Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/4d0a573f2c08791423bd99159a628a871107c2d9.roa
File:                     4d0a573f2c08791423bd99159a628a871107c2d9.roa (raw, json)
Hash identifier:          O32HJKuOHF3kSRAJ/KBZga67RiVmv9LCMbhIVew1FxY=
Subject key identifier:   A1:5F:16:DC:C4:1B:51:C4:A5:78:59:95:CD:67:35:43:38:99:A5:14
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1B8ABD
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/4d0a573f2c08791423bd99159a628a871107c2d9.roa
Signing time:             Tue 27 Sep 2022 22:29:55 +0000
ROA not before:           Tue 27 Sep 2022 22:29:00 +0000
ROA not after:            Fri 27 Sep 2024 22:29:00 +0000
asID:                     11830
IP address blocks:        190.10.82.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1804989 (0x1b8abd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 27 22:29:00 2022 GMT
            Not After : Sep 27 22:29:00 2024 GMT
        Subject: CN=4d0a573f2c08791423bd99159a628a871107c2d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:62:d4:82:a2:8d:cc:98:e2:c8:64:1b:37:1f:
                    85:85:94:8e:fe:0f:0e:44:3e:c7:42:1a:ee:30:7b:
                    f3:4d:bc:b2:fc:4a:f9:3b:ae:10:7d:7f:bb:41:50:
                    59:89:d1:cf:9c:23:ca:39:31:18:95:73:69:86:14:
                    a3:e0:36:21:c2:10:d0:83:98:75:3f:c4:e6:ed:2f:
                    c4:5d:21:cf:b0:3a:42:5a:e5:f3:6d:a0:70:89:88:
                    36:a6:5e:fc:2e:42:d4:84:1b:c4:d0:98:67:e7:0f:
                    33:81:bd:c7:95:07:53:ee:e5:82:56:6c:6d:7a:79:
                    95:11:75:65:02:d4:00:5e:88:17:e3:9f:6f:e4:1b:
                    9d:a3:f2:d4:34:66:bc:d2:8a:37:74:70:54:dc:e2:
                    67:bc:81:15:37:b7:b6:ca:b2:ab:38:30:cf:0f:f1:
                    84:34:d9:48:5e:32:df:56:5f:80:3d:93:5b:8e:0f:
                    33:29:4f:21:82:88:b8:d3:50:70:2c:12:3d:96:a8:
                    8e:c8:ee:1e:bf:b2:6d:75:06:1b:cd:65:5f:a6:e4:
                    6d:21:3d:55:3e:bb:9c:cc:bf:de:cd:f6:04:7d:c2:
                    d1:72:12:f4:77:b8:64:3b:fe:38:c9:8e:f5:a1:90:
                    e5:b4:48:e9:87:b3:c2:1a:e3:cf:a6:42:3f:ad:64:
                    51:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:5F:16:DC:C4:1B:51:C4:A5:78:59:95:CD:67:35:43:38:99:A5:14
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/4d0a573f2c08791423bd99159a628a871107c2d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:c8:06:ce:b8:de:7f:f5:91:df:e7:b5:fd:ee:76:b7:12:f1:
         18:02:66:86:0a:75:fc:37:66:b3:f0:f9:06:d1:41:d7:d8:8d:
