Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/4f733d4f7d41ed2efb2255089d129e948249251c.roa
File:                     4f733d4f7d41ed2efb2255089d129e948249251c.roa (raw, json)
Hash identifier:          /uPPvNLDWAHMm4Quw+BcmKSKlKPhRdhFg4p26LUL2VA=
Subject key identifier:   A7:3D:32:B6:21:4E:4D:C3:7C:53:D2:AD:40:75:B6:A0:37:CA:39:E3
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1CFC89
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/4f733d4f7d41ed2efb2255089d129e948249251c.roa
Signing time:             Wed 28 Sep 2022 17:14:40 +0000
ROA not before:           Wed 28 Sep 2022 17:13:06 +0000
ROA not after:            Sat 28 Sep 2024 17:13:06 +0000
asID:                     11830
IP address blocks:        196.40.73.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1899657 (0x1cfc89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 28 17:13:06 2022 GMT
            Not After : Sep 28 17:13:06 2024 GMT
        Subject: CN=4f733d4f7d41ed2efb2255089d129e948249251c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f9:34:f6:8e:08:0c:a0:97:92:27:8f:5d:b9:
                    3e:94:7f:f1:ad:98:7f:fe:62:8a:72:32:4b:e1:a6:
                    e8:4f:04:d2:55:c3:54:3f:33:27:7b:24:25:28:dd:
                    0f:51:23:2a:22:4f:22:c6:1f:57:7f:8a:03:f1:d5:
                    5f:11:78:70:45:9d:78:ec:29:34:b8:11:d2:99:a4:
                    44:86:fa:44:af:6c:03:d4:aa:f0:3c:11:ec:a6:b2:
                    7c:de:38:3f:25:8f:bc:a3:4f:97:26:41:fd:ca:75:
                    2e:ab:63:06:40:87:c9:cf:cd:8c:c5:9c:26:3e:c4:
                    1e:5e:2a:14:db:7a:4d:3c:a8:d4:aa:de:ef:3e:53:
                    6b:46:2b:1c:c0:52:6e:a2:76:fc:eb:ed:1a:15:8c:
                    77:75:3a:1e:73:39:96:7a:76:e0:54:0d:89:4a:b5:
                    96:fa:0a:c8:e3:a4:ae:04:6d:64:e2:9e:75:e3:86:
                    58:dc:58:c0:a4:0c:f6:00:3d:99:91:88:8d:d0:bb:
                    95:e7:48:b0:01:64:7d:c4:88:a9:d6:25:37:80:ce:
                    4a:69:b2:77:b1:40:2d:c4:f3:a4:8c:f8:c6:8a:cc:
                    a3:92:a8:8d:61:a3:d2:d6:56:f5:e4:55:16:ab:25:
                    69:72:fa:7c:31:29:08:4e:94:45:f2:8e:a6:e8:29:
                    ff:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:3D:32:B6:21:4E:4D:C3:7C:53:D2:AD:40:75:B6:A0:37:CA:39:E3
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/4f733d4f7d41ed2efb2255089d129e948249251c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.40.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:c2:ff:f5:c6:95:4e:73:85:ce:a1:d4:66:c9:87:e5:1c:1f:
         8e:26:f1:57:d1:eb:4d:bf:b3:d0:70:45:41:fa:29:9d:fe:b6:
         72:37:2c:71:b8:bc:59:aa:54:b5:0f:23:1a:34:82:c0:a1:83:
         44:a1:d0:27:3f:1c:5b:2c:1b:b4:8a:46:f8:42:11:21:4f:46:
         28:b2:a2:88:4e:25:3c:0e:6d:70:d4:ac:63:ff:c3:fc:47:a9:
         61:cd:38:4a:83:11:27:3e:79:ac:87:1e:54:90:78:91:42:d1:
         ae:bb:65:51:30:a0:38:64:eb:43:a0:50:ae:76:e7:7a:82:74:
         23:50:93:6f:27:51:16:3d:ac:4e:19:25:2a:de:ec:e0:7a:71:
         47:1f:d0:39:cf:60:7d:88:45:15:ef:a6:8a:64:ce:f0:1c:f9:
         51:82:88:61:dd:7d:2b:62:73:76:8a:63:8d:3c:3d:f8:93:8e:
         a7:dd:43:60:24:7b:b4:5d:2e:db:e9:d0:7d:ae:40:d0:05:e6:
         c9:81:d3:8b:aa:e8:15:16:3c:73:e6:5b:d3:45:54:75:00:ad:
         8d:4b:1c:0c:f9:2f:4b:77:c5:f2:31:22:02:e4:31:f0:4b:2e:
         cf:40:58:d0:ae:bd:c4:5a:ce:3c:a3:d1:82:eb:80:da:24:3b:
         f1:44:5d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-fra.rpki-client.org