Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/944d8d800c8e90c35951e6e0dcf60bde865b46dc.roa
File:                     944d8d800c8e90c35951e6e0dcf60bde865b46dc.roa (raw, json)
Hash identifier:          Zt5LTrVbMprzMK3Wtuj4OOferywYjmJCNX7pmVbwPFc=
Subject key identifier:   1D:C6:D8:0D:EA:8A:5E:40:02:B8:74:03:A0:37:77:7B:41:56:35:43
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       191722
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/944d8d800c8e90c35951e6e0dcf60bde865b46dc.roa
Signing time:             Thu 15 Sep 2022 20:14:15 +0000
ROA not before:           Thu 15 Sep 2022 20:12:30 +0000
ROA not after:            Sun 15 Sep 2024 20:12:30 +0000
asID:                     3790
IP address blocks:        190.10.0.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1644322 (0x191722)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 15 20:12:30 2022 GMT
            Not After : Sep 15 20:12:30 2024 GMT
        Subject: CN=944d8d800c8e90c35951e6e0dcf60bde865b46dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:38:c1:d0:22:11:c4:15:dd:74:98:8c:fd:b9:
                    68:fb:4b:ac:da:46:76:ba:2d:a6:59:c7:21:a7:90:
                    16:48:97:38:8c:ae:57:7a:2a:19:b0:e8:2c:ea:bd:
                    8d:94:32:ef:88:72:07:d0:79:af:6c:a9:10:60:3e:
                    e1:5c:3a:6f:a2:7a:cd:68:63:3b:03:64:83:e3:ee:
                    68:ce:09:de:6c:eb:97:23:18:ec:d6:9f:76:1f:3d:
                    cd:42:a4:ba:3b:af:7e:9c:1b:cd:59:48:bf:14:58:
                    7e:19:40:54:7c:15:3e:be:79:ee:c2:08:dd:49:2d:
                    61:0c:41:31:f5:38:4d:0f:2f:06:de:34:91:30:69:
                    3a:ac:ea:16:55:ee:21:38:dd:77:7f:6b:3e:72:f4:
                    d8:c1:cb:d4:2d:f8:1c:6f:5f:a5:6e:65:73:8d:56:
                    95:13:de:81:26:c8:09:11:6f:29:4e:c4:97:90:64:
                    62:79:5b:13:70:d7:58:68:ed:90:93:6d:f4:2f:be:
                    ea:74:ed:c4:1c:66:7b:40:d7:0f:d3:35:53:45:ed:
                    a3:c5:42:80:e6:04:1d:61:7a:02:7b:53:61:e4:a9:
                    99:7e:54:bb:3a:14:46:ee:79:e7:8d:21:29:a3:d0:
                    df:21:b4:aa:8a:0e:55:64:1a:8c:1b:57:99:2d:64:
                    3b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C6:D8:0D:EA:8A:5E:40:02:B8:74:03:A0:37:77:7B:41:56:35:43
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/944d8d800c8e90c35951e6e0dcf60bde865b46dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8f:0e:35:95:95:e0:3a:af:73:a9:26:61:7d:ff:ce:08:f8:5f:
         5b:5d:20:76:38:19:a7:f7:ac:87:6e:8b:b0:87:b3:0f:eb:72:
