Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6f9bad15409d5aac99808ea80c4ee04df7a464bc.roa
File:                     6f9bad15409d5aac99808ea80c4ee04df7a464bc.roa (raw, json)
Hash identifier:          9Yub7t4pcmgu01LBC0KIs2CfTJgWfh+7We2xvGXjX/w=
Subject key identifier:   F5:A7:85:E1:79:A2:E2:58:4E:D8:9E:B3:B6:1C:2C:B3:F9:B5:AA:FC
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1AFE5B
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6f9bad15409d5aac99808ea80c4ee04df7a464bc.roa
Signing time:             Tue 27 Sep 2022 17:00:55 +0000
ROA not before:           Tue 27 Sep 2022 16:57:15 +0000
ROA not after:            Fri 27 Sep 2024 16:57:15 +0000
asID:                     11830
IP address blocks:        190.10.37.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1769051 (0x1afe5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 27 16:57:15 2022 GMT
            Not After : Sep 27 16:57:15 2024 GMT
        Subject: CN=6f9bad15409d5aac99808ea80c4ee04df7a464bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d6:93:0a:f8:a7:b0:29:50:cb:d1:27:b0:95:
                    c6:14:cf:b4:56:bb:73:de:74:30:0a:c7:1d:8c:6b:
                    8d:5a:21:f3:10:94:64:c4:a0:0a:e7:e3:27:a7:8c:
                    0c:98:57:a2:e7:41:9c:01:bb:3d:f0:30:23:5b:2d:
                    ef:7c:89:30:1e:85:a2:40:d8:35:1b:de:fa:26:c7:
                    f6:05:16:46:92:44:53:ba:f2:e6:0c:ea:98:5c:e9:
                    ef:79:f2:4a:08:9c:66:3d:69:96:bc:96:12:92:f2:
                    55:00:2e:59:a8:1c:62:fb:0a:fe:6c:46:3e:ff:2b:
                    0e:88:21:48:39:6b:c5:9b:2e:bc:81:bf:84:01:bb:
                    93:94:1c:94:5b:f0:6e:42:df:49:a4:e8:e0:ce:f4:
                    46:4d:75:01:99:a8:fb:32:ff:0e:69:b1:61:c5:24:
                    12:de:3e:1a:c0:02:2f:b5:c5:5a:1e:ea:e1:72:14:
                    6e:77:d4:bf:40:14:4c:24:07:6c:38:ca:40:40:8c:
                    af:f2:77:61:4c:52:ce:aa:4d:84:72:68:e1:d2:b6:
                    22:7f:b2:c5:48:58:02:85:13:2f:ae:dc:37:85:6e:
                    8d:39:c1:ca:79:a7:4f:5f:e5:fe:9f:73:b8:e8:ec:
                    a8:91:e0:0f:09:a8:c0:20:26:15:e9:58:61:3a:79:
                    ac:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A7:85:E1:79:A2:E2:58:4E:D8:9E:B3:B6:1C:2C:B3:F9:B5:AA:FC
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6f9bad15409d5aac99808ea80c4ee04df7a464bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:d0:46:c1:5b:45:4c:97:9c:25:a9:f0:77:0e:c6:9f:36:ef:
         3f:55:79:10:5e:d5:4c:6e:a7:a6:bc:6e:eb:5d:2f:d6:5b:ce:
         66:f3:36:ee:90:a6:18:29:00:54:5a:a3:da:6d:d7:24:3f:c1:
         7b:ba:3e:43:e3:dc:25:03:89:c2:65:09:dc:6c:dc:09:16:06:
         fc:a8:62:9c:dc:c3:01:58:d2:9a:aa:6d:a1:f3:0a:76:69:19:
         a7:4e:3a:df:c0:d6:1a:69:14:c6:b3:18:54:6b:61:15:2c:db:
         5e:63:7b:6e:1e:00:32:08:9a:24:98:3b:ff:6a:8e:fa:e1:be:
         7c:07:4d:1d:66:3d:03:aa:04:8e:06:26:86:20:e4:e4:78:c9:
         d9:3e:54:32:e0:36:c9:31:10:52:9e:d9:1c:e8:01:e0:fc:06:
         76:aa:7b:48:62:f4:bb:04:f8:eb:b2:64:78:9f:ee:81:8f:89:
         f3:bd:7b:7f:15:9b:5f:c6:d9:f1:72:94:4c:e4:1f:12:7c:9f:
         9a:eb:a1:0e:96:fb:3a:88:db:61:a2:7e:49:fc:14:8b:e8:ae:
         4e:65:ec:c3:8f:3d:5c:52:f5:b4:b8:93:51:4c:72:a4:f4:5a:
         dd:86:a0:d0:8b:93:ca:f3:11:25:1d:33:17:f7:2f:0d:03:ee:
         b0:03:61:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-fra.rpki-client.org