Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/5af471eb9fac19ecbce40416c45c2b4e8f48123e.roa
File:                     5af471eb9fac19ecbce40416c45c2b4e8f48123e.roa (raw, json)
Hash identifier:          3MKa+9RmV+/BqVzEH5oxq3RKlQ7jA0cmYbtC4BtV18A=
Subject key identifier:   61:DE:25:07:A6:D4:66:57:C3:F6:33:2B:82:D8:42:6D:53:AC:FE:52
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1B9C18
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/5af471eb9fac19ecbce40416c45c2b4e8f48123e.roa
Signing time:             Tue 27 Sep 2022 22:34:43 +0000
ROA not before:           Tue 27 Sep 2022 22:33:16 +0000
ROA not after:            Fri 27 Sep 2024 22:33:16 +0000
asID:                     11830
IP address blocks:        190.10.86.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1809432 (0x1b9c18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 27 22:33:16 2022 GMT
            Not After : Sep 27 22:33:16 2024 GMT
        Subject: CN=5af471eb9fac19ecbce40416c45c2b4e8f48123e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:10:46:e0:48:a6:db:07:28:4b:dd:c7:aa:fb:
                    3a:20:2b:b6:77:e5:3a:2c:46:03:16:d8:7f:c5:be:
                    c9:60:e1:15:68:1f:0c:ff:0f:55:35:01:ec:35:9a:
                    b2:5b:16:48:63:e5:9c:c2:f5:1b:38:ef:4d:4f:85:
                    de:f7:ef:a5:a3:5b:12:97:2e:41:39:85:3b:da:f4:
                    66:03:e8:c5:04:ec:8d:fe:3e:aa:6c:38:bc:40:0a:
                    b9:10:60:fc:56:d9:15:2c:b6:da:7a:1f:1d:74:48:
                    4e:c8:9a:e7:2c:97:51:8d:bb:15:9c:ff:e8:87:14:
                    38:b8:18:a8:aa:23:21:14:0a:ec:37:e9:a7:0a:af:
                    e3:81:cd:3b:f6:11:2c:6a:c5:a7:3e:9c:88:42:ad:
                    61:fa:3f:b2:83:14:43:bc:4f:5f:c4:23:76:fc:b8:
                    37:99:7a:f8:4e:84:34:bd:ec:99:dd:07:43:8b:7e:
                    dd:79:c1:a5:7e:87:44:14:2f:5f:c3:08:0b:1e:8d:
                    91:b1:cc:03:8f:6d:7e:a2:f9:79:c8:b9:37:aa:b0:
                    85:c9:2a:d3:74:25:0f:41:a6:41:c4:e9:87:47:a3:
                    1a:6f:b7:68:cf:58:32:6b:2b:72:92:fe:0b:85:72:
                    68:19:b2:c5:34:a9:52:b6:60:65:b2:50:69:fd:7c:
                    35:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:DE:25:07:A6:D4:66:57:C3:F6:33:2B:82:D8:42:6D:53:AC:FE:52
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/5af471eb9fac19ecbce40416c45c2b4e8f48123e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:26:dc:4f:3a:d9:ff:a6:fa:0d:ba:ce:18:08:68:a4:c6:58:
         45:8e:aa:e5:a8:ae:4b:6c:1f:b4:b5:2c:df:20:af:fa:bb:e4:
         a4:5e:f9:f3:36:e2:63:ca:60:b0:65:50:c6:c1:26:70:63:55:
         5f:48:85:4a:0a:4e:ee:60:0c:c7:05:16:7b:b3:25:0b:84:98:
         04:2c:7f:dc:ce:92:7b:92:eb:2c:6c:f8:11:04:49:ea:89:8b:
         40:5a:52:a8:ef:e6:24:89:cc:2a:e7:b2:ef:c7:49:7d:e2:27:
         fb:c2:59:a9:8a:ec:b4:2c:91:bf:78:7c:3b:2f:ae:d1:e7:f7:
         f8:e6:3d:93:76:b6:6b:9d:c0:88:f5:8d:12:b4:f6:f2:45:fc:
         9b:6d:a9:69:9b:96:ea:c6:54:89:07:f7:2b:04:c6:3e:19:0f:
         b9:7f:66:c3:58:9a:df:d3:ca:28:84:5c:7a:b2:d2:80:0b:80:
         a0:da:fa:28:0b:d0:73:19:2b:ba:8e:96:f1:54:4e:33:ed:71:
         02:76:1f:b5:ec:e9:2a:85:44:fa:16:84:36:51:62:48:50:8c:
         d0:95:26:c0:4d:5f:f6:7a:d9:9e:fa:f2:91:77:4b:0f:f9:6b:
         c9:04:e6:d5:b5:6e:6c:0f:59:2e:09:d5:29:c5:69:fd:b7:f5:
         31:4c:40:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-ams.rpki-client.org