Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/82371ae8980d29ad46cef64f45ea50601804eb17.roa
File:                     82371ae8980d29ad46cef64f45ea50601804eb17.roa (raw, json)
Hash identifier:          uhaC2aKAktDbARy2iIn+Q7K/UYQBA6D0IG734tHiD2A=
Subject key identifier:   24:1E:B6:40:F0:AF:1A:6A:F6:9D:40:0A:E8:20:EB:03:51:D7:14:96
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1ADDCA
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/82371ae8980d29ad46cef64f45ea50601804eb17.roa
Signing time:             Thu 22 Sep 2022 23:07:33 +0000
ROA not before:           Thu 22 Sep 2022 23:04:05 +0000
ROA not after:            Sun 22 Sep 2024 23:04:05 +0000
asID:                     11830
IP address blocks:        190.10.36.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1760714 (0x1addca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 22 23:04:05 2022 GMT
            Not After : Sep 22 23:04:05 2024 GMT
        Subject: CN=82371ae8980d29ad46cef64f45ea50601804eb17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ea:53:86:1f:bb:09:5e:c6:cd:dc:b6:7a:37:
                    1f:d5:2e:56:09:f6:d8:7a:e9:3a:37:ec:fa:ef:ed:
                    f6:ba:cc:74:eb:51:f5:25:92:22:7a:9a:d8:ad:cc:
                    57:d4:03:30:5f:3e:1b:a4:ab:a8:ec:4b:1c:58:01:
                    06:ad:09:ee:93:3e:8b:df:fa:df:2e:9d:7f:b1:dc:
                    e9:5c:b5:1d:05:ae:05:ab:33:8a:d6:cc:5b:64:80:
                    ee:b7:d5:92:24:67:84:b0:1f:ce:47:c2:42:7a:22:
                    d3:e9:88:65:81:a2:d5:2d:be:db:11:1e:e0:a6:e2:
                    6f:fe:3c:f4:92:ba:5d:08:53:ef:3f:b4:71:da:0e:
                    fc:f7:fc:64:6b:b5:be:fe:de:cb:70:a9:f7:46:a9:
                    a0:96:58:c0:d3:b5:2e:a8:06:e2:0a:eb:2d:b1:8e:
                    26:f3:23:26:c0:1a:98:6e:d8:fb:23:04:16:27:59:
                    a4:93:34:ff:a7:82:78:d9:1e:9d:cc:16:b5:83:7c:
                    d6:cc:c5:86:30:8c:05:5b:ee:38:49:91:c8:84:19:
                    f8:0c:c9:da:18:d4:c9:83:78:e4:b5:81:29:ef:d3:
                    93:26:ca:47:06:9b:47:6d:56:d5:7f:26:48:f0:56:
                    53:6c:f2:34:68:d0:95:b5:bc:27:f6:15:0b:a4:f1:
                    5e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:1E:B6:40:F0:AF:1A:6A:F6:9D:40:0A:E8:20:EB:03:51:D7:14:96
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/82371ae8980d29ad46cef64f45ea50601804eb17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:af:ed:11:78:e0:c5:64:2b:06:a4:8c:9f:46:2b:56:4d:bd:
         b8:8c:ed:7e:5e:c8:74:7c:8d:08:60:09:6d:7e:ad:6b:6a:4a:
         ee:b0:a1:6f:a6:a1:a1:fb:8d:a5:d5:b5:2f:c1:26:2d:83:65:
         72:87:b8:8c:34:df:1f:0c:57:59:92:d8:54:80:9a:19:89:1a:
         fd:ec:23:79:12:37:76:86:be:a3:ec:b0:46:81:ee:01:c5:5f:
         4f:6d:09:ec:5b:47:0a:55:a9:f5:a5:ee:2c:69:1f:10:ae:25:
         88:2b:d2:98:4d:5a:1b:60:20:17:e2:8f:d0:ed:80:b8:3c:3e:
         25:b8:7c:c1:f4:03:a2:9f:c4:9b:f4:ba:64:82:03:73:7b:f7:
         42:d7:9b:6e:27:c0:4c:ce:99:8b:97:5a:da:4e:97:d4:a2:de:
         f2:a6:5d:a5:fb:4f:3f:29:5a:71:7b:87:30:ec:0c:1d:56:b1:
         b2:33:ff:fe:ac:b0:3d:b6:34:c7:b7:b4:8d:fa:69:a6:48:33:
         c8:b1:7c:3c:7a:1d:10:c2:df:77:e6:fb:7e:01:03:5f:6f:2c:
         46:3a:28:92:62:04:ed:4b:35:69:c3:45:e7:06:b2:0f:dd:cd:
         7f:55:2b:fd:0a:35:ee:25:a8:e3:73:69:d0:82:9e:c5:08:93:
         6a:b8:da:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-ams.rpki-client.org