Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/496088f583efa9108826413eef191a73e2bf1381.roa
File:                     496088f583efa9108826413eef191a73e2bf1381.roa (raw, json)
Hash identifier:          fA7a9vXb136AOPl6/rElAafqwyzTrrPddW/1TmKoL6E=
Subject key identifier:   1F:7E:6B:84:76:D9:04:D1:34:FA:13:DE:5A:81:A2:44:78:A5:2A:C1
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1ACB76
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/496088f583efa9108826413eef191a73e2bf1381.roa
Signing time:             Thu 22 Sep 2022 22:56:45 +0000
ROA not before:           Thu 22 Sep 2022 22:52:23 +0000
ROA not after:            Sun 22 Sep 2024 22:52:23 +0000
asID:                     11830
IP address blocks:        190.10.18.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1756022 (0x1acb76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 22 22:52:23 2022 GMT
            Not After : Sep 22 22:52:23 2024 GMT
        Subject: CN=496088f583efa9108826413eef191a73e2bf1381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5f:8c:48:aa:ac:aa:1c:f0:b7:aa:55:44:35:
                    25:d5:de:ea:9e:cc:f1:16:13:20:26:30:a3:f5:f4:
                    4a:94:1a:fd:28:91:2f:8d:7d:27:f2:7d:ae:3a:63:
                    be:b7:42:2a:90:b8:50:ef:a1:bc:cc:8b:94:9a:c9:
                    60:a9:48:e4:d5:a7:f3:9e:f2:24:e9:fa:6e:72:b7:
                    b8:e0:1b:f5:7e:c6:7c:58:3e:82:53:83:e5:00:9f:
                    28:ee:bd:a4:31:6d:cf:50:8b:02:02:1b:5f:c5:9d:
                    3c:84:c0:bb:33:5d:2e:7b:05:d9:b5:5f:3c:8a:4f:
                    b6:42:a5:b2:19:50:80:89:49:48:56:89:5a:e4:b4:
                    3d:2d:46:fb:d2:02:60:f0:78:ea:2c:7d:a9:c5:fb:
                    4f:c5:e1:86:71:b4:8d:3c:db:24:9c:d1:69:0a:d3:
                    6c:91:29:21:8a:d8:d6:8c:6d:71:50:13:61:b6:cb:
                    58:35:1f:5c:d7:b4:a6:76:8d:e5:d2:41:fd:bd:2f:
                    3e:53:4f:a3:59:59:0f:e4:fd:c8:65:2e:f7:bd:9a:
                    40:06:20:17:5b:43:a7:00:d5:43:e6:47:27:4e:46:
                    d3:b6:2e:fc:45:47:c7:2f:6a:5f:77:f2:57:2a:a7:
                    7e:2a:a2:94:14:68:f1:b0:92:5d:ba:29:83:aa:8e:
                    7c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:7E:6B:84:76:D9:04:D1:34:FA:13:DE:5A:81:A2:44:78:A5:2A:C1
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/496088f583efa9108826413eef191a73e2bf1381.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:92:ed:65:9a:f5:1b:66:9b:e8:b1:a2:e4:5d:a8:84:50:35:
         68:b1:af:b6:b2:23:3d:49:82:22:c9:72:71:c0:c3:4f:4a:c7:
         c5:65:70:a4:bc:cf:3b:cd:e9:19:1f:b6:5b:67:e0:1b:8a:d7:
         6a:37:64:47:4e:25:51:84:33:0e:79:33:77:d6:62:5a:e4:2d:
         5e:79:9a:50:54:94:18:2f:46:90:f4:28:fa:42:77:77:05:b1:
         86:a3:5b:72:51:d9:81:eb:fb:c5:30:af:36:20:5c:51:9c:1b:
         b8:3f:34:ce:e1:cb:e8:a6:c4:3a:95:01:b6:40:c9:ed:cc:99:
         36:9b:c0:49:e0:3d:dc:2f:8f:15:e5:6e:2b:cc:00:89:7c:be:
         ec:fa:42:3d:4f:1f:12:b0:85:b0:d7:19:a8:9d:f6:ec:3b:55:
         08:c1:1e:70:3b:29:8c:8a:2d:b5:cf:fd:66:fd:21:40:ef:96:
         17:3e:c9:2f:2a:ac:80:ac:a4:16:5d:41:ca:a4:f0:21:18:2d:
         33:5c:95:e4:68:c8:05:6c:b2:58:a8:f6:c3:67:f8:be:b5:a5:
         51:6f:76:7e:26:ba:23:a1:89:a8:80:3d:b7:89:24:9e:19:60:
         12:bd:6e:46:89:c2:c3:1b:28:e9:22:70:9f:d7:5d:9a:d0:e1:
         f0:1f:8f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-ams.rpki-client.org