Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/9597e69d733a43bf4d58e3e725fd40c338296dc8.roa
File:                     9597e69d733a43bf4d58e3e725fd40c338296dc8.roa (raw, json)
Hash identifier:          HxzRx2peJ1dKEtKfUHMoNqpKSqN81Awi8+l+JKx0BRo=
Subject key identifier:   5C:73:47:08:2B:EF:17:16:67:E9:2A:0B:07:24:75:E0:B4:7C:8B:DB
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1A39B2
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/9597e69d733a43bf4d58e3e725fd40c338296dc8.roa
Signing time:             Thu 22 Sep 2022 20:27:31 +0000
ROA not before:           Thu 22 Sep 2022 20:27:10 +0000
ROA not after:            Sun 22 Sep 2024 20:27:10 +0000
asID:                     3790
IP address blocks:        190.241.121.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1718706 (0x1a39b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 22 20:27:10 2022 GMT
            Not After : Sep 22 20:27:10 2024 GMT
        Subject: CN=9597e69d733a43bf4d58e3e725fd40c338296dc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fc:c1:83:80:83:92:64:01:f6:ad:81:61:36:
                    8d:17:44:6b:91:9c:2c:ab:df:f6:9c:c7:58:79:1e:
                    f4:e4:fe:0f:47:43:91:58:4e:f4:37:8a:ba:61:db:
                    00:29:a3:68:39:38:59:3b:16:8b:ed:f6:ab:b3:e2:
                    73:c6:2c:33:9a:9c:8d:13:83:34:4b:05:1f:ea:91:
                    b9:a7:0c:a4:39:a3:12:fe:16:3b:30:46:2d:ca:96:
                    ed:2f:2e:02:ac:a8:9f:82:1e:6a:39:28:10:43:7a:
                    d2:08:c8:0a:f4:33:e6:cc:da:22:73:3d:5b:4b:22:
                    c3:d9:9f:e9:bc:1a:3d:de:af:53:02:1c:c3:4f:98:
                    a7:70:3e:5a:07:07:47:a1:80:7e:98:f9:62:c4:b8:
                    a3:9e:94:f1:cc:78:8f:95:5b:4b:0e:17:c1:6f:b5:
                    fc:c2:4a:49:bf:73:27:74:4b:91:16:94:71:6f:68:
                    53:0d:7c:ec:99:89:a8:35:56:bc:4b:55:8b:20:49:
                    26:4e:95:21:70:eb:4c:8a:2c:4e:e6:c1:44:68:3d:
                    03:59:50:09:0f:02:8e:46:3b:9f:2d:3c:91:7d:3e:
                    f9:ae:63:82:cd:6f:ab:97:8e:28:82:9b:eb:63:16:
                    e4:bf:a1:2c:7b:6e:2d:1e:ee:38:91:ba:c9:a0:5b:
                    14:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:73:47:08:2B:EF:17:16:67:E9:2A:0B:07:24:75:E0:B4:7C:8B:DB
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/9597e69d733a43bf4d58e3e725fd40c338296dc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.241.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:d6:7a:66:4c:14:dc:e1:42:90:57:57:29:d8:e2:5e:d8:77:
         c6:f7:ed:21:f5:b0:bf:77:56:9b:b1:d0:c4:59:d1:21:f1:1e:
         3f:10:27:d9:aa:ef:09:eb:e5:78:a9:b4:c0:c9:18:be:56:6a:
         49:1e:9d:77:90:6d:1e:4a:10:33:57:20:46:e7:ab:49:49:44:
         60:d4:18:9f:4a:7a:54:82:6c:72:4c:34:ee:e2:ba:1a:ea:c9:
         48:40:b6:43:98:db:9b:fd:b9:82:46:f9:aa:2d:b1:2c:7f:80:
         aa:0e:34:77:8a:ba:3e:2e:36:24:87:4b:a5:98:1b:c7:42:a7:
         f6:00:67:71:e1:08:6a:dc:af:c4:fd:3a:b3:1e:2d:20:55:79:
         41:19:ac:58:87:3a:5a:dc:eb:57:e6:23:30:40:48:44:bd:ca:
         cf:19:41:d7:7c:51:fa:db:c3:60:95:a5:a9:08:89:37:cd:03:
         e0:06:cf:47:bb:69:96:fa:27:fb:8b:6c:15:83:6c:5d:f7:65:
         29:3b:2d:78:7e:00:3f:43:d7:d5:20:e9:b9:bf:d5:12:6f:cf:
         3f:8f:55:9a:ad:1b:76:86:c2:cd:a0:0b:92:11:0a:0b:8a:65:
         a1:cb:e8:be:f4:69:c4:bb:c6:04:eb:48:75:05:be:39:89:b5:
         f0:53:55:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-fra.rpki-client.org