Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/84b057d1798682eeed1522b065a2d84cfe4373d7.roa
File:                     84b057d1798682eeed1522b065a2d84cfe4373d7.roa (raw, json)
Hash identifier:          fu45vnmaRriCX1v+5OjsfTcav0E9gNjJv+0QJjstcg4=
Subject key identifier:   A3:06:05:53:BB:A3:63:59:31:25:10:5D:A0:03:9F:2D:01:D8:73:5E
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       197944
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/84b057d1798682eeed1522b065a2d84cfe4373d7.roa
Signing time:             Thu 15 Sep 2022 20:49:23 +0000
ROA not before:           Thu 15 Sep 2022 20:47:42 +0000
ROA not after:            Sun 15 Sep 2024 20:47:42 +0000
asID:                     3790
IP address blocks:        190.171.0.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1669444 (0x197944)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 15 20:47:42 2022 GMT
            Not After : Sep 15 20:47:42 2024 GMT
        Subject: CN=84b057d1798682eeed1522b065a2d84cfe4373d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ba:48:d7:16:d5:3d:45:31:89:42:2e:34:2b:
                    a6:ee:5c:90:8d:af:fd:06:43:99:85:cc:f7:5a:1d:
                    13:ec:8d:0b:7f:d7:9f:e3:3e:80:61:52:6b:71:92:
                    d2:a6:09:f0:d8:78:5e:98:e3:e5:ab:9d:81:87:39:
                    d2:59:00:a9:00:c4:bd:01:7d:d8:55:6f:46:56:e5:
                    39:63:0c:3c:40:b7:0c:f0:50:69:ec:7b:9f:28:1e:
                    7f:7f:c6:2a:3f:df:43:a2:f7:38:79:a7:7a:ee:4a:
                    b3:5a:84:7b:b7:59:95:e0:e3:bf:97:50:2b:d9:fb:
                    67:51:a6:a3:99:39:fe:11:9c:7d:4f:23:09:09:ac:
                    ba:9d:fc:7b:f6:03:33:a0:7c:74:c5:50:af:2a:dd:
                    5a:ed:aa:0e:ce:35:b3:17:a4:bb:46:d0:b6:d8:21:
                    57:ba:7f:03:ca:c6:6e:d6:1d:4a:14:69:3a:d0:70:
                    b3:4b:63:0b:27:84:4e:dd:f6:a4:9b:09:19:de:07:
                    a0:bc:07:e0:38:52:22:44:a5:05:75:0f:03:03:13:
                    90:61:62:14:57:03:72:c6:49:fe:c0:07:55:64:09:
                    ae:6f:b7:53:f7:80:69:62:70:9d:e3:35:2d:3b:3f:
                    72:1b:07:25:ad:f8:4c:3c:34:d0:79:f6:9c:0a:08:
                    36:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:06:05:53:BB:A3:63:59:31:25:10:5D:A0:03:9F:2D:01:D8:73:5E
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/84b057d1798682eeed1522b065a2d84cfe4373d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:6e:5a:d4:83:5d:13:f9:27:26:30:d2:01:87:13:ca:84:88:
         03:e3:e7:57:c7:46:0b:ad:67:d1:7b:3d:cc:09:e0:b3:12:ef:
         ec:38:ba:14:cc:19:00:33:d0:bf:ba:ac:f7:25:8a:fb:e9:82:
         ad:95:6b:35:47:91:4d:cf:06:e3:3e:cf:b6:f3:93:97:36:5a:
         66:03:92:93:9f:58:8d:8b:2d:61:02:59:af:cc:67:ea:e1:0c:
         b9:5e:5b:93:0c:1b:13:3c:fa:37:96:77:db:06:15:68:2c:76:
         4a:66:a4:a9:db:d8:27:46:4f:a9:ae:aa:8c:fd:dc:09:33:ee:
         e1:e6:db:63:ab:1a:0a:7f:13:ca:19:72:08:08:f7:00:73:8f:
         d2:7d:af:86:c6:6f:82:67:95:e5:02:24:75:56:8d:05:40:49:
         45:06:e2:17:8c:c3:6b:7a:a3:a2:6e:6d:d4:41:94:e1:d2:21:
         81:b5:78:1b:b6:c0:f4:04:25:bd:3f:73:f5:78:ac:4d:ef:de:
         5e:f0:28:12:e4:40:fb:81:b4:82:9e:68:5a:39:7f:e8:8e:26:
         8e:7d:21:68:bd:70:35:c9:aa:35:c7:47:fe:d9:ec:8f:79:0f:
         3d:ac:5e:6a:8d:7d:60:2b:62:72:58:c8:dd:8a:0a:69:2b:d1:
         67:84:fa:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-ams.rpki-client.org