Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6b4bfac609e355a660c795c4d26d954b1abbc960.roa
File:                     6b4bfac609e355a660c795c4d26d954b1abbc960.roa (raw, json)
Hash identifier:          rm+WdNtWyuES44BxuDYhhVXWzrN5peDOMOc4rnSjopU=
Subject key identifier:   A2:9E:4D:28:ED:71:59:9C:0D:DF:AA:57:B9:0B:99:8F:63:CA:CD:B6
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1BAD42
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6b4bfac609e355a660c795c4d26d954b1abbc960.roa
Signing time:             Tue 27 Sep 2022 22:39:22 +0000
ROA not before:           Tue 27 Sep 2022 22:38:43 +0000
ROA not after:            Fri 27 Sep 2024 22:38:43 +0000
asID:                     11830
IP address blocks:        190.10.91.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1813826 (0x1bad42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 27 22:38:43 2022 GMT
            Not After : Sep 27 22:38:43 2024 GMT
        Subject: CN=6b4bfac609e355a660c795c4d26d954b1abbc960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:11:f0:d2:5d:25:d9:4d:bc:b0:ee:1d:50:76:
                    ad:ef:e8:96:21:6b:54:a3:f8:b0:76:d1:0d:97:8d:
                    35:98:5e:f4:20:7f:21:02:7e:4f:b2:bd:80:a6:83:
                    41:d9:d2:2e:da:a2:de:87:45:34:f2:db:01:55:ee:
                    62:a1:fd:ac:d6:3c:ae:31:62:1b:12:36:0c:ce:e7:
                    4e:f5:85:36:b3:ac:34:f6:e5:29:ee:c6:8a:36:62:
                    78:10:6c:d0:a4:f2:6b:03:74:1d:5b:32:bb:da:8c:
                    c8:b5:1d:b4:77:ac:bc:00:ab:39:b1:01:39:73:9b:
                    6c:e7:0d:aa:47:3b:08:4a:1d:f7:c2:53:9a:bb:bd:
                    21:61:65:f4:68:4c:9b:ff:c8:59:80:2c:40:d4:b3:
                    ab:9b:7e:66:d0:39:a1:81:5b:58:ef:12:7c:53:3b:
                    83:6c:63:c1:30:71:90:99:ae:f2:01:bb:d3:1e:52:
                    6f:38:4e:07:cc:61:b9:cc:36:7a:b4:ce:07:b9:c4:
                    27:3c:6e:5c:4f:5a:56:4a:9e:19:bc:47:bd:7d:01:
                    3e:57:ba:af:11:10:1a:bc:2a:1d:f2:f3:6f:14:41:
                    db:62:63:d4:81:63:5c:be:35:5b:ea:79:bc:f0:10:
                    34:0a:5f:b9:f7:f1:89:b6:80:a4:ff:ef:1a:b9:86:
                    13:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:9E:4D:28:ED:71:59:9C:0D:DF:AA:57:B9:0B:99:8F:63:CA:CD:B6
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6b4bfac609e355a660c795c4d26d954b1abbc960.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:83:42:23:2e:d3:23:1c:ec:0c:77:6f:9d:0d:c5:0a:1f:55:
         50:70:13:34:02:96:7e:a7:3f:04:0d:76:98:be:0e:27:04:9f:
