Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/46383ebca11aaae93a63249cf4a9bc32b00b9242.roa
File:                     46383ebca11aaae93a63249cf4a9bc32b00b9242.roa (raw, json)
Hash identifier:          GzmyOOERE+OVjnoNx6Zgu+X9F1W+eb5lqEU66v8gbTU=
Subject key identifier:   00:B1:E1:10:8D:90:53:5B:2C:17:C1:00:9D:49:0D:D3:BB:2A:47:53
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1A2942
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/46383ebca11aaae93a63249cf4a9bc32b00b9242.roa
Signing time:             Thu 22 Sep 2022 20:25:02 +0000
ROA not before:           Thu 22 Sep 2022 20:24:23 +0000
ROA not after:            Sun 22 Sep 2024 20:24:23 +0000
asID:                     3790
IP address blocks:        190.241.96.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1714498 (0x1a2942)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 22 20:24:23 2022 GMT
            Not After : Sep 22 20:24:23 2024 GMT
        Subject: CN=46383ebca11aaae93a63249cf4a9bc32b00b9242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:dd:ff:b1:d1:8a:16:2b:ba:c0:78:b6:21:d4:
                    5a:02:b0:6b:76:18:fd:1e:dc:70:6c:8f:20:a6:4c:
                    85:54:95:70:0a:e7:0e:2c:b8:6f:4f:b5:9d:ec:01:
                    80:05:ec:4c:44:11:52:d6:5b:da:8d:7f:af:91:d6:
                    ab:c7:63:81:00:6d:2c:bc:f3:3c:ae:64:e9:59:b5:
                    48:e2:63:ee:8f:91:70:b9:4d:af:f3:8c:bb:06:c1:
                    a1:17:c3:87:41:ff:c0:d3:e0:0f:87:a4:26:00:d0:
                    ad:ff:3c:eb:d8:cc:a6:55:97:1e:68:7d:35:3d:8a:
                    5a:ef:7e:bb:fe:86:37:00:73:40:74:de:a6:66:76:
                    56:9f:d2:cf:ea:ae:4a:22:b6:73:a0:8a:2c:ce:4a:
                    f0:2f:28:ac:e9:a3:91:e8:65:ab:69:cb:dd:0b:9f:
                    d1:bb:48:06:4d:82:b8:8d:b8:73:3a:3b:fa:5b:73:
                    fe:71:90:a8:49:1f:a4:bb:a2:0f:83:95:15:43:9f:
                    e7:45:75:97:05:d1:e8:22:b0:c5:99:a7:cd:fe:9e:
                    3f:c9:cc:44:72:12:3e:62:c8:82:cd:bf:29:79:21:
                    d1:e2:2d:89:6e:20:d8:97:7c:ce:3a:c7:0d:19:9f:
                    26:f2:0c:d3:46:cd:e2:47:cb:f6:ae:1b:7e:87:c6:
                    2f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B1:E1:10:8D:90:53:5B:2C:17:C1:00:9D:49:0D:D3:BB:2A:47:53
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/46383ebca11aaae93a63249cf4a9bc32b00b9242.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.241.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7e:f1:c4:4c:85:9a:d9:78:fd:3d:91:70:4a:68:27:a6:d5:54:
         89:c8:b5:93:d5:dd:68:66:dc:25:e7:9a:a5:55:af:46:dc:1f:
         e7:02:7c:af:6f:6c:3d:fa:c0:6e:90:87:3c:80:ec:fe:1e:9c:
         af:97:ed:bd:e3:1c:8b:15:0f:cb:85:dc:dc:6f:46:2a:19:4d:
         55:20:dc:e0:dc:d6:3f:0d:99:87:e0:e7:61:d2:73:80:06:e4:
         67:92:6b:48:61:87:91:5b:b4:53:43:6d:69:ba:bc:c6:49:dc:
         26:ab:72:34:b4:09:44:e0:46:f6:c7:a0:0f:ae:aa:27:80:69:
         59:89:88:bc:d7:a0:17:09:79:29:c3:7b:b3:f6:32:b7:a0:62:
         1b:9a:6f:55:d1:2d:9c:94:02:ea:8c:73:d9:e3:82:8d:06:c2:
         e0:32:dc:bf:ac:31:84:0f:f8:02:6e:7d:47:c9:3a:2b:fd:41:
         4b:aa:ba:71:71:3a:f2:b7:c6:25:fc:76:cf:c1:b8:d3:e8:c9:
         49:2e:b0:36:40:3f:05:61:34:22:01:42:34:6b:98:99:d2:3c:
         12:35:e8:94:9b:7b:62:08:16:7e:c0:5b:62:5d:71:ca:f8:50:
         fa:bb:0e:f7:3a:50:0f:4d:a2:ba:63:4f:bd:53:27:52:30:58:
         b0:39:86:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-fra.rpki-client.org