Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/682c484b6d565cc7110f3011f4f01e9d6238e779.roa
File:                     682c484b6d565cc7110f3011f4f01e9d6238e779.roa (raw, json)
Hash identifier:          HkIlu1HUCCF5RUPBls4p1ZmdcMgwuO3DxfY6HqSylRo=
Subject key identifier:   4B:54:0C:C3:AE:42:18:E9:4A:8A:4D:62:09:CB:2B:EC:75:D6:F6:C1
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1CABB4
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/682c484b6d565cc7110f3011f4f01e9d6238e779.roa
Signing time:             Wed 28 Sep 2022 16:34:54 +0000
ROA not before:           Wed 28 Sep 2022 16:33:45 +0000
ROA not after:            Sat 28 Sep 2024 16:33:45 +0000
asID:                     11830
IP address blocks:        190.241.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1878964 (0x1cabb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 28 16:33:45 2022 GMT
            Not After : Sep 28 16:33:45 2024 GMT
        Subject: CN=682c484b6d565cc7110f3011f4f01e9d6238e779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:18:55:66:a6:a3:7b:d2:c5:03:06:17:38:52:
                    45:7d:22:d0:1c:97:ac:8d:d0:8f:3a:05:fe:62:be:
                    ad:68:42:d6:9b:78:99:3e:70:5c:be:f2:63:6c:a7:
                    e4:a1:26:70:37:9e:1b:d3:2e:58:45:f3:33:3f:b6:
                    9c:23:a6:b4:42:28:eb:dc:d5:87:6b:70:c9:b6:da:
                    b3:e8:20:8d:61:63:0c:6a:33:1a:f2:f1:65:08:33:
                    be:0f:1c:9d:56:65:d7:ea:d2:d5:01:87:b8:59:aa:
                    c9:ac:a1:e9:23:81:6f:bd:05:66:4e:92:c6:c2:9f:
                    88:0e:e4:e8:26:92:13:66:8d:04:af:fe:6c:8b:93:
                    bc:38:f9:70:44:d0:21:9c:73:cc:d3:9f:73:37:f0:
                    f8:65:c4:3f:5a:48:6e:fa:cf:92:59:1d:6f:1f:e7:
                    f5:68:8a:3f:40:59:2a:2d:24:7f:36:c2:13:db:21:
                    87:3a:85:08:24:1c:10:ca:0b:92:19:52:ea:7a:9b:
                    2c:9e:4f:4e:bb:02:82:46:32:4b:99:dc:01:9e:47:
                    16:7a:e8:a8:d9:b9:d3:2c:45:6f:bb:81:a2:41:18:
                    0c:7e:cd:58:d6:78:86:b4:84:ba:bd:60:9b:a4:d8:
                    ed:72:bb:6d:4e:03:14:47:7a:54:e6:4a:02:79:55:
                    4b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:54:0C:C3:AE:42:18:E9:4A:8A:4D:62:09:CB:2B:EC:75:D6:F6:C1
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/682c484b6d565cc7110f3011f4f01e9d6238e779.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.241.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:b2:e8:ab:13:40:51:a9:c1:75:81:3a:a3:4d:cc:5d:2f:5d:
         89:bf:da:13:f3:88:ed:86:1a:3e:c3:3e:c6:18:a0:0c:1d:e6:
         8d:3e:f5:65:17:5e:38:a5:9b:36:9d:9e:54:64:7b:49:0f:b7:
         3e:44:a0:94:7f:fd:e0:74:e3:c0:ed:83:ce:b1:54:78:78:8a:
         4d:e7:84:9e:57:33:8f:5a:a6:da:d5:ce:92:bc:e5:20:ef:46:
         17:09:5b:4a:ad:ed:f7:9b:3c:dc:a4:29:6d:91:e1:b0:26:d4:
         59:9e:17:b7:a6:5b:47:79:e9:7a:df:11:66:97:6f:93:af:4b:
         7e:91:1d:ec:4a:b6:75:38:55:ee:8d:33:98:c2:84:22:a2:ed:
         a6:20:ac:86:69:0a:7f:10:63:07:bc:01:21:4e:27:fd:5f:de:
         3f:50:47:40:df:22:9e:d9:60:76:23:45:fd:57:ff:ff:9f:b7:
         a1:1d:b6:b3:b4:16:35:1c:25:59:34:02:7c:a5:d5:d1:27:9f:
         1d:f6:67:f0:43:d8:74:e3:2d:66:c5:72:0a:cc:92:af:b6:a2:
         1d:2a:55:0e:58:83:89:6e:d9:46:5a:4a:48:c0:6d:12:ce:ab:
         87:2b:c2:6b:79:91:8e:13:a2:2a:0e:d8:43:0c:cf:01:f3:f8:
         a4:8c:cc:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-fra.rpki-client.org