         b3:d1:e1:6c:86:5e:27:bb:da:c0:6b:76:8d:5a:74:62:7a:a6:
         2b:9b:70:fc:78:72:09:3b:a6:c5:74:18:19:65:8c:16:12:b4:
         eb:bd:53:13:20:c7:a7:57:ae:99:91:9a:47:24:9a:a5:11:8f:
         57:1f:f9:2c:22:4b:01:09:78:00:87:e6:ae:d9:25:15:4c:b5:
         1c:ab:2d:a5:7a:41:45:69:21:60:bb:fd:75:b8:a3:73:e8:37:
         dd:8f:53:ad:54:3e:92:cc:f4:77:21:fe:1d:17:1c:17:0f:dc:
         87:f7:82:53:70:0a:c4:18:1d:79:0f:db:8f:de:21:95:89:b4:
         8b:77:f8:0b:74:de:d0:c9:1a:f6:d2:3d:8f:d6:82:4c:3d:8d:
         dc:e1:03:b7:e2:6a:c6:91:c1:38:68:be:4f:d4:87:af:2f:c1:
         3c:8d:1e:92:61:4a:31:8e:ef:ee:da:ec:55:ec:19:d3:92:22:
         38:59:89:bf:fa:37:d1:3a:26:68:1c:68:52:93:5e:c3:a1:f6:
         79:e4:b7:72:67:58:55:78:10:55:9d:ea:f8:7d:f7:24:91:ef:
         5c:af:73:5b
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDG61CMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZj
M2YzY2JmOTcxYjMxZDRhMGZiNDhhMDYzZWQ4NmYwYjU5NGFjM2UwHhcNMjIwOTI3
MjIzODQzWhcNMjQwOTI3MjIzODQzWjAzMTEwLwYDVQQDEyg2YjRiZmFjNjA5ZTM1
NWE2NjBjNzk1YzRkMjZkOTU0YjFhYmJjOTYwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAohHw0l0l2U28sO4dUHat7+iWIWtUo/iwdtENl401mF70IH8h
An5Psr2ApoNB2dIu2qLeh0U08tsBVe5iof2s1jyuMWIbEjYMzudO9YU2s6w09uUp
7saKNmJ4EGzQpPJrA3QdWzK72ozItR20d6y8AKs5sQE5c5ts5w2qRzsISh33wlOa
u70hYWX0aEyb/8hZgCxA1LOrm35m0DmhgVtY7xJ8UzuDbGPBMHGQma7yAbvTHlJv
OE4HzGG5zDZ6tM4HucQnPG5cT1pWSp4ZvEe9fQE+V7qvERAavCod8vNvFEHbYmPU
gWNcvjVb6nm88BA0Cl+59/GJtoCk/+8auYYTZQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFKKeTSjtcVmcDd+qV7kLmY9jys22MB8GA1UdIwQYMBaAFNgLQZU9gBToGKPM
I8FMT5TRqMEbMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmMzZjNj
YmY5NzFiMzFkNGEwZmI0OGEwNjNlZDg2ZjBiNTk0YWMzZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmE3ODYyZTgtZDJkYi00OGVhLWI4MDktZDRiOTcw
ZDFkODkyLzZiNGJmYWM2MDllMzU1YTY2MGM3OTVjNGQyNmQ5NTRiMWFiYmM5NjAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82YTc4NjJlOC1kMmRiLTQ4ZWEtYjgwOS1kNGI5
NzBkMWQ4OTIvNmMzZjNjYmY5NzFiMzFkNGEwZmI0OGEwNjNlZDg2ZjBiNTk0YWMz
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL4KWzANBgkqhkiG9w0BAQsFAAOCAQEAToNCIy7TIxzsDHdv
nQ3FCh9VUHATNAKWfqc/BA12mL4OJwSfs9HhbIZeJ7vawGt2jVp0YnqmK5tw/Hhy
CTumxXQYGWWMFhK0671TEyDHp1eumZGaRySapRGPVx/5LCJLAQl4AIfmrtklFUy1
HKstpXpBRWkhYLv9dbijc+g33Y9TrVQ+ksz0dyH+HRccFw/ch/eCU3AKxBgdeQ/b
j94hlYm0i3f4C3Te0Mka9tI9j9aCTD2N3OEDt+JqxpHBOGi+T9SHry/BPI0ekmFK
MY7v7trsVewZ05IiOFmJv/o30TomaBxoUpNew6H2eeS3cmdYVXgQVZ3q+H33JJHv
XK9zWw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-fra.rpki-client.org