Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/974c8a40177d4266162ef6ee389ca3f0ba81c93d.roa
File:                     974c8a40177d4266162ef6ee389ca3f0ba81c93d.roa (raw, json)
Hash identifier:          h0T6QbIEQEwENMqsR0fFJT2KJwMokTOLMHErllt64ag=
Subject key identifier:   08:8B:95:57:D8:2D:0E:6E:A8:8A:7A:F9:49:82:60:65:08:8B:E1:8B
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1B2BEC
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/974c8a40177d4266162ef6ee389ca3f0ba81c93d.roa
Signing time:             Tue 27 Sep 2022 17:23:56 +0000
ROA not before:           Tue 27 Sep 2022 17:15:50 +0000
ROA not after:            Fri 27 Sep 2024 17:15:50 +0000
asID:                     11830
IP address blocks:        190.10.50.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1780716 (0x1b2bec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 27 17:15:50 2022 GMT
            Not After : Sep 27 17:15:50 2024 GMT
        Subject: CN=974c8a40177d4266162ef6ee389ca3f0ba81c93d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ea:de:ac:07:df:6e:93:9a:e3:ee:7b:98:f2:
                    f9:a9:4a:6d:ec:6b:42:b4:a3:92:3a:4c:50:44:39:
                    0d:1d:ad:40:c0:11:9c:9e:c7:8e:7f:3b:91:7e:01:
                    ae:6f:12:92:21:8a:5d:4b:42:c0:86:57:87:d7:77:
                    36:18:9e:9e:96:88:ef:03:ac:81:d1:d6:43:50:3e:
                    68:f3:3b:f4:d2:86:f1:31:3e:d4:b8:b6:23:50:f2:
                    ed:d1:28:56:3d:b9:fd:42:81:a2:4b:89:c9:5b:c2:
                    04:e2:60:7c:bc:73:a1:dc:3b:b9:87:49:31:a7:ee:
                    ae:4b:72:93:c0:8f:0d:22:ae:ab:8a:54:ff:64:ab:
                    b0:a6:28:c9:52:c0:95:e7:4e:3b:0d:2c:53:4c:79:
                    13:10:7f:11:9d:95:d6:e5:d0:4f:e2:d1:58:7d:77:
                    ff:ad:8e:ce:dd:87:78:89:60:7b:8c:68:a7:e4:11:
                    c3:1d:d1:b3:dc:82:55:5c:dc:5e:83:79:88:79:0e:
                    66:f8:fc:84:eb:de:7f:8b:40:d1:92:1d:94:0d:89:
                    b3:13:ca:5b:0b:c1:33:84:c7:26:b2:b6:9c:5e:4f:
                    db:56:99:a9:a3:47:02:19:a0:d4:e3:7b:4d:2a:41:
                    73:bc:e2:84:93:b8:1b:50:cd:3c:8e:f4:58:6d:5c:
                    3f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:8B:95:57:D8:2D:0E:6E:A8:8A:7A:F9:49:82:60:65:08:8B:E1:8B
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/974c8a40177d4266162ef6ee389ca3f0ba81c93d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:b2:91:d6:f1:48:9b:e9:17:55:dc:36:12:f8:7a:8a:96:80:
         d4:03:78:b9:cf:1b:a2:cd:15:bf:92:7f:1b:88:3a:3c:07:37:
         f1:e8:16:3e:64:1b:5b:2e:be:c9:e6:18:87:41:07:93:e4:f9:
         89:fc:ef:ef:c9:59:0a:3f:a3:a4:b5:b8:51:0b:51:28:f0:d2:
         73:ec:c4:67:db:c9:74:c3:82:62:59:8b:d8:6e:77:34:2f:a4:
         d1:ae:08:e8:ec:f6:3a:6e:e9:22:50:89:33:71:22:a1:6b:77:
         9a:6c:59:da:e7:6f:94:05:7b:6c:09:32:cb:cd:1f:b9:1b:57:
         46:60:95:36:09:dd:e3:af:8e:bd:9c:14:7d:9a:ff:21:50:92:
         27:19:a1:b1:cc:e1:40:14:bc:72:95:0a:e9:48:ab:e9:f3:8e:
         99:ab:85:b4:5f:9d:3c:fb:12:fb:df:3f:af:c9:db:c0:4e:c4:
         cc:4f:a1:1d:13:c1:98:0d:5f:47:6c:ab:c8:32:8d:1a:d3:3f:
         89:43:ba:2b:e0:aa:1e:f8:6c:c5:0c:0b:9f:b3:ef:40:d4:dc:
         fb:f9:6e:5f:89:fd:02:2f:da:f0:95:b4:9c:b9:29:33:9f:4c:
         9c:f9:6c:1a:a3:39:9f:cf:85:82:5f:ee:34:b9:48:a9:fc:45:
         81:7f:63:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-fra.rpki-client.org