Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/425f805ff9bc316533047e3f9908add3c316fe66.roa
File:                     425f805ff9bc316533047e3f9908add3c316fe66.roa (raw, json)
Hash identifier:          loHb4cUHGg4YVBalDwgakShMD1Q2zl3aHUTm3RLmXYc=
Subject key identifier:   98:0E:CE:6E:E5:D6:A5:EE:C6:05:44:5F:10:4B:CC:44:E5:C8:A5:5E
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1BDF7C
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/425f805ff9bc316533047e3f9908add3c316fe66.roa
Signing time:             Tue 27 Sep 2022 22:54:26 +0000
ROA not before:           Tue 27 Sep 2022 22:53:34 +0000
ROA not after:            Fri 27 Sep 2024 22:53:34 +0000
asID:                     11830
IP address blocks:        190.10.103.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1826684 (0x1bdf7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 27 22:53:34 2022 GMT
            Not After : Sep 27 22:53:34 2024 GMT
        Subject: CN=425f805ff9bc316533047e3f9908add3c316fe66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:50:75:56:00:51:b5:42:e1:97:68:5d:ae:8b:
                    2c:b2:d7:07:30:6a:0f:52:40:0b:3d:67:90:8e:db:
                    c0:e6:5d:8d:8b:ca:af:db:81:ef:6e:d5:47:e1:cb:
                    4f:98:09:a8:f9:0e:16:f5:8f:56:5b:a4:30:a4:db:
                    4a:d5:50:bf:2e:14:92:8c:37:6c:85:d8:40:6a:73:
                    27:45:d8:41:19:c4:cb:5c:80:de:07:55:3f:54:c3:
                    8e:68:69:b6:97:cb:2e:76:06:e8:4c:b0:31:64:63:
                    ce:ae:7f:b7:65:c3:d7:2d:50:a8:a8:e4:de:96:5c:
                    16:6b:d3:68:06:9e:e2:dc:22:92:56:98:75:14:07:
                    fd:97:46:73:66:63:26:82:d2:99:f3:5e:5b:8b:30:
                    9a:5e:87:c6:da:e5:5f:89:7e:ab:7e:53:a9:8c:48:
                    7b:04:8a:a7:f5:ab:ef:8e:3f:fa:8c:f9:5e:0b:86:
                    53:6a:8a:a0:a5:db:21:85:29:40:45:38:3e:70:c7:
                    4f:03:f6:fe:33:c2:41:ce:43:c8:4a:39:91:f6:db:
                    74:f2:b5:86:e7:c7:c0:13:4b:5d:bf:9d:b2:7b:dc:
                    ad:25:06:1b:54:8e:96:d6:d6:0c:1d:ca:23:dc:25:
                    bd:bd:06:87:a0:f7:fc:22:7e:eb:af:b3:2e:dd:cf:
                    dc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:0E:CE:6E:E5:D6:A5:EE:C6:05:44:5F:10:4B:CC:44:E5:C8:A5:5E
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/425f805ff9bc316533047e3f9908add3c316fe66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:3c:12:24:3b:7b:7c:b2:dd:6d:9a:1c:29:47:dc:41:49:ea:
         be:63:4c:8d:73:a4:30:d7:b9:81:60:f7:d3:2f:03:d8:b3:b9:
         e7:6c:11:68:4b:f8:51:58:20:23:f0:49:62:5f:65:47:80:9b:
         0e:28:ea:61:46:17:1d:17:41:74:31:1a:34:2a:64:14:96:37:
         17:b6:50:5c:ac:eb:4b:1e:ac:62:f9:0d:75:f2:02:ca:f8:f5:
         51:96:e7:3c:52:ae:6b:7a:87:09:80:17:e2:6a:9a:60:7a:71:
         4b:51:1e:d8:39:ca:ad:87:0b:be:d4:1c:34:00:29:cc:79:86:
         1b:70:d7:95:da:66:10:d9:94:7e:dc:8d:14:ad:3c:bf:92:c2:
         02:ff:3a:1f:02:6e:ab:0e:a3:c0:2a:ed:33:11:2f:d2:c8:ab:
         50:b1:42:fb:f4:bb:84:ee:eb:14:35:60:28:f7:a4:4d:7f:b2:
         75:9b:f0:60:d6:29:b9:85:df:70:eb:89:4b:47:e8:72:7e:11:
         f4:1b:76:05:3f:2f:48:2c:c1:6f:ff:cc:64:49:eb:fb:95:be:
         c7:7a:3e:aa:b6:84:ff:08:2c:9c:47:e7:4c:2e:6d:17:28:5b:
         d4:6d:dc:29:7e:39:4e:35:9e:b2:c2:78:97:49:90:99:36:26:
         0a:a2:93:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-ams.rpki-client.org