Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/58abeb3cd6feca4ba4f2fdf24f9418a3cd164a65.roa
File:                     58abeb3cd6feca4ba4f2fdf24f9418a3cd164a65.roa (raw, json)
Hash identifier:          8kVUrRozxqZs4jxx6bK6UtdaLKImyawYPr7KvnHYlaA=
Subject key identifier:   D9:53:82:5C:3C:C8:04:D3:90:E6:99:FB:D4:46:78:7E:05:98:53:99
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1C7286
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/58abeb3cd6feca4ba4f2fdf24f9418a3cd164a65.roa
Signing time:             Wed 28 Sep 2022 16:15:58 +0000
ROA not before:           Wed 28 Sep 2022 16:14:07 +0000
ROA not after:            Sat 28 Sep 2024 16:14:07 +0000
asID:                     11830
IP address blocks:        190.171.20.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1864326 (0x1c7286)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 28 16:14:07 2022 GMT
            Not After : Sep 28 16:14:07 2024 GMT
        Subject: CN=58abeb3cd6feca4ba4f2fdf24f9418a3cd164a65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:39:ec:e4:e4:ff:1d:8e:6a:6c:7a:8e:f4:9f:
                    b5:1d:b9:d6:65:c2:32:a1:fc:4f:5e:54:96:57:3a:
                    15:68:32:93:a1:46:30:dd:cb:2b:de:13:d4:ef:1e:
                    d4:0b:79:34:b5:96:e5:d2:7a:92:72:1b:71:95:63:
                    ff:03:6e:79:5b:f5:34:53:ee:f2:53:e1:7e:83:24:
                    1e:05:f9:3e:c9:b3:73:3b:43:6c:6c:1d:e7:27:d4:
                    c8:cc:2b:f8:e2:55:39:b4:f6:65:18:84:80:8c:17:
                    05:ea:51:7f:cd:52:9d:69:c3:8e:1e:dc:0e:7e:ec:
                    58:14:32:f1:4f:0c:91:fd:31:13:4a:70:5f:68:80:
                    bf:6f:ec:f0:99:12:e7:e9:1c:4c:69:16:87:82:31:
                    13:e1:05:25:a5:d2:c4:af:4a:ad:1e:69:e9:5b:8f:
                    5a:7f:f4:3f:52:76:43:47:fa:cb:5b:1e:d3:c4:20:
                    04:81:8d:e8:0c:1b:94:ad:e5:c8:bb:7b:08:d0:fa:
                    0d:1b:87:cc:b0:0e:84:b4:05:4b:25:05:2e:45:e0:
                    04:35:11:d9:71:3c:09:44:17:66:65:f6:c1:d0:e0:
                    45:12:93:19:09:e2:fe:f2:ee:66:96:c8:50:cf:86:
                    c1:e1:77:84:9c:bf:93:4b:fd:28:b1:29:9d:51:d6:
                    0d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:53:82:5C:3C:C8:04:D3:90:E6:99:FB:D4:46:78:7E:05:98:53:99
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/58abeb3cd6feca4ba4f2fdf24f9418a3cd164a65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:92:d0:60:12:99:55:f0:4a:5a:f8:91:92:a6:6c:3e:4f:48:
         27:96:fc:8a:29:cf:67:97:4c:1b:02:55:67:ff:10:be:3f:15:
         72:21:1e:a1:93:9c:e1:71:c1:c5:20:6e:3e:0e:eb:75:5e:89:
         a3:3a:c9:02:5b:55:23:37:9e:4d:49:34:31:79:20:ac:df:63:
         7c:7e:e7:5c:1a:1a:3a:16:b3:dc:72:22:aa:d3:05:38:67:93:
         5b:60:f5:bc:76:7e:44:d5:64:6d:9d:69:e5:81:26:58:01:70:
         c2:ae:cf:5a:8e:92:72:43:c4:9a:2b:66:5c:db:31:6b:a4:98:
         33:1d:4f:e6:78:45:ac:4b:43:83:c0:33:fd:a6:90:28:3e:f7:
         9e:4e:f8:03:f0:99:fc:56:97:10:1a:a4:08:ea:db:99:6c:a1:
         54:24:fe:e9:da:68:13:59:e1:87:7d:27:ac:d3:36:39:15:cc:
         55:3c:d8:cb:ec:79:e5:7f:43:5f:64:87:8c:66:52:e2:fa:b1:
         17:63:22:11:1f:18:24:a0:83:04:25:f6:bd:08:9f:5f:a1:c8:
         6b:65:52:4c:f4:6e:a3:ca:ee:b7:25:f8:cd:f1:1f:38:47:7f:
         3b:83:d2:47:00:ba:a1:e1:28:b1:ef:a8:20:cc:aa:71:12:45:
         0c:c9:9f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-ams.rpki-client.org