         0f:2d:df:72:b8:4b:bd:8e:30:bb:20:51:91:4b:b9:f7:f0:d9:
         c6:81:dc:14:54:9b:4d:98:2b:71:4b:bc:2e:53:57:50:ed:f0:
         31:c7:6d:63:81:38:af:f2:7b:a6:94:a4:51:8a:e2:fb:37:8a:
         da:1d:8c:3a:04:83:96:dd:a9:0a:af:a0:ff:c9:e7:38:c7:79:
         29:17:5c:c2:fe:64:e8:c8:5b:51:36:df:fa:f6:c3:73:fd:e4:
         57:c4:b3:df:9f:3d:d8:41:c0:95:5a:bf:05:4f:7c:d7:cb:59:
         17:4c:da:2f:1d:74:15:ce:02:da:92:56:dd:6d:e6:a4:a3:98:
         32:5c:5a:93:a0:7c:c5:72:1d:fa:f7:4e:1b:69:92:5b:32:74:
         05:b8:12:38:ca:7a:3a:a2:bb:d1:25:e8:b6:85:ee:90:c8:27:
         c8:5e:92:03:4d:59:5e:e7:81:8f:d6:73:42:c5:48:53:79:74:
         b6:92:2d:89:d2:bd:17:3a:cd:e4:f4:61:db:29:0c:bc:45:94:
         d6:93:e6:d6:7e:59:74:06:aa:32:52:8a:78:8f:50:f8:b8:5a:
         b1:c7:66:01
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDG4q9MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZj
M2YzY2JmOTcxYjMxZDRhMGZiNDhhMDYzZWQ4NmYwYjU5NGFjM2UwHhcNMjIwOTI3
MjIyOTAwWhcNMjQwOTI3MjIyOTAwWjAzMTEwLwYDVQQDEyg0ZDBhNTczZjJjMDg3
OTE0MjNiZDk5MTU5YTYyOGE4NzExMDdjMmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmGLUgqKNzJjiyGQbNx+FhZSO/g8ORD7HQhruMHvzTbyy/Er5
O64QfX+7QVBZidHPnCPKOTEYlXNphhSj4DYhwhDQg5h1P8Tm7S/EXSHPsDpCWuXz
baBwiYg2pl78LkLUhBvE0Jhn5w8zgb3HlQdT7uWCVmxtenmVEXVlAtQAXogX459v
5Budo/LUNGa80oo3dHBU3OJnvIEVN7e2yrKrODDPD/GENNlIXjLfVl+APZNbjg8z
KU8hgoi401BwLBI9lqiOyO4ev7JtdQYbzWVfpuRtIT1VPruczL/ezfYEfcLRchL0
d7hkO/44yY71oZDltEjph7PCGuPPpkI/rWRRnQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFKFfFtzEG1HEpXhZlc1nNUM4maUUMB8GA1UdIwQYMBaAFNgLQZU9gBToGKPM
I8FMT5TRqMEbMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmMzZjNj
YmY5NzFiMzFkNGEwZmI0OGEwNjNlZDg2ZjBiNTk0YWMzZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmE3ODYyZTgtZDJkYi00OGVhLWI4MDktZDRiOTcw
ZDFkODkyLzRkMGE1NzNmMmMwODc5MTQyM2JkOTkxNTlhNjI4YTg3MTEwN2MyZDku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82YTc4NjJlOC1kMmRiLTQ4ZWEtYjgwOS1kNGI5
NzBkMWQ4OTIvNmMzZjNjYmY5NzFiMzFkNGEwZmI0OGEwNjNlZDg2ZjBiNTk0YWMz
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL4KUjANBgkqhkiG9w0BAQsFAAOCAQEAFsgGzrjef/WR3+e1
/e52txLxGAJmhgp1/Ddms/D5BtFB19iNDy3fcrhLvY4wuyBRkUu59/DZxoHcFFSb
TZgrcUu8LlNXUO3wMcdtY4E4r/J7ppSkUYri+zeK2h2MOgSDlt2pCq+g/8nnOMd5
KRdcwv5k6MhbUTbf+vbDc/3kV8Sz35892EHAlVq/BU9818tZF0zaLx10Fc4C2pJW
3W3mpKOYMlxak6B8xXId+vdOG2mSWzJ0BbgSOMp6OqK70SXotoXukMgnyF6SA01Z
XueBj9ZzQsVIU3l0tpItidK9FzrN5PRh2ykMvEWU1pPm1n5ZdAaqMlKKeI9Q+Lha
scdmAQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-ams.rpki-client.org