Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6dab2281e12d847746d77cbc0b24711c7c01708d.roa
File:                     6dab2281e12d847746d77cbc0b24711c7c01708d.roa (raw, json)
Hash identifier:          u2Ri7z4r1ARIGPxg+8tuTWospt93bOJ/ppmO4ZU11CU=
Subject key identifier:   3D:20:88:91:77:4F:96:72:EB:4B:E8:25:38:0F:78:D5:46:F4:E8:04
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1BBF2D
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6dab2281e12d847746d77cbc0b24711c7c01708d.roa
Signing time:             Tue 27 Sep 2022 22:44:33 +0000
ROA not before:           Tue 27 Sep 2022 22:43:38 +0000
ROA not after:            Fri 27 Sep 2024 22:43:38 +0000
asID:                     11830
IP address blocks:        190.10.95.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1818413 (0x1bbf2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 27 22:43:38 2022 GMT
            Not After : Sep 27 22:43:38 2024 GMT
        Subject: CN=6dab2281e12d847746d77cbc0b24711c7c01708d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c7:17:bc:c8:2d:98:c2:72:d4:37:10:48:0a:
                    af:da:32:f2:85:74:83:93:6b:e4:d1:df:c1:fd:5b:
                    b6:f9:8c:6f:62:28:0b:6b:f7:4d:35:81:20:c5:dc:
                    81:a4:c4:4c:b2:03:60:58:6b:a4:48:a4:55:96:1d:
                    19:65:24:48:4a:db:f9:9b:d8:3d:a2:9b:c8:ec:5e:
                    35:6d:e9:f7:a7:37:4d:16:df:c7:15:43:42:a2:c1:
                    e8:00:36:2b:e8:32:1c:a0:77:03:01:b2:c8:4a:74:
                    ec:af:a1:f5:c2:52:7a:a1:a5:3f:04:ae:35:21:82:
                    a7:0a:bb:ff:b7:fa:f3:00:3b:5d:a9:43:b5:70:13:
                    2d:08:9d:44:90:4a:0b:a2:50:13:da:8b:42:59:f9:
                    a8:09:e1:5d:27:83:a8:75:e0:08:ec:36:2e:1e:f5:
                    98:a6:09:7b:02:27:11:29:fe:af:f6:45:de:78:c3:
                    c9:dd:36:0f:7d:62:36:2d:62:f6:68:a0:07:d1:40:
                    34:ce:c8:c9:62:87:16:a8:83:87:78:c6:0e:e4:6a:
                    6e:a5:4e:16:eb:64:0d:4a:08:67:61:cd:8d:ae:c3:
                    7a:04:e6:9e:ef:67:9a:2d:7c:ce:4f:64:db:75:03:
                    34:64:65:7e:7a:a6:bb:26:01:1b:13:16:92:c5:6b:
                    eb:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:20:88:91:77:4F:96:72:EB:4B:E8:25:38:0F:78:D5:46:F4:E8:04
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6dab2281e12d847746d77cbc0b24711c7c01708d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:a1:a4:2c:f6:3a:64:01:5c:97:3c:22:01:6a:61:37:82:31:
         1a:99:29:dd:71:cc:d6:89:8c:9c:c6:6e:04:9a:82:e0:58:59:
         15:66:97:a1:77:f3:56:58:93:42:4b:6e:09:fd:2b:2d:ea:07:
         45:c6:38:7f:d1:c8:90:99:96:9d:70:ae:96:5c:d9:38:4d:cf:
         62:a6:96:96:a7:a1:f8:40:44:62:52:59:32:62:5f:e3:d2:4b:
         70:a9:14:34:84:94:0d:8d:42:23:85:82:28:c6:c0:78:af:98:
         da:17:68:76:9a:37:f8:8d:65:0c:ee:8b:f3:9d:f9:e3:6c:ba:
         83:a5:55:5a:ce:3b:9e:7a:2e:30:fc:8b:d0:fb:20:53:86:67:
         37:dc:d2:68:bb:e3:b2:e7:43:8f:d0:32:e1:00:98:6a:5b:97:
         03:44:41:aa:22:d4:36:e9:ec:21:b2:b6:5d:86:ea:29:f2:44:
         ae:58:3c:33:4f:e7:87:5e:1c:ae:8f:b4:8d:5c:1f:1b:6f:2e:
         04:89:a4:9b:6b:45:32:fb:b4:64:3e:99:b9:72:ff:08:57:a5:
         9b:55:43:21:d9:55:77:d0:09:40:8a:e0:d8:e4:57:ef:8e:e2:
         75:78:b6:39:cf:0c:a4:13:37:e3:5d:9a:7c:97:18:96:17:d6:
         e8:40:ed:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-fra.rpki-client.org