Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/8c6392986e33712f7d75ba1d23581526ca76982a.roa
File:                     8c6392986e33712f7d75ba1d23581526ca76982a.roa (raw, json)
Hash identifier:          F5O8pu+vep/KrE09oGYFbwFjB43FVEmthCu29XFeKuY=
Subject key identifier:   BD:09:B3:8B:DB:95:22:5F:50:D3:1A:A8:87:7B:DF:8B:AC:7D:B5:57
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1A1C68
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/8c6392986e33712f7d75ba1d23581526ca76982a.roa
Signing time:             Thu 22 Sep 2022 20:22:33 +0000
ROA not before:           Thu 22 Sep 2022 20:22:02 +0000
ROA not after:            Sun 22 Sep 2024 20:22:02 +0000
asID:                     3790
IP address blocks:        190.241.77.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1711208 (0x1a1c68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 22 20:22:02 2022 GMT
            Not After : Sep 22 20:22:02 2024 GMT
        Subject: CN=8c6392986e33712f7d75ba1d23581526ca76982a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:eb:ce:38:8b:67:71:38:a1:5e:68:5c:3b:38:
                    ed:00:cf:8b:c1:d2:a7:35:d4:97:49:47:5e:04:92:
                    f8:f7:19:d6:35:34:85:4f:b7:25:b6:0d:38:95:4d:
                    d6:6f:c0:dc:b2:90:d3:c6:10:ad:04:fa:18:fc:21:
                    2e:51:6f:1f:69:f3:2e:4b:8d:f6:c1:05:24:4a:e3:
                    be:fa:8f:e1:bc:df:fe:e1:b0:84:b5:96:83:15:1d:
                    5c:b3:22:16:a8:5d:c6:53:09:f7:99:b2:71:a0:fb:
                    fd:19:35:ab:50:61:1a:53:ea:ff:eb:e0:1b:51:57:
                    7d:82:ee:cd:61:62:62:05:94:8a:26:9d:aa:f5:1d:
                    90:7e:42:3d:7d:b3:b8:ec:20:46:4f:99:42:6a:64:
                    89:7a:d4:02:08:45:ff:17:0c:50:4c:ae:f0:94:7c:
                    ce:67:e9:8b:61:81:d4:54:bb:9f:16:fe:de:7f:22:
                    f2:f2:5b:06:3d:83:39:e7:6d:9c:94:d4:33:b1:b0:
                    27:f7:2a:a5:16:28:4a:5f:10:cf:7e:2d:f7:de:81:
                    8c:b0:da:0d:b1:44:79:a9:27:1f:81:e1:95:69:66:
                    fb:00:a6:f0:79:1d:b8:7c:57:26:48:d2:b7:d4:a9:
                    35:8e:39:77:e7:30:f3:67:05:b7:2d:55:06:0c:9b:
                    fa:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:09:B3:8B:DB:95:22:5F:50:D3:1A:A8:87:7B:DF:8B:AC:7D:B5:57
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/8c6392986e33712f7d75ba1d23581526ca76982a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.241.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:ba:7f:3a:8f:49:e5:40:41:63:31:a0:3e:92:49:e8:e8:83:
         c3:ad:29:ea:88:3e:c1:e1:46:37:77:d3:c6:18:5a:5e:0e:4c:
         c6:7c:26:69:6c:22:a1:18:20:77:c1:4b:e0:34:24:e5:b2:cc:
         ba:f5:1e:b4:51:38:c1:db:82:a3:2c:16:29:e2:1d:b8:7f:82:
         12:6d:c1:16:e1:a6:cf:b2:87:2a:46:86:5f:1c:0d:7b:49:db:
         b3:5c:27:0c:e0:7f:e0:17:40:6d:cd:45:8e:10:ac:a3:de:bc:
         bf:f8:13:a1:52:f4:63:68:78:e9:51:ca:e8:5d:a9:4d:b6:b9:
         f3:34:db:3c:74:49:7b:4d:24:94:86:c1:5a:02:6c:5b:5d:83:
         f9:55:a8:7c:ff:0e:dc:73:a0:50:b0:cc:f4:cc:29:06:1d:a2:
         16:d7:fc:47:86:c0:98:f1:fa:48:5c:ef:19:b4:58:97:e3:28:
         2d:a2:c7:0a:c6:a8:76:c9:64:89:88:46:01:e1:ee:b7:29:84:
         62:7c:08:a6:6f:48:8f:d6:25:e9:1d:2f:b7:dd:68:f0:93:da:
         42:d7:4d:ca:4d:f8:cb:a1:00:2a:0e:c4:55:8b:92:63:d5:7f:
         50:19:bf:b8:3b:5a:db:ed:d6:93:cd:42:c0:49:c8:70:9c:3f:
         93:ad:6a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-ams.rpki-client.org