         bf:63:7e:74:00:74:9d:39:0b:a3:6f:fc:40:8f:5f:bb:df:eb:
         f8:44:48:7a:8c:ee:90:36:bb:7b:55:75:86:a5:e4:b9:b6:24:
         17:df:0e:a6:e3:c3:1c:5b:f0:10:cc:41:f3:0c:97:3b:49:67:
         1e:4c:b0:aa:0a:73:d1:50:69:76:19:bb:50:1e:2a:80:96:e2:
         c2:e0:34:0d:0c:02:92:db:1a:2f:de:87:18:81:a3:91:a5:5a:
         a7:9c:56:8d:ac:37:cf:02:1d:7c:ef:cd:39:53:61:d5:8e:31:
         50:a9:74:ae:98:65:71:fe:e8:2f:c7:eb:bb:64:92:45:24:9d:
         03:73:3c:83:08:56:ef:b2:0d:73:d2:a4:5e:1c:cd:70:a7:d1:
         1e:76:2f:e8:34:46:3f:04:67:dd:ee:0b:56:1a:48:f9:fe:6a:
         f0:ed:4c:03:1f:9a:8a:59:32:d2:45:c1:0f:10:a9:e8:bf:d7:
         54:34:29:c8:45:4a:55:24:ab:27:6c:7d:e2:b2:b1:6a:11:33:
         3a:ec:d3:0b:bc:8a:cd:5b:96:af:9d:6d:97:b0:92:c3:c3:12:
         46:44:d0:2a
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGRciMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZj
M2YzY2JmOTcxYjMxZDRhMGZiNDhhMDYzZWQ4NmYwYjU5NGFjM2UwHhcNMjIwOTE1
MjAxMjMwWhcNMjQwOTE1MjAxMjMwWjAzMTEwLwYDVQQDEyg5NDRkOGQ4MDBjOGU5
MGMzNTk1MWU2ZTBkY2Y2MGJkZTg2NWI0NmRjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAujjB0CIRxBXddJiM/blo+0us2kZ2ui2mWcchp5AWSJc4jK5X
eioZsOgs6r2NlDLviHIH0HmvbKkQYD7hXDpvonrNaGM7A2SD4+5ozgnebOuXIxjs
1p92Hz3NQqS6O69+nBvNWUi/FFh+GUBUfBU+vnnuwgjdSS1hDEEx9ThNDy8G3jSR
MGk6rOoWVe4hON13f2s+cvTYwcvULfgcb1+lbmVzjVaVE96BJsgJEW8pTsSXkGRi
eVsTcNdYaO2Qk230L77qdO3EHGZ7QNcP0zVTRe2jxUKA5gQdYXoCe1Nh5KmZflS7
OhRG7nnnjSEpo9DfIbSqig5VZBqMG1eZLWQ7iQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFB3G2A3qil5AArh0A6A3d3tBVjVDMB8GA1UdIwQYMBaAFNgLQZU9gBToGKPM
I8FMT5TRqMEbMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmMzZjNj
YmY5NzFiMzFkNGEwZmI0OGEwNjNlZDg2ZjBiNTk0YWMzZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmE3ODYyZTgtZDJkYi00OGVhLWI4MDktZDRiOTcw
ZDFkODkyLzk0NGQ4ZDgwMGM4ZTkwYzM1OTUxZTZlMGRjZjYwYmRlODY1YjQ2ZGMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82YTc4NjJlOC1kMmRiLTQ4ZWEtYjgwOS1kNGI5
NzBkMWQ4OTIvNmMzZjNjYmY5NzFiMzFkNGEwZmI0OGEwNjNlZDg2ZjBiNTk0YWMz
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEBL4KADANBgkqhkiG9w0BAQsFAAOCAQEAjw41lZXgOq9zqSZh
ff/OCPhfW10gdjgZp/esh26LsIezD+tyv2N+dAB0nTkLo2/8QI9fu9/r+ERIeozu
kDa7e1V1hqXkubYkF98OpuPDHFvwEMxB8wyXO0lnHkywqgpz0VBpdhm7UB4qgJbi
wuA0DQwCktsaL96HGIGjkaVap5xWjaw3zwIdfO/NOVNh1Y4xUKl0rphlcf7oL8fr
u2SSRSSdA3M8gwhW77INc9KkXhzNcKfRHnYv6DRGPwRn3e4LVhpI+f5q8O1MAx+a
ilky0kXBDxCp6L/XVDQpyEVKVSSrJ2x94rKxahEzOuzTC7yKzVuWr51tl7CSw8MS
RkTQKg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:49 2024 by rpki-client on console-fra.rpki-client.org