Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/7e5c7741eb0d9788071dfdb56b8f9136eec242c8.roa
File:                     7e5c7741eb0d9788071dfdb56b8f9136eec242c8.roa (raw, json)
Hash identifier:          zu/DJRuYidxNWaWzpxHY6lkSH8MLC578J5Rd+Fn7ExE=
Subject key identifier:   9F:BF:F3:A9:C2:8E:30:02:7D:EE:C3:A8:28:A7:29:9C:74:D4:18:79
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1A8DE0
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/7e5c7741eb0d9788071dfdb56b8f9136eec242c8.roa
Signing time:             Thu 22 Sep 2022 20:50:10 +0000
ROA not before:           Thu 22 Sep 2022 20:49:38 +0000
ROA not after:            Sun 22 Sep 2024 20:49:38 +0000
asID:                     3790
IP address blocks:        196.40.49.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1740256 (0x1a8de0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 22 20:49:38 2022 GMT
            Not After : Sep 22 20:49:38 2024 GMT
        Subject: CN=7e5c7741eb0d9788071dfdb56b8f9136eec242c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:25:a9:d3:1a:eb:c3:32:c3:b4:42:68:e2:ef:
                    9d:91:3b:e0:ce:5e:6c:f7:08:2d:1f:49:45:d4:f0:
                    88:4e:af:07:38:26:0b:3a:8e:c9:02:b8:74:a4:5b:
                    94:93:7f:c1:54:65:a3:5d:4f:db:73:0a:48:76:82:
                    f1:a7:d3:c3:46:9c:68:21:05:20:dc:6e:38:6c:ca:
                    80:89:44:d0:8d:8f:4a:24:cf:6c:b9:ab:c2:c5:97:
                    da:76:f3:1e:fa:9d:57:d9:d5:a0:8e:cb:ed:86:26:
                    b9:df:b7:ae:12:d8:21:2f:c5:dc:71:f6:fa:72:ab:
                    20:68:b8:4b:41:80:b6:dd:ef:ca:e1:17:03:61:07:
                    a6:f1:f5:1a:e2:54:4e:b1:59:12:c5:79:e3:8b:4b:
                    4f:58:42:56:bd:b8:8b:0f:83:29:a3:25:12:fa:66:
                    16:0f:8c:02:b4:ab:f5:a1:17:49:55:43:34:81:69:
                    42:3b:9e:a0:cf:d6:9f:18:b9:a8:8a:be:a8:d5:8b:
                    a1:86:a7:0c:8d:c1:d0:f4:ad:bf:86:75:2f:02:0d:
                    d1:c2:aa:74:22:ef:d4:17:42:af:fa:ea:38:d6:47:
                    55:49:ba:2b:b5:c9:24:b3:5a:2a:3e:fa:c3:f6:1f:
                    33:0d:af:f8:e2:ec:f2:d4:2f:3f:eb:c4:4e:20:8e:
                    f5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:BF:F3:A9:C2:8E:30:02:7D:EE:C3:A8:28:A7:29:9C:74:D4:18:79
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/7e5c7741eb0d9788071dfdb56b8f9136eec242c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.40.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:ab:76:9b:32:a5:62:b9:aa:d8:87:9c:8b:2d:68:96:bb:08:
         6c:86:a5:a8:2b:4c:3e:26:66:4a:a5:04:dd:4c:bd:0d:80:61:
         23:3f:41:8c:73:03:d0:2f:63:c9:d2:60:3b:82:c1:9f:6f:d3:
         c4:88:9c:f1:83:7d:5f:cf:f0:ab:5c:a3:bd:12:5e:c7:c6:03:
         bc:97:cb:7f:3d:53:82:c4:c1:6c:7f:6a:9e:b5:74:7f:eb:d9:
         77:28:12:b7:6f:5c:e8:a1:d2:22:87:a5:3c:a8:15:f5:82:60:
         ac:cc:97:74:a2:6c:21:7c:9e:f9:cc:42:29:02:00:22:0e:b5:
         aa:51:f7:65:ac:47:ce:7f:5d:86:d7:92:1a:97:65:77:c9:68:
         41:3a:03:60:74:fc:1f:3a:0c:0c:57:9d:42:43:87:3f:d2:c6:
         da:35:c9:3a:02:ef:00:7f:32:50:ea:d2:0c:13:08:09:1e:38:
         d9:44:e0:36:93:41:41:76:9a:79:a6:7b:2d:e6:24:2d:f6:7a:
         74:bf:38:c7:a5:c1:ca:f1:e0:ae:e9:3f:8d:3c:36:8b:3d:94:
         ff:cd:4a:63:2a:c7:ed:df:e8:93:4f:b9:ab:86:3b:83:a9:55:
         39:fc:76:9e:05:d8:29:8e:04:eb:42:ed:ae:ca:b9:be:c5:c2:
         f0:23:31:cc
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGo3gMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZj
M2YzY2JmOTcxYjMxZDRhMGZiNDhhMDYzZWQ4NmYwYjU5NGFjM2UwHhcNMjIwOTIy
MjA0OTM4WhcNMjQwOTIyMjA0OTM4WjAzMTEwLwYDVQQDEyg3ZTVjNzc0MWViMGQ5
Nzg4MDcxZGZkYjU2YjhmOTEzNmVlYzI0MmM4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA0yWp0xrrwzLDtEJo4u+dkTvgzl5s9wgtH0lF1PCITq8HOCYL
Oo7JArh0pFuUk3/BVGWjXU/bcwpIdoLxp9PDRpxoIQUg3G44bMqAiUTQjY9KJM9s
uavCxZfadvMe+p1X2dWgjsvthia537euEtghL8Xccfb6cqsgaLhLQYC23e/K4RcD
YQem8fUa4lROsVkSxXnji0tPWEJWvbiLD4MpoyUS+mYWD4wCtKv1oRdJVUM0gWlC
O56gz9afGLmoir6o1YuhhqcMjcHQ9K2/hnUvAg3Rwqp0Iu/UF0Kv+uo41kdVSbor
tckks1oqPvrD9h8zDa/44uzy1C8/68ROII71pQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJ+/86nCjjACfe7DqCinKZx01Bh5MB8GA1UdIwQYMBaAFNgLQZU9gBToGKPM
I8FMT5TRqMEbMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmMzZjNj
YmY5NzFiMzFkNGEwZmI0OGEwNjNlZDg2ZjBiNTk0YWMzZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmE3ODYyZTgtZDJkYi00OGVhLWI4MDktZDRiOTcw
ZDFkODkyLzdlNWM3NzQxZWIwZDk3ODgwNzFkZmRiNTZiOGY5MTM2ZWVjMjQyYzgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82YTc4NjJlOC1kMmRiLTQ4ZWEtYjgwOS1kNGI5
NzBkMWQ4OTIvNmMzZjNjYmY5NzFiMzFkNGEwZmI0OGEwNjNlZDg2ZjBiNTk0YWMz
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMQoMTANBgkqhkiG9w0BAQsFAAOCAQEAHat2mzKlYrmq2Iec
iy1olrsIbIalqCtMPiZmSqUE3Uy9DYBhIz9BjHMD0C9jydJgO4LBn2/TxIic8YN9
X8/wq1yjvRJex8YDvJfLfz1TgsTBbH9qnrV0f+vZdygSt29c6KHSIoelPKgV9YJg
rMyXdKJsIXye+cxCKQIAIg61qlH3ZaxHzn9dhteSGpdld8loQToDYHT8HzoMDFed
QkOHP9LG2jXJOgLvAH8yUOrSDBMICR442UTgNpNBQXaaeaZ7LeYkLfZ6dL84x6XB
yvHgruk/jTw2iz2U/81KYyrH7d/ok0+5q4Y7g6lVOfx2ngXYKY4E60Ltrsq5vsXC
8CMxzA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-ams.rpki-client.org