Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/47e7cb76add5e352531a515c1fbdaad478f46722.roa
File:                     47e7cb76add5e352531a515c1fbdaad478f46722.roa (raw, json)
Hash identifier:          4tc7Xgc7tOYi23CUVLkL0ALuGR+ax6dLVUcU9HA3yPM=
Subject key identifier:   EB:96:D1:30:6D:4A:E1:48:98:6F:29:AA:5C:36:15:32:3A:5C:DF:84
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1A78D3
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/47e7cb76add5e352531a515c1fbdaad478f46722.roa
Signing time:             Thu 22 Sep 2022 20:42:07 +0000
ROA not before:           Thu 22 Sep 2022 20:41:36 +0000
ROA not after:            Sun 22 Sep 2024 20:41:36 +0000
asID:                     3790
IP address blocks:        190.241.206.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1734867 (0x1a78d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 22 20:41:36 2022 GMT
            Not After : Sep 22 20:41:36 2024 GMT
        Subject: CN=47e7cb76add5e352531a515c1fbdaad478f46722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4f:b9:cd:6b:fb:cd:70:36:0d:4a:bd:67:86:
                    4b:00:9d:ae:17:17:90:12:6f:4b:64:0b:54:88:93:
                    3e:1d:5d:ee:4a:b1:a6:ff:3b:02:bd:3c:c7:df:a1:
                    f7:ad:e2:fa:3c:3a:9e:07:fb:36:21:8c:39:c7:24:
                    8f:88:68:aa:52:26:eb:d6:d4:f8:8b:29:36:47:9d:
                    31:6c:4b:f1:9f:31:96:3d:22:c2:0d:30:6d:1f:3c:
                    c4:b9:ed:56:33:14:33:6a:86:52:91:6a:72:5a:93:
                    5e:cd:13:a6:85:21:fa:7e:5b:f0:04:6e:35:8a:5a:
                    97:99:41:a6:d8:60:77:be:25:cb:d4:e8:cc:4a:ad:
                    b4:2a:97:2c:d9:f3:47:07:da:58:4f:b7:0e:0c:1a:
                    29:66:26:7d:36:3a:ac:19:ef:79:a1:31:66:0a:8e:
                    ae:06:cc:56:f2:6f:b3:49:87:75:16:66:14:50:45:
                    52:2d:35:38:81:70:13:2b:df:94:c8:5e:48:37:af:
                    25:da:5b:34:1b:f1:c3:da:64:20:20:a2:3a:80:60:
                    fb:ae:d9:04:e9:31:29:5b:24:af:5d:f7:f2:0c:80:
                    0a:33:0f:a2:ac:32:b0:80:34:fe:54:f6:d0:18:9b:
                    5e:63:2d:9d:93:b8:14:f2:38:99:26:38:6c:db:8b:
                    47:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:96:D1:30:6D:4A:E1:48:98:6F:29:AA:5C:36:15:32:3A:5C:DF:84
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/47e7cb76add5e352531a515c1fbdaad478f46722.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.241.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:66:9d:cb:43:9f:e1:37:5b:55:38:32:e7:19:4a:12:4b:6a:
         56:24:96:08:ba:bc:65:9b:38:88:dd:19:03:2b:7c:44:1c:5f:
         1c:35:7f:b7:62:19:cf:0e:be:b9:8a:1f:36:ad:35:18:77:09:
         ca:86:4f:ad:3f:d6:84:69:c8:b1:13:c1:22:91:4a:98:f4:5f:
         eb:6b:79:8e:9d:f0:48:9c:63:c5:d6:59:15:89:9c:e0:a8:00:
         69:2e:de:b0:23:c9:74:b4:e7:3a:1d:e0:f4:bf:84:0a:1f:48:
         08:4a:46:93:dd:79:b3:3f:06:f3:c1:be:11:7e:f2:81:e6:ad:
         b2:ee:05:32:a4:e8:48:a9:89:36:6c:c8:a1:49:a4:38:29:d8:
         ed:a2:8c:fb:c3:e7:13:73:b3:01:73:fc:17:d0:83:c2:c3:95:
         1c:07:d3:79:44:b3:36:bb:46:d1:09:fd:e4:16:3b:97:40:40:
         52:23:e7:12:c4:95:23:0d:2d:50:57:07:98:b9:55:22:fe:0f:
         e6:2d:00:49:e5:80:56:a0:11:e7:d2:62:8a:e2:62:96:14:66:
         9d:a4:36:66:92:9d:dc:09:5b:80:c5:fa:2c:c7:09:c2:3b:6a:
         d2:f2:7d:5f:45:ad:35:ac:aa:1b:c9:cb:37:1b:da:c1:bf:e9:
         79:8f:40:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-fra.rpki-client.org