Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/4aee158ff9a8a6e2171d8ee8c72760cd9ed40f92.roa
File:                     4aee158ff9a8a6e2171d8ee8c72760cd9ed40f92.roa (raw, json)
Hash identifier:          /LxOubM1Q6Eh4qIYVNyyoq8M8JStvmr9Lez4mvOJbxU=
Subject key identifier:   C5:93:69:A3:BE:C7:0B:B7:72:28:96:19:D2:B1:1B:DB:AF:38:18:BC
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1C062D
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/4aee158ff9a8a6e2171d8ee8c72760cd9ed40f92.roa
Signing time:             Wed 28 Sep 2022 15:46:19 +0000
ROA not before:           Wed 28 Sep 2022 15:45:18 +0000
ROA not after:            Sat 28 Sep 2024 15:45:18 +0000
asID:                     11830
IP address blocks:        190.10.108.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1836589 (0x1c062d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 28 15:45:18 2022 GMT
            Not After : Sep 28 15:45:18 2024 GMT
        Subject: CN=4aee158ff9a8a6e2171d8ee8c72760cd9ed40f92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fa:90:29:60:03:49:36:9e:af:19:7b:83:32:
                    da:14:54:26:ae:da:14:a5:69:d0:df:33:7c:b6:25:
                    6b:9e:70:c7:40:2b:97:03:d5:83:75:43:2c:90:77:
                    0e:3a:c1:eb:d3:a7:95:8c:52:79:c2:3e:05:2d:0f:
                    7f:1c:6b:0b:d1:3c:38:2e:63:cb:d4:cf:fa:99:a6:
                    45:0b:b8:c2:25:2b:a5:b7:49:ff:52:e2:7b:28:58:
                    cc:9a:c5:0d:92:17:51:46:17:cc:23:f8:e1:7f:c5:
                    3e:63:99:01:81:8c:50:80:34:4e:cf:c0:6f:5d:3c:
                    b8:c0:db:10:80:5d:db:fe:dc:64:24:ca:8f:9e:49:
                    0f:bf:f2:50:c6:e3:7c:d5:5b:e6:79:2a:c8:c8:c5:
                    86:ee:55:40:c6:22:e1:86:62:48:20:e9:ab:57:68:
                    bb:92:3a:2c:5b:9b:5c:df:97:70:97:de:5b:97:00:
                    b3:3a:d2:d2:ef:37:f5:53:dc:7d:0a:28:50:32:4d:
                    13:be:2c:b4:a0:a9:e8:a5:b5:40:c0:f1:ac:b5:e0:
                    43:a0:70:29:0e:7b:b7:8a:82:95:bb:51:96:f9:f3:
                    6b:2e:eb:b5:34:c8:ad:df:11:df:68:c7:88:f7:32:
                    be:b6:ed:66:aa:9e:ae:9f:79:06:58:40:9a:73:92:
                    7d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:93:69:A3:BE:C7:0B:B7:72:28:96:19:D2:B1:1B:DB:AF:38:18:BC
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/4aee158ff9a8a6e2171d8ee8c72760cd9ed40f92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:88:77:a5:56:17:03:60:b0:56:d0:72:5c:1c:c9:18:20:9f:
         b4:95:37:b0:95:5e:c8:92:76:b9:33:11:9b:8b:db:cb:2d:ac:
         45:c7:94:80:53:2e:2d:93:e8:b7:36:22:0f:4e:38:aa:48:c4:
         62:70:f7:cd:81:aa:c5:b9:de:e2:60:7c:fa:55:04:35:95:6b:
         22:72:37:bb:c1:f8:b6:4c:f8:7d:96:55:c0:e6:61:26:6e:ab:
         80:b1:72:7e:95:3d:08:4c:57:c6:e5:79:4e:eb:34:6a:27:d1:
         d5:96:77:dc:dc:04:46:84:50:72:d9:b2:47:32:be:0f:56:5e:
         4b:2c:ef:0f:df:4b:31:ad:67:0e:0e:a8:a0:d9:62:88:7a:a0:
         5b:11:7e:25:a0:84:96:0c:c4:3c:58:ca:da:64:f2:38:11:99:
         62:b8:63:05:6c:0c:2f:d2:46:c4:c4:04:54:d9:c1:92:fe:89:
         2d:a6:50:6a:60:a7:f2:7c:39:e4:87:db:23:88:e9:41:65:95:
         15:d6:58:20:bd:cd:ca:84:a4:ce:d9:d6:69:0f:f5:74:dc:a5:
         fd:64:4e:f7:e8:8c:1c:e2:1b:ee:fe:7a:f1:73:11:e3:18:e2:
         8b:54:53:88:8b:fb:58:5c:1b:dc:b2:b1:0e:21:8c:36:13:9a:
         41:4f:63:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-fra.rpki-client.org