Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/46eb1a5de4848d7062287c314eccecf5bfd74652.roa
File:                     46eb1a5de4848d7062287c314eccecf5bfd74652.roa (raw, json)
Hash identifier:          TMVcvhgb3aBs7Itns1BmzpqxPI7Ei/MK0/7XPdyFurU=
Subject key identifier:   AC:69:66:27:65:8B:C8:B5:C0:5D:B0:0E:6D:4F:A9:F2:B2:7B:FD:06
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1B9D20
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/46eb1a5de4848d7062287c314eccecf5bfd74652.roa
Signing time:             Tue 27 Sep 2022 22:35:34 +0000
ROA not before:           Tue 27 Sep 2022 22:34:52 +0000
ROA not after:            Fri 27 Sep 2024 22:34:52 +0000
asID:                     11830
IP address blocks:        190.10.87.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1809696 (0x1b9d20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 27 22:34:52 2022 GMT
            Not After : Sep 27 22:34:52 2024 GMT
        Subject: CN=46eb1a5de4848d7062287c314eccecf5bfd74652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:81:bd:79:7f:af:8d:13:95:04:21:32:6e:5c:
                    75:d5:fa:65:a5:94:43:71:8c:a6:80:e3:78:00:4f:
                    c1:c0:be:02:8c:ce:9e:04:db:ad:c6:1f:a1:c0:81:
                    ed:59:28:3d:5b:64:4f:a0:81:36:43:27:79:99:a3:
                    e3:d3:78:bb:00:5b:ac:31:7e:a8:5a:7d:fa:f5:4a:
                    95:a1:21:0d:e1:6f:d2:78:10:89:f4:09:7e:b0:f9:
                    af:96:2f:2b:53:05:49:4c:3f:61:ad:12:70:41:88:
                    89:2e:31:87:5b:5c:9b:2a:c3:d2:a5:2a:32:de:1b:
                    a5:08:c9:26:1f:c8:10:92:65:0d:a9:4e:fb:06:c9:
                    f9:81:97:8d:4f:64:c6:ef:4c:a7:a1:ca:1b:fe:43:
                    3f:6b:11:54:ec:6a:a8:72:94:60:bd:08:82:a0:3b:
                    21:82:6a:52:96:2a:19:ed:93:78:65:95:e0:91:dd:
                    31:78:71:48:44:15:90:65:3b:a8:71:23:f7:48:d1:
                    3b:be:cf:76:4d:33:8a:96:a7:04:82:d4:f8:0d:e1:
                    5e:62:18:4f:63:2d:f6:dd:91:a1:8f:db:d1:76:99:
                    0d:2d:00:56:71:59:dc:d5:72:7a:0c:e3:9d:a9:c6:
                    fe:f1:96:92:d6:7e:89:b7:70:e2:18:21:67:76:a5:
                    4c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:69:66:27:65:8B:C8:B5:C0:5D:B0:0E:6D:4F:A9:F2:B2:7B:FD:06
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/46eb1a5de4848d7062287c314eccecf5bfd74652.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:1e:c8:f8:26:e2:27:74:6c:0f:c4:95:33:1e:2d:1e:90:de:
         83:17:b1:91:23:8a:5e:68:26:f0:11:ac:d5:43:ee:9f:70:bb:
         65:c4:38:32:f7:20:db:6a:b7:57:0a:d4:70:49:43:7e:f1:fa:
         47:a6:18:b3:3e:27:a4:ff:d9:56:8f:4c:d4:b6:69:05:8a:cf:
         66:94:cc:92:8e:35:37:44:8c:2c:91:97:98:34:4a:2e:7c:b2:
         47:d6:5f:61:68:7f:7c:51:65:1c:4c:77:2b:eb:e5:eb:f7:5d:
         9c:79:c0:25:a4:36:8a:dc:43:82:26:80:e9:11:b5:b4:89:64:
         12:95:94:60:a8:22:ba:6d:ef:11:af:0d:60:b8:83:78:71:dd:
         5c:e9:2a:eb:f8:03:75:ee:52:ff:73:a2:f8:b4:8b:48:73:f0:
         14:6a:ff:c6:f2:32:94:9d:28:8d:68:d6:cf:bb:b6:69:ea:0c:
         1b:07:f8:5c:9d:35:d5:5a:ae:2e:47:e7:10:8a:c9:e0:af:51:
         8a:8d:e7:9e:4c:6f:f4:c5:e3:cd:4b:7e:89:11:4f:90:ca:15:
         f3:73:9a:95:a9:c0:73:53:81:ec:94:e6:d6:57:a1:4a:f3:d7:
         c1:37:59:89:6f:d6:df:7a:c3:45:b7:84:7e:de:7b:70:14:71:
         55:d8:24:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-fra.rpki-client.org