Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/7019cfdd29d56263e3383994d73e6a00fdebb0c3.roa
File:                     7019cfdd29d56263e3383994d73e6a00fdebb0c3.roa (raw, json)
Hash identifier:          9ogXIgV2kg4cZobacjpbjKy3lRGMBPfp2ygz4ItgQh4=
Subject key identifier:   68:9F:1A:57:9A:70:C8:B3:05:10:51:0D:C3:FB:A1:B7:8D:4C:5E:FB
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1B14DB
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/7019cfdd29d56263e3383994d73e6a00fdebb0c3.roa
Signing time:             Tue 27 Sep 2022 17:10:17 +0000
ROA not before:           Tue 27 Sep 2022 17:08:56 +0000
ROA not after:            Fri 27 Sep 2024 17:08:56 +0000
asID:                     11830
IP address blocks:        190.10.43.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1774811 (0x1b14db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 27 17:08:56 2022 GMT
            Not After : Sep 27 17:08:56 2024 GMT
        Subject: CN=7019cfdd29d56263e3383994d73e6a00fdebb0c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c0:c6:fb:b5:49:ce:9a:b4:49:fd:5e:85:6b:
                    a1:bf:1f:8b:09:58:ec:99:95:7d:67:c6:22:5a:49:
                    2b:15:18:fa:a7:dc:6e:7c:b6:70:8b:53:d5:50:be:
                    c6:48:0a:cd:aa:5c:ac:d0:28:8a:05:b8:e8:bf:8c:
                    11:ae:0e:94:3b:a3:e4:da:da:0d:0e:7b:32:62:4d:
                    e4:c2:6f:eb:54:c5:ae:a8:ef:f7:3c:c0:c4:70:c4:
                    46:f0:4d:5c:85:9d:46:43:6c:92:10:17:d4:10:bd:
                    63:5e:81:99:84:2e:fe:08:c0:e8:b3:9a:26:d8:b2:
                    f0:0a:9a:6a:cc:d2:45:f8:6c:04:41:6f:c1:e8:29:
                    f6:8c:df:86:f8:6c:c0:eb:7f:a7:13:1a:b1:db:3e:
                    50:75:2f:e8:a1:7a:34:b3:c8:85:45:4b:02:fa:c0:
                    dc:e3:be:10:e7:0a:3d:e8:6f:7e:22:fc:0e:e1:a8:
                    df:f3:5c:90:a1:47:2c:d1:5a:26:4c:e7:43:1d:79:
                    7a:86:81:06:78:c4:0d:30:ba:bc:31:97:f7:d7:11:
                    04:2e:c0:dc:8f:4a:88:fe:a2:07:da:27:df:dd:cb:
                    b0:71:6b:df:4b:0d:1a:6e:98:4c:b3:1b:c3:b1:d8:
                    01:7e:82:30:3e:54:b4:6b:7b:2f:84:ee:36:5c:96:
                    9c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:9F:1A:57:9A:70:C8:B3:05:10:51:0D:C3:FB:A1:B7:8D:4C:5E:FB
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/7019cfdd29d56263e3383994d73e6a00fdebb0c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:8d:a2:a3:98:5b:5c:ef:6d:6c:cb:d6:51:cd:b7:30:e2:86:
         65:3a:f1:1a:1e:0d:43:cf:68:51:5d:76:50:31:74:73:ab:3d:
