Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/9886e302889fc0c16e9fb3dcca767a7754fac6af.roa
File:                     9886e302889fc0c16e9fb3dcca767a7754fac6af.roa (raw, json)
Hash identifier:          Px66iDA8nZr7CTfxLYpHZ0tMRsF0WqQunveR/JFaFCk=
Subject key identifier:   3E:EB:F9:EC:48:E2:A3:8D:EC:4E:B1:34:69:01:35:6F:D3:14:3E:07
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1C0861
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/9886e302889fc0c16e9fb3dcca767a7754fac6af.roa
Signing time:             Wed 28 Sep 2022 15:47:12 +0000
ROA not before:           Wed 28 Sep 2022 15:46:29 +0000
ROA not after:            Sat 28 Sep 2024 15:46:29 +0000
asID:                     11830
IP address blocks:        190.10.109.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1837153 (0x1c0861)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 28 15:46:29 2022 GMT
            Not After : Sep 28 15:46:29 2024 GMT
        Subject: CN=9886e302889fc0c16e9fb3dcca767a7754fac6af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:72:9a:08:6f:22:3d:b3:84:af:bc:f6:6f:8c:
                    7c:11:05:70:19:0f:f3:06:a5:26:b4:b0:04:3c:d9:
                    fa:d1:43:b4:3a:c2:e0:93:a8:8f:59:5f:28:2d:84:
                    aa:4a:5b:21:a6:ac:dc:c0:4c:e5:1b:23:fd:7b:2e:
                    f7:c7:b3:c6:84:09:ae:b0:6a:c6:1b:68:6a:40:0e:
                    23:fe:35:06:6b:9c:eb:8b:eb:df:69:ed:a4:7c:88:
                    6a:8e:f2:6c:0e:6a:58:c7:66:91:bb:d9:2e:1a:ed:
                    7a:e0:e8:48:7e:b9:a9:d5:8b:c4:4e:98:d0:c4:f4:
                    61:d1:fa:82:a6:22:ff:0f:f8:69:53:db:06:bf:00:
                    34:62:a8:a7:01:4c:1f:0e:53:ee:71:8c:e6:15:3e:
                    0e:ee:b8:ca:f2:85:b8:5c:64:d1:f9:cc:76:62:f2:
                    ca:de:5f:55:2e:e4:b8:61:60:b8:21:6e:77:fb:6c:
                    21:c9:94:83:46:67:82:6d:4c:59:a6:13:9b:0c:99:
                    b2:e3:a0:d1:85:45:53:d8:28:0d:d8:ff:b8:45:53:
                    1a:f8:12:ca:51:e7:03:8b:78:1a:4f:0c:c9:b0:7f:
                    c4:4b:03:4a:b2:46:fd:e8:c8:90:57:d7:a5:a2:ac:
                    c7:b2:f0:a7:c1:0e:39:28:2c:35:e6:b4:c0:17:d9:
                    bd:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:EB:F9:EC:48:E2:A3:8D:EC:4E:B1:34:69:01:35:6F:D3:14:3E:07
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/9886e302889fc0c16e9fb3dcca767a7754fac6af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:fe:29:3d:d8:e8:5d:43:07:8e:61:af:c6:8b:6b:24:a1:f3:
         dc:2e:be:89:50:4b:67:80:39:f7:fe:04:cf:26:04:0d:33:42:
         d3:b9:ed:d5:bc:4c:ff:56:9f:e8:d5:db:f6:ae:d1:bf:c9:7e:
         97:d7:53:c9:1b:f3:f5:dd:0a:b7:a2:e0:6f:a7:fb:9f:5c:62:
         27:05:89:77:90:89:ba:03:97:18:8c:79:05:53:06:7a:0e:90:
         a0:10:02:65:e0:aa:a7:a9:b0:9e:2d:40:a6:76:3b:4e:45:bf:
         5d:c1:6f:8a:17:5f:ce:68:b5:f3:ae:f5:12:3f:7b:ed:69:3c:
         21:b3:85:6f:eb:39:5b:04:53:13:4f:a7:84:ad:80:4e:8f:24:
         68:f2:49:3a:45:65:7c:77:a0:d2:f2:5e:78:f3:2f:d5:52:4b:
         a3:6f:4c:c7:3b:96:c0:19:3f:12:60:44:79:24:c4:a4:4b:d8:
         fb:79:20:17:2f:8e:e3:66:03:8a:d5:36:a2:19:f1:7e:c0:1c:
         bf:73:bd:8e:63:a3:30:83:3e:57:f5:1a:d3:c0:5c:16:ea:51:
         18:77:88:93:c8:d4:dd:2d:f6:81:8f:f2:41:72:52:16:28:ef:
         5b:5a:2f:79:00:74:5b:32:e5:46:e5:bf:73:9c:95:8f:3a:85:
         7f:c5:44:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-fra.rpki-client.org