Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/98df96a9d21a189c82eec3682ee58e93bb591a5d.roa
File:                     98df96a9d21a189c82eec3682ee58e93bb591a5d.roa (raw, json)
Hash identifier:          7KiyfA3/F8fhKQP08iGvc01xp4Rd/Yrwu2KENJwgpqc=
Subject key identifier:   4B:AC:F7:11:B6:67:A2:48:F7:D0:07:F5:E7:AF:8F:B2:77:79:3F:56
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1B2192
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/98df96a9d21a189c82eec3682ee58e93bb591a5d.roa
Signing time:             Tue 27 Sep 2022 17:12:32 +0000
ROA not before:           Tue 27 Sep 2022 17:11:54 +0000
ROA not after:            Fri 27 Sep 2024 17:11:54 +0000
asID:                     11830
IP address blocks:        190.10.46.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1778066 (0x1b2192)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 27 17:11:54 2022 GMT
            Not After : Sep 27 17:11:54 2024 GMT
        Subject: CN=98df96a9d21a189c82eec3682ee58e93bb591a5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:20:03:78:b9:73:3d:ee:54:f2:dc:70:58:ed:
                    91:91:90:04:09:23:bd:fe:fb:75:0b:ca:06:af:00:
                    4c:04:6e:f1:01:6b:28:c3:b6:32:a7:dd:c6:e3:50:
                    9a:d2:94:56:e9:3c:b2:b7:7d:cd:a2:57:75:66:d2:
                    8c:cd:26:29:4f:51:d9:44:5b:b2:f8:ab:33:b6:08:
                    0d:ed:91:3c:d7:f4:ad:29:99:84:c6:6e:c5:ba:14:
                    4d:c3:d8:02:8d:5e:2a:55:fd:be:79:43:85:64:c9:
                    d7:71:90:68:7c:f9:4c:2c:67:ac:4a:dc:a2:a6:41:
                    6d:6d:de:2d:97:1a:71:80:c3:b8:42:ac:65:74:22:
                    66:e7:c6:e0:f3:67:7f:57:cd:e0:30:8a:fa:5e:21:
                    4e:16:f1:af:6d:c6:56:d4:04:90:7a:08:1b:6e:7e:
                    07:75:18:ae:07:95:01:54:fa:70:37:77:15:6d:ee:
                    f6:f3:92:10:ad:1f:90:57:80:bd:ef:ee:60:3c:1d:
                    a2:9b:a4:ea:23:e8:6e:0f:00:50:2d:1c:ea:6e:20:
                    45:7f:73:d5:e3:83:df:18:e8:5b:d1:8a:23:e1:95:
                    0f:46:02:41:ce:61:f5:cc:f7:cf:2c:e2:86:2d:ba:
                    96:6b:d6:e0:93:b7:47:7e:46:d1:b0:ac:ec:3a:04:
                    0a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:AC:F7:11:B6:67:A2:48:F7:D0:07:F5:E7:AF:8F:B2:77:79:3F:56
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/98df96a9d21a189c82eec3682ee58e93bb591a5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:9b:99:72:5c:30:e2:37:8d:91:fa:20:39:e1:94:1e:ed:b4:
         85:ce:98:ba:b6:8f:a1:4c:18:0b:97:a7:fe:1a:7a:b5:6c:8a:
         2b:19:cf:c6:42:d6:7b:9e:ed:d3:f5:9e:b3:b5:80:82:e2:5d:
         b7:bf:75:d8:78:ef:9a:2a:f8:f8:59:cf:39:ef:5f:7e:0d:92:
         e6:f7:5d:9a:63:35:ef:02:c6:a3:7f:31:1b:6e:62:46:15:ec:
         64:bd:7a:29:fa:26:98:c7:89:d9:97:74:35:36:36:63:3b:61:
         58:32:33:f3:bc:4c:a4:9e:c1:b6:ac:1e:4d:97:d4:b3:3c:72:
         69:11:37:c8:6a:84:2c:e0:ed:c0:ed:63:39:22:47:7e:db:36:
         af:14:53:5d:a3:c0:6d:0d:cf:0b:67:28:a0:bb:88:f8:f4:62:
         8d:92:5e:13:11:9f:59:23:5c:82:64:8f:97:97:97:1f:d6:d6:
         6d:82:99:2c:a1:e2:bb:5f:15:cf:0b:41:f2:9f:74:6f:1b:49:
         e5:8f:e7:0d:6e:60:cc:e8:6b:d0:c4:0a:87:6b:af:ff:cc:30:
         0d:74:6d:dc:f6:bc:80:df:ed:23:42:ce:ba:f8:d3:ad:22:5b:
         d1:8d:00:49:b1:f9:1f:b7:06:9e:50:f5:69:f4:01:46:09:e9:
         f4:7c:ae:7d
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGyGSMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZj
M2YzY2JmOTcxYjMxZDRhMGZiNDhhMDYzZWQ4NmYwYjU5NGFjM2UwHhcNMjIwOTI3
MTcxMTU0WhcNMjQwOTI3MTcxMTU0WjAzMTEwLwYDVQQDEyg5OGRmOTZhOWQyMWEx
ODljODJlZWMzNjgyZWU1OGU5M2JiNTkxYTVkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA5CADeLlzPe5U8txwWO2RkZAECSO9/vt1C8oGrwBMBG7xAWso
w7Yyp93G41Ca0pRW6Tyyt33Nold1ZtKMzSYpT1HZRFuy+KsztggN7ZE81/StKZmE
xm7FuhRNw9gCjV4qVf2+eUOFZMnXcZBofPlMLGesStyipkFtbd4tlxpxgMO4Qqxl
dCJm58bg82d/V83gMIr6XiFOFvGvbcZW1ASQeggbbn4HdRiuB5UBVPpwN3cVbe72
85IQrR+QV4C97+5gPB2im6TqI+huDwBQLRzqbiBFf3PV44PfGOhb0Yoj4ZUPRgJB
zmH1zPfPLOKGