Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/899450e306f0fb1d522d2d8ae472dad7ef36ac1f.roa
File:                     899450e306f0fb1d522d2d8ae472dad7ef36ac1f.roa (raw, json)
Hash identifier:          8XTAfoAMxFZ7iv5FLm3XROxacX4kznuXxEB2kFWFFDk=
Subject key identifier:   7D:34:7B:AB:A3:23:EF:A7:B1:72:67:CA:0F:4F:92:92:CE:C5:6D:AE
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       19F241
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/899450e306f0fb1d522d2d8ae472dad7ef36ac1f.roa
Signing time:             Thu 22 Sep 2022 20:12:09 +0000
ROA not before:           Thu 22 Sep 2022 20:11:05 +0000
ROA not after:            Sun 22 Sep 2024 20:11:05 +0000
asID:                     3790
IP address blocks:        190.241.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1700417 (0x19f241)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 22 20:11:05 2022 GMT
            Not After : Sep 22 20:11:05 2024 GMT
        Subject: CN=899450e306f0fb1d522d2d8ae472dad7ef36ac1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d3:5a:48:5a:eb:39:94:30:97:1d:6b:af:cd:
                    ac:68:5c:fb:c9:88:12:8c:fb:e4:e0:60:57:44:e0:
                    a9:9e:27:11:00:9a:29:0e:20:ef:fc:25:22:46:d7:
                    27:cf:c1:5b:1e:43:d7:be:6f:4a:4f:fc:f8:d9:e9:
                    97:92:37:25:1c:f9:c0:b5:16:db:6b:0d:99:73:43:
                    95:49:26:97:be:5c:77:4c:8d:b8:ae:de:18:ce:ab:
                    5f:d8:c6:58:9b:cd:ed:81:dd:85:01:23:ed:e7:c8:
                    87:71:42:2b:96:3f:1d:22:29:cb:69:b7:f7:b3:1b:
                    7a:cb:b2:45:1d:15:77:1b:e5:cc:b4:8e:cb:c2:58:
                    c5:37:47:28:bd:a0:10:75:16:5a:ff:ea:32:e2:08:
                    4b:ec:f1:5d:f3:cf:68:d8:de:7c:2d:4c:08:a3:37:
                    80:5f:e0:f4:9a:4a:58:ec:11:42:2b:d0:77:2f:4b:
                    f8:43:87:06:97:58:ef:62:6b:18:44:94:70:d0:66:
                    1a:73:69:cb:56:83:d9:ac:4e:fd:ec:a0:a6:3e:dc:
                    39:0b:2b:5f:74:5a:bd:0d:c0:9f:b3:2d:7f:80:03:
                    0d:cf:be:6e:5a:68:ff:b3:6c:61:ca:ce:83:dd:b6:
                    7b:ac:d7:ef:29:c2:76:84:f1:c2:79:7f:a2:6d:62:
                    3e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:34:7B:AB:A3:23:EF:A7:B1:72:67:CA:0F:4F:92:92:CE:C5:6D:AE
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/899450e306f0fb1d522d2d8ae472dad7ef36ac1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.241.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:1b:99:f5:76:c3:b8:03:4b:d7:c1:2f:45:30:0f:13:f2:57:
         fd:18:93:13:5c:ad:33:e3:c6:24:ae:ee:35:d7:d5:c7:1e:8e:
         b5:70:83:a2:d6:cf:1e:24:be:20:f8:86:95:25:7a:2c:65:76:
         c8:5e:3e:fe:4d:f0:60:63:25:f8:32:d6:c5:e5:89:bf:7f:f3:
         07:af:e3:69:b1:84:f1:3c:c2:ac:d1:e4:c6:f3:5e:0e:4e:d2:
         91:f5:b9:7b:f3:5c:d6:af:32:24:9f:7a:e5:c8:59:d9:92:52:
         22:17:2d:e8:4f:a4:18:d9:9c:78:49:c6:49:b4:1a:1f:13:a4:
         a4:3b:c6:56:ea:00:7f:11:3f:d3:d9:a7:f1:33:bb:30:da:54:
         51:e2:88:d7:11:1f:89:82:f0:03:41:89:86:62:e9:7b:9b:8d:
         be:54:9f:95:1b:47:8f:a4:d4:d7:5b:0e:ce:dc:49:1c:39:66:
         6f:98:9a:85:c0:da:72:38:14:4c:fa:fa:96:f6:6a:00:c6:c1:
         8c:9a:26:a4:9c:bf:04:55:a8:3c:70:b4:4e:22:fc:08:23:b2:
         e9:3a:e1:44:a1:dd:c9:31:72:ef:b6:06:65:ad:ab:93:ea:d6:
         80:7c:58:42:8b:f0:b4:81:a0:80:fe:56:7a:4e:1b:74:3d:39:
         64:d3:52:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:59 2024 by rpki-client on console-ams.rpki-client.org