Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/717b5ea7679810e60566e96f4c7b02c968f22877.roa
File:                     717b5ea7679810e60566e96f4c7b02c968f22877.roa (raw, json)
Hash identifier:          Z1j3ai4bpQEdXTSdZdVv0FdPBTqCrIfN5LecVVXSGm4=
Subject key identifier:   2D:34:22:A7:96:B4:93:16:81:20:04:43:F3:7F:69:47:BF:E0:93:35
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       17FF99
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/717b5ea7679810e60566e96f4c7b02c968f22877.roa
Signing time:             Fri 12 Aug 2022 17:17:40 +0000
ROA not before:           Wed 27 Jul 2022 03:00:00 +0000
ROA not after:            Sat 27 Jul 2024 03:00:00 +0000
asID:                     266665
IP address blocks:        190.171.26.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1572761 (0x17ff99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Jul 27 03:00:00 2022 GMT
            Not After : Jul 27 03:00:00 2024 GMT
        Subject: CN=717b5ea7679810e60566e96f4c7b02c968f22877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bf:22:5d:be:c4:9d:d0:be:d4:21:df:e8:6d:
                    fb:b1:96:5e:9c:74:7e:e0:75:8f:e1:67:21:a9:d1:
                    5c:e6:7f:37:6b:6d:e0:99:f9:84:41:2a:90:2c:a8:
                    6e:55:47:24:b5:42:d6:03:54:67:86:ce:94:19:1a:
                    a3:5c:33:21:4c:3e:1f:27:ed:a6:8c:cf:82:30:f0:
                    35:b1:79:52:f8:da:3d:9d:9a:d6:06:9a:0b:88:1a:
                    2b:7c:14:a6:e0:ab:78:ca:75:cf:6b:f0:a5:6e:d2:
                    06:8d:b9:21:de:d6:56:54:76:0e:07:b9:8d:c4:4e:
                    9d:e4:40:c0:d6:6b:30:b8:ba:d8:e3:96:56:9e:86:
                    16:3c:11:4f:b8:81:2d:21:79:3f:85:a0:a3:fb:32:
                    86:31:e3:9a:7c:a0:14:98:a8:dc:c0:11:56:ed:b3:
                    25:20:28:f9:2c:96:0f:30:3f:d0:4a:61:ea:bf:ef:
                    bf:dc:2d:6c:bb:db:3f:78:80:81:b0:cc:d9:ee:8d:
                    d5:52:b4:e7:2d:88:5d:6b:79:ab:8e:e7:24:67:91:
                    95:9a:ce:90:5b:ea:8f:e8:26:94:c3:fb:77:cc:e1:
                    8d:37:4b:2f:73:0a:9d:0e:35:02:f0:f4:bb:f5:a8:
                    8e:b7:d3:80:19:25:0e:49:b9:40:36:0e:7e:63:23:
                    db:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:34:22:A7:96:B4:93:16:81:20:04:43:F3:7F:69:47:BF:E0:93:35
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/717b5ea7679810e60566e96f4c7b02c968f22877.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:ef:f3:81:a7:21:5c:03:f2:bf:f0:59:88:6e:8e:1f:2d:86:
         b3:93:1d:10:29:c3:5c:12:ae:dd:dd:10:76:f3:97:f2:a4:41:
         5d:5a:f7:c5:98:d3:e9:1b:46:da:fb:ae:7e:ef:91:12:8f:b4:
         a0:37:2a:11:7a:25:2c:11:3f:48:3c:56:7f:d6:de:4d:99:17:
         c7:82:11:bf:6b:3f:54:87:27:df:8b:ed:8d:61:1e:86:8f:d9:
         5a:95:54:1b:f8:c6:8f:83:c9:de:fe:28:c6:27:bb:8a:c2:f8:
         0b:71:93:f6:d9:a2:3b:b7:60:4c:36:fd:93:9c:db:bf:b6:ac:
         d5:72:5f:d3:19:e6:30:f2:16:22:6a:72:69:10:a4:ea:d6:53:
         35:4a:64:07:2c:6d:59:9b:37:3c:fe:84:37:ab:3f:19:b5:3b:
         4f:2e:b2:58:d0:b8:a7:6f:a2:c4:c8:7d:13:4c:5b:51:d9:fd:
         bd:6a:b8:68:61:98:54:09:5b:76:2c:90:6b:e4:7e:16:40:71:
         45:b9:4f:46:33:62:44:8b:5d:2e:fd:e2:6c:48:4d:b3:71:c9:
         b7:c3:7b:e1:68:e0:60:e4:5c:c9:ac:77:c5:ee:aa:2b:09:5c:
         c5:91:0c:73:17:b2:9c:1d:62:af:59:4e:64:c6:4d:52:72:89:
         0c:a5:cb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-ams.rpki-client.org