         84:3d:d1:15:78:d5:3e:e2:a2:87:ec:23:14:b2:f6:2a:6f:e1:
         ec:8d:d0:5e:de:05:c9:47:f4:0d:e4:c7:6c:a0:07:85:d4:71:
         c4:88:4c:1f:d2:ad:cf:4e:90:a4:1b:de:e6:47:04:e9:fc:52:
         48:2b:cd:38:76:ef:d3:a6:38:68:00:cd:66:a2:32:ae:dd:12:
         f5:5d:26:f6:6e:72:b1:ec:b8:c5:8e:fa:b6:1e:ee:dc:ee:0d:
         dc:4a:3a:30:5d:08:a7:6d:96:a8:8e:83:07:56:dc:f9:ca:29:
         aa:df:99:13:d2:1b:46:c1:0d:44:a1:73:76:02:7e:c1:85:cd:
         b4:f3:37:29:04:ec:09:67:c1:52:8e:1d:c3:f8:d1:04:aa:2e:
         2a:9a:36:78:01:5b:82:3d:c6:47:60:df:eb:10:19:dc:4b:6a:
         20:2f:52:b4:de:02:2d:10:d4:12:16:85:fb:8a:1f:c8:dc:f8:
         86:e7:8f:80:0c:f0:9c:c2:4c:3d:0d:2b:6c:6d:72:e9:a1:f7:
         18:28:1a:4f:86:2a:f4:4e:10:16:eb:74:79:45:75:37:47:39:
         0c:8d:e3:24
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGxTbMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZj
M2YzY2JmOTcxYjMxZDRhMGZiNDhhMDYzZWQ4NmYwYjU5NGFjM2UwHhcNMjIwOTI3
MTcwODU2WhcNMjQwOTI3MTcwODU2WjAzMTEwLwYDVQQDEyg3MDE5Y2ZkZDI5ZDU2
MjYzZTMzODM5OTRkNzNlNmEwMGZkZWJiMGMzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvcDG+7VJzpq0Sf1ehWuhvx+LCVjsmZV9Z8YiWkkrFRj6p9xu
fLZwi1PVUL7GSArNqlys0CiKBbjov4wRrg6UO6Pk2toNDnsyYk3kwm/rVMWuqO/3
PMDEcMRG8E1chZ1GQ2ySEBfUEL1jXoGZhC7+CMDos5om2LLwCppqzNJF+GwEQW/B
6Cn2jN+G+GzA63+nExqx2z5QdS/ooXo0s8iFRUsC+sDc474Q5wo96G9+IvwO4ajf
81yQoUcs0VomTOdDHXl6hoEGeMQNMLq8MZf31xEELsDcj0qI/qIH2iff3cuwcWvf
Sw0abphMsxvDsdgBfoIwPlS0a3svhO42XJacWQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGifGleacMizBRBRDcP7obeNTF77MB8GA1UdIwQYMBaAFNgLQZU9gBToGKPM
I8FMT5TRqMEbMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmMzZjNj
YmY5NzFiMzFkNGEwZmI0OGEwNjNlZDg2ZjBiNTk0YWMzZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmE3ODYyZTgtZDJkYi00OGVhLWI4MDktZDRiOTcw
ZDFkODkyLzcwMTljZmRkMjlkNTYyNjNlMzM4Mzk5NGQ3M2U2YTAwZmRlYmIwYzMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82YTc4NjJlOC1kMmRiLTQ4ZWEtYjgwOS1kNGI5
NzBkMWQ4OTIvNmMzZjNjYmY5NzFiMzFkNGEwZmI0OGEwNjNlZDg2ZjBiNTk0YWMz
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL4KKzANBgkqhkiG9w0BAQsFAAOCAQEARY2io5hbXO9tbMvW
Uc23MOKGZTrxGh4NQ89oUV12UDF0c6s9hD3RFXjVPuKih+wjFLL2Km/h7I3QXt4F
yUf0DeTHbKAHhdRxxIhMH9Ktz06QpBve5kcE6fxSSCvNOHbv06Y4aADNZqIyrt0S
9V0m9m5ysey4xY76th7u3O4N3Eo6MF0Ip22WqI6DB1bc+copqt+ZE9IbRsENRKFz
dgJ+wYXNtPM3KQTsCWfBUo4dw/jRBKouKpo2eAFbgj3GR2Df6xAZ3EtqIC9StN4C
LRDUEhaF+4ofyNz4huePgAzwnMJMPQ0rbG1y6aH3GCgaT4Yq9E4QFut0eUV1N0c5
DI3jJA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-fra.rpki-client.org