Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/923c6b380f071781f7d22751d62d2faa318e31cb.roa
File:                     923c6b380f071781f7d22751d62d2faa318e31cb.roa (raw, json)
Hash identifier:          /xdRebaikICUNCNRZYchEhtD5Xpgq2FAh0xKng+HIlM=
Subject key identifier:   7A:C0:25:E6:E7:EA:8D:DA:E2:D2:FB:A1:1F:A3:99:BA:BF:13:72:5E
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1C6C4E
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/923c6b380f071781f7d22751d62d2faa318e31cb.roa
Signing time:             Wed 28 Sep 2022 16:13:56 +0000
ROA not before:           Wed 28 Sep 2022 16:12:45 +0000
ROA not after:            Sat 28 Sep 2024 16:12:45 +0000
asID:                     11830
IP address blocks:        190.171.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1862734 (0x1c6c4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 28 16:12:45 2022 GMT
            Not After : Sep 28 16:12:45 2024 GMT
        Subject: CN=923c6b380f071781f7d22751d62d2faa318e31cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:69:96:55:61:47:bc:af:a6:a7:27:fa:81:cd:
                    d9:4f:e5:d3:a1:90:84:9d:ef:1a:85:dd:37:70:b7:
                    09:a7:97:31:c8:03:9b:59:67:1c:8b:2b:30:24:05:
                    e4:32:aa:a3:d8:f7:14:7f:2c:97:e4:3a:68:56:6b:
                    ff:2b:a6:64:ec:b9:3e:0c:1e:1f:55:a6:06:cb:2b:
                    32:88:d0:d9:3a:3e:6a:b4:4a:ed:9b:20:6d:7a:a6:
                    bf:d3:af:53:77:20:d8:b2:d3:65:1f:d2:4c:35:ff:
                    96:8f:51:e5:a9:55:09:5b:42:10:a4:cf:97:a2:33:
                    70:09:bb:ff:f1:e2:86:63:e6:a2:cc:51:b2:2d:b2:
                    dd:59:46:a6:66:da:2d:6c:bd:fc:8a:ca:34:42:d5:
                    9d:65:60:b1:c5:31:11:79:ae:75:d9:ba:88:14:b7:
                    8a:f7:0e:25:4d:f2:2c:52:6f:dc:a3:e2:74:32:bd:
                    1a:47:fe:e1:a1:93:cb:86:b9:8e:3c:b6:a4:b1:46:
                    5f:36:8c:58:49:07:17:e3:0e:e2:eb:8e:60:0f:2c:
                    9d:80:da:d1:9c:54:2a:d3:58:a8:d9:ff:c2:41:8e:
                    fb:85:cb:eb:3b:88:a5:b3:ae:53:80:f2:58:dd:c3:
                    a5:b0:d0:ba:7a:05:a5:98:2a:ff:35:ca:59:bc:2b:
                    77:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C0:25:E6:E7:EA:8D:DA:E2:D2:FB:A1:1F:A3:99:BA:BF:13:72:5E
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/923c6b380f071781f7d22751d62d2faa318e31cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:ab:d9:70:ea:7d:e0:97:50:31:7f:d1:70:18:8c:23:2e:6d:
         e9:46:51:e9:69:1e:dc:55:ff:22:5c:f5:92:e0:de:bf:7b:6f:
         36:72:b9:d7:ab:d7:d8:26:cd:04:ce:bf:1e:79:7d:1e:7a:6e:
         75:6a:2f:04:7a:7f:fd:f6:0d:55:de:48:09:5c:c5:7c:2e:2a:
         00:6a:43:5b:97:37:c6:e7:08:3f:ab:db:2f:83:8a:8d:f0:23:
         77:33:36:b2:66:be:b8:ea:01:14:da:51:92:0e:8f:b9:c7:a0:
         0b:8e:5b:0d:d4:73:b3:d0:89:9d:eb:31:51:49:45:17:b8:87:
         b2:5d:90:8b:67:b1:70:d8:0e:12:17:af:5e:9d:9d:1a:49:a6:
         ba:93:6a:a3:7f:46:8e:6b:82:47:ad:c4:f2:f5:1f:02:bc:1c:
         91:3d:fa:1f:24:0c:a4:bb:4c:0c:5d:bc:fb:e0:3c:66:76:c6:
         03:25:9a:7d:db:6a:6e:78:79:fc:ef:43:32:fb:26:d9:13:99:
         59:e1:13:26:fa:d4:35:ea:4f:cd:a0:fd:4e:ff:10:7b:49:4f:
         44:b8:92:c2:eb:cd:0b:8c:30:8e:88:a5:d8:17:b9:8c:64:21:
         08:83:ee:49:8c:4c:9e:10:df:c6:7c:bd:19:4e:40:83:2b:6c:
         8d:f9:31:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-fra.rpki-client.org