Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/7c6180c4853fcf9545c327d558eba520e95a395f.roa
File:                     7c6180c4853fcf9545c327d558eba520e95a395f.roa (raw, json)
Hash identifier:          OXHxnbux9FX1iXFKKPiE9L2IVzyUmE6AUrje7ElIG80=
Subject key identifier:   4E:69:88:6B:34:64:06:59:91:3F:4A:2F:4C:5C:10:EA:F6:4E:8A:5D
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1A9348
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/7c6180c4853fcf9545c327d558eba520e95a395f.roa
Signing time:             Thu 22 Sep 2022 20:51:23 +0000
ROA not before:           Thu 22 Sep 2022 20:50:47 +0000
ROA not after:            Sun 22 Sep 2024 20:50:47 +0000
asID:                     3790
IP address blocks:        196.40.52.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1741640 (0x1a9348)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 22 20:50:47 2022 GMT
            Not After : Sep 22 20:50:47 2024 GMT
        Subject: CN=7c6180c4853fcf9545c327d558eba520e95a395f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9b:63:6b:28:99:cb:26:95:2d:63:47:e6:da:
                    12:df:ca:e0:22:2e:ea:06:e7:0a:22:e2:10:79:17:
                    e2:dc:58:64:4f:58:61:9e:04:f7:15:5e:2b:49:e0:
                    be:64:06:94:8a:7a:f7:ad:0e:9f:48:f7:80:21:12:
                    2e:55:2e:04:12:c2:00:2b:0c:9f:da:f7:d5:cc:2b:
                    db:f4:04:e6:82:8b:c8:f0:f7:14:51:f6:1f:7c:37:
                    5b:c1:12:a8:e5:dd:ff:57:55:13:02:6d:31:c8:ae:
                    14:47:fc:fd:76:19:0e:c4:3f:f6:e3:f2:62:af:36:
                    a4:5b:a7:b1:25:60:bb:b0:a2:f7:d6:8d:fc:a1:9b:
                    50:91:81:4b:c7:63:dc:23:27:7f:dc:5c:34:22:11:
                    a8:37:b8:95:cc:64:50:64:d5:85:a4:4a:bd:32:74:
                    eb:a6:f2:5d:0e:98:d6:ef:cd:08:5a:45:83:05:e3:
                    10:6d:ae:6c:29:5f:d4:25:2a:8b:f6:24:d1:ec:7b:
                    11:b0:96:cd:f0:f2:5e:e4:7e:bf:d5:6f:8e:3c:62:
                    4c:f3:55:83:e2:06:3d:1a:f8:4f:f6:7f:df:59:d6:
                    e6:9d:97:44:81:77:fb:8f:c4:88:da:ff:e1:9a:f1:
                    1c:70:1c:b6:5f:a5:b5:60:d1:59:21:9e:bf:48:46:
                    14:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:69:88:6B:34:64:06:59:91:3F:4A:2F:4C:5C:10:EA:F6:4E:8A:5D
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/7c6180c4853fcf9545c327d558eba520e95a395f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.40.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:a2:47:57:1e:bd:06:8a:5c:cc:a2:9c:22:dc:23:7b:18:98:
         1b:02:50:de:af:7e:02:52:b7:af:85:6e:48:31:a3:1f:c9:3c:
         eb:c6:30:65:f5:a3:88:be:03:d2:01:bc:54:cf:74:74:34:55:
         f0:2a:1e:7d:fb:d2:1c:0c:7c:7e:f2:f5:39:b6:63:d4:a3:7b:
         69:ea:e1:77:6f:86:36:13:14:54:b3:cf:33:bf:e9:7d:07:ef:
         91:d3:30:df:9e:f3:b0:0a:9b:d5:47:82:e4:8c:55:88:8f:4a:
         33:91:a1:21:67:dc:e1:e6:a6:d3:b5:d7:9a:d1:d3:63:6e:69:
         e4:40:dd:83:b5:4a:71:c2:73:3a:d1:36:36:6c:67:3b:f2:a6:
         a9:f2:e2:62:7a:83:94:69:cd:4a:9f:67:51:10:96:92:e9:72:
         31:d9:ce:f4:74:2e:55:f8:9c:7b:9d:5c:e3:fe:09:34:cb:7b:
         ff:65:d2:e5:ff:bd:60:c3:fa:4b:c9:fc:40:ad:75:e5:72:f9:
         6b:34:50:0c:29:23:49:a6:b3:ca:ae:67:ed:9a:b7:70:c4:11:
         12:5d:f2:71:6f:1b:cd:6f:a2:07:5a:9e:34:39:73:80:45:cb:
         78:7d:2f:7a:e4:97:8e:c9:86:65:6b:9d:cd:c8:bd:96:4b:6d:
         3d:65:63:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-ams.rpki-client.org