Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/57fd11f011f9927af238bd588fdbfbc7e83a67e9.roa
File:                     57fd11f011f9927af238bd588fdbfbc7e83a67e9.roa (raw, json)
Hash identifier:          A9zyUraOA7JgGy1aTVSCHKFUP1vYdWk7NPpac0R7M6E=
Subject key identifier:   1D:DF:71:A0:ED:B3:01:D0:61:D5:05:1B:6E:81:E4:BB:2A:FB:65:BB
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1BA25A
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/57fd11f011f9927af238bd588fdbfbc7e83a67e9.roa
Signing time:             Tue 27 Sep 2022 22:36:24 +0000
ROA not before:           Tue 27 Sep 2022 22:35:43 +0000
ROA not after:            Fri 27 Sep 2024 22:35:43 +0000
asID:                     11830
IP address blocks:        190.10.88.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1811034 (0x1ba25a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 27 22:35:43 2022 GMT
            Not After : Sep 27 22:35:43 2024 GMT
        Subject: CN=57fd11f011f9927af238bd588fdbfbc7e83a67e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a1:4f:f9:e8:00:ee:bb:5c:61:4e:c9:89:4d:
                    a9:0f:ca:cb:47:03:ab:4d:af:6e:a5:b4:5c:87:75:
                    e6:b3:ac:c5:57:b3:e4:2a:91:3c:ee:b0:ff:a6:0a:
                    28:e1:bc:ba:07:3c:b1:4b:b5:7f:48:35:95:4a:7e:
                    1d:a0:96:a2:61:d8:62:30:5d:71:99:ba:0a:b2:2a:
                    6e:27:aa:ef:6e:f0:06:c1:6a:64:c0:7c:b4:ec:64:
                    da:b7:5f:a7:7f:83:93:da:db:8d:0c:8c:9c:e4:2a:
                    a5:14:cd:04:ee:0f:1d:09:3d:0f:fd:d6:bc:fb:3f:
                    9e:f3:36:a6:30:17:48:26:eb:10:6b:2e:1a:e9:d4:
                    02:90:06:97:3c:47:aa:aa:8f:b2:5c:be:94:fd:e7:
                    2f:d7:0b:0c:f3:eb:a3:a0:5a:b1:ad:52:d5:16:9f:
                    c5:20:21:09:3b:81:9a:c6:ed:82:4f:57:61:d3:e3:
                    05:86:bd:c5:94:01:89:b8:e0:a4:ea:b1:11:7b:7d:
                    05:c2:45:73:9e:1e:5e:a7:77:e8:30:4b:b4:e9:61:
                    5f:24:90:c6:5a:0d:86:4f:e5:d3:e3:e5:19:c2:56:
                    f6:7a:7e:21:9f:b2:29:67:99:d8:6e:65:7f:8c:cf:
                    a4:53:d7:f1:42:4e:e0:d8:c9:53:27:4c:97:10:1c:
                    06:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:DF:71:A0:ED:B3:01:D0:61:D5:05:1B:6E:81:E4:BB:2A:FB:65:BB
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/57fd11f011f9927af238bd588fdbfbc7e83a67e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:a6:5a:fe:d3:8f:dc:d5:1b:df:0b:cd:c0:b8:94:3a:c2:b3:
         80:84:d6:45:b3:07:bd:51:95:be:35:d1:13:a6:c9:49:8a:ed:
         14:ea:40:02:ab:1d:d1:e9:41:e6:23:15:d8:77:20:73:4a:a8:
         c5:91:f7:77:d3:ab:d8:d4:d3:9f:15:a4:d9:f0:ae:9d:5a:b9:
         a0:54:7c:00:65:a2:84:8b:86:f9:63:a9:f9:21:93:51:02:ec:
         c5:fc:bd:d2:81:2a:87:4a:dd:38:1c:83:31:5a:a3:6f:c3:6e:
         80:2f:5f:80:d8:dd:74:be:94:b7:27:9a:b4:69:10:c8:64:3e:
         3b:05:c5:33:6a:1b:d3:fa:25:7d:f5:56:58:be:23:a2:a5:f1:
         d2:a1:fd:25:5e:bd:7d:06:2f:29:04:d4:9b:d8:e6:f8:60:c8:
         ad:80:e8:cb:a5:81:7c:6c:a9:e7:2e:11:fa:81:4f:b7:e3:a8:
         a7:56:73:5d:58:ed:52:af:56:b2:a8:52:51:54:2c:13:f5:aa:
         30:06:d5:51:cc:b7:e5:78:c3:e1:cc:6b:93:b0:42:ac:38:c3:
         c9:ef:98:ae:30:93:39:9f:6d:9f:93:0a:98:92:f9:cd:e7:3f:
         e8:96:4e:2d:ca:9e:37:27:8d:6d:fb:a6:14:74:e0:cf:b8:35:
         99:0a:28:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-fra.rpki-client.org