
ROA not after:            Sat 28 Sep 2024 15:55:04 +0000
asID:                     11830
IP address blocks:        190.10.117.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1844747 (0x1c260b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 28 15:55:04 2022 GMT
            Not After : Sep 28 15:55:04 2024 GMT
        Subject: CN=40203d0406d5034eed9daeed08e50ff0c6fb1d53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a1:f2:a6:59:7f:fc:0d:0e:af:98:8b:d3:3e:
                    98:11:02:ab:bd:9c:47:8c:8b:d8:30:7d:c9:f6:6d:
                    b4:70:8e:f7:76:d6:2f:6b:f4:2d:43:cd:10:ba:4b:
                    0d:ab:92:71:f7:0f:b7:1e:c0:01:a3:f0:a4:49:fe:
                    63:cb:b4:c6:34:b6:25:79:0c:c4:b9:d7:74:2d:51:
                    75:a0:3e:7d:98:a3:df:4b:86:ee:06:c6:64:bb:9f:
                    fb:24:f5:53:67:56:9e:c7:18:f2:98:5a:1a:46:10:
                    ca:94:04:26:cb:40:45:86:82:8b:5f:1d:50:91:56:
                    f5:e8:14:64:93:bd:34:b6:94:3b:73:e9:a7:e4:99:
                    d7:42:95:7b:17:43:a0:6a:27:01:64:51:18:fc:04:
                    9b:f7:b8:79:3b:07:d8:28:09:2a:c0:72:19:cf:cf:
                    2d:4c:ff:1d:ab:01:14:1d:ba:db:0c:4e:03:a2:24:
                    a0:26:62:b7:f2:1e:01:91:ef:89:9f:0c:bc:34:c4:
                    1b:bc:05:c8:b6:4d:09:3e:44:e4:ee:b8:45:c5:63:
                    66:43:d2:5f:80:17:20:b7:1f:90:7f:42:a9:3b:5b:
                    86:82:c7:ad:81:79:e3:6b:77:47:a2:ef:2c:d6:b4:
                    75:11:35:4b:c5:b1:40:e2:8e:e7:3e:c6:c2:16:23:
                    8b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:B4:1D:60:BE:15:BC:C4:97:B0:0A:76:56:57:DB:96:12:79:19:81
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/40203d0406d5034eed9daeed08e50ff0c6fb1d53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:3b:fb:bb:3b:71:38:ae:f2:65:6c:16:b0:ef:c4:80:a9:f3:
         67:76:2a:67:34:51:66:1e:c8:6f:75:ea:a5:85:ed:83:61:57:
         2f:fb:02:2d:b0:73:47:a3:62:a3:73:82:96:4f:71:50:ec:05:
         a8:2f:e1:d7:07:dc:4e:dd:83:64:d4:1b:cb:0a:7b:b8:3f:5a:
         3a:51:c9:3d:bd:9f:55:d3:06:a6:65:a1:d9:ed:8c:af:57:02:
         6c:57:15:70:7d:41:57:ef:1e:a0:59:c3:43:3d:db:26:e0:6b:
         bd:7a:68:05:9e:2e:63:0f:fd:5b:a9:0e:27:01:98:5c:89:fb:
         76:09:ed:4d:37:1c:7f:b3:1b:5b:bc:da:62:83:b6:27:c2:e9:
         d5:67:f4:64:8c:0d:0b:89:fa:ab:4d:b7:a0:00:4b:9e:d9:c6:
         86:1e:aa:8a:0d:21:df:e3:18:49:83:31:d5:83:6f:dd:a8:b2:
         23:4d:ac:7f:ff:79:31:7a:e0:1a:7a:98:cc:62:67:dc:a9:12:
         4c:4d:3f:f4:ce:21:ac:86:91:ad:df:80:81:e9:10:a8:18:27:
         03:e5:dc:8d:61:dc:09:de:90:4b:86:ca:13:b8:ce:f1:88:7f:
         93:0a:5b:4d:10:22:e2:9d:b9:ab:ae:06:b5:34:b6:c2:33:4a:
         52:50:d8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-ams.rpki-client.org