Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/817439301f3ce8752ea4021e06cf4a1c7518ad28.roa
File:                     817439301f3ce8752ea4021e06cf4a1c7518ad28.roa (raw, json)
Hash identifier:          d6apeXimNZ8s2MQGwzpJMblhu3UgtMVRXqUSNOwSaLc=
Subject key identifier:   69:7C:9A:D8:D7:5D:D5:84:9F:59:EB:EA:47:81:4E:12:CD:F0:49:9F
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1C7FA1
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/817439301f3ce8752ea4021e06cf4a1c7518ad28.roa
Signing time:             Wed 28 Sep 2022 16:22:30 +0000
ROA not before:           Wed 28 Sep 2022 16:21:35 +0000
ROA not after:            Sat 28 Sep 2024 16:21:35 +0000
asID:                     11830
IP address blocks:        190.241.7.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1867681 (0x1c7fa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 28 16:21:35 2022 GMT
            Not After : Sep 28 16:21:35 2024 GMT
        Subject: CN=817439301f3ce8752ea4021e06cf4a1c7518ad28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c8:ac:c8:a8:fd:87:af:df:be:36:37:fb:a3:
                    d8:6d:61:73:cf:4a:d5:a9:da:ee:0a:56:bd:c7:71:
                    67:83:24:9b:8c:7b:52:3f:d2:38:99:39:2a:4b:1d:
                    31:4c:7c:f9:14:cc:ff:96:64:a5:43:e2:34:ef:f0:
                    21:33:2b:f9:45:b4:ae:57:55:16:f8:9b:0c:d0:e3:
                    cd:ff:56:02:7c:d9:10:ae:f5:c0:b0:78:a6:97:70:
                    85:65:7f:17:02:df:52:31:6a:cb:70:f2:f8:1c:73:
                    d3:e8:e1:e2:7b:25:06:5a:f0:b1:56:1c:bf:7d:9e:
                    16:73:39:84:09:d2:04:e7:50:5b:80:de:bd:96:18:
                    b6:35:ce:c6:d8:77:d3:93:be:19:54:08:ae:83:9c:
                    07:86:3c:81:e4:9f:36:1c:d5:d4:9c:04:d2:1e:39:
                    02:77:e1:b8:b7:e7:6e:2f:52:fa:dc:d4:50:c1:4b:
                    df:d3:a4:d6:56:a1:96:4c:ba:f7:2d:94:24:e6:ba:
                    5a:49:e2:71:c0:ea:57:fb:9f:2c:0e:ca:2d:ba:32:
                    00:2d:28:fa:4d:83:43:b1:f1:2e:1e:5e:f3:0c:f4:
                    e6:0b:09:cd:77:56:1f:5d:3b:c3:63:5a:6e:74:c9:
                    07:3c:0b:b9:d9:a7:a4:2d:07:b2:e1:57:4c:9c:6b:
                    d5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7C:9A:D8:D7:5D:D5:84:9F:59:EB:EA:47:81:4E:12:CD:F0:49:9F
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/817439301f3ce8752ea4021e06cf4a1c7518ad28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.241.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:0c:0b:53:0e:27:43:dc:69:aa:db:05:07:56:10:26:71:0e:
         3e:e4:c0:07:b5:69:65:45:0b:17:1d:52:dc:d2:67:99:25:3f:
         02:68:c1:07:c0:03:02:a7:61:18:1c:45:e3:40:39:9c:8c:af:
         88:34:13:99:b0:59:15:1b:fb:5b:43:cb:1c:29:67:7c:a1:89:
         8d:81:75:4d:98:1a:76:0e:1f:98:74:2f:57:86:82:75:bc:db:
         6a:80:0f:27:d8:4b:8c:5d:3d:ae:58:46:e5:8c:d8:7e:87:b8:
         31:8c:c6:65:a8:c0:10:42:f7:77:d9:89:e0:b6:9a:97:a6:94:
         a1:d7:8f:cf:7d:00:38:30:d0:17:b7:2f:16:a0:0d:aa:0c:8b:
         81:87:29:5f:e3:df:61:cc:eb:b4:78:6f:93:13:b3:29:81:88:
         77:9a:b5:b9:ed:58:44:1c:c9:7a:e1:5d:61:2a:d9:2f:e5:54:
         a3:17:0a:d8:25:dd:96:79:9a:29:0f:f7:77:54:11:29:16:7f:
         24:0c:53:02:24:d2:0e:ea:6f:ab:47:e2:08:fd:e3:b7:dc:6a:
         8c:14:50:8e:be:2a:4d:72:b8:4f:6c:10:e3:4a:ea:3a:1e:59:
         d8:0d:75:7b:01:66:30:16:96:a3:b5:3d:43:2e:7f:24:8d:d8:
         49:7b:9c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-fra.rpki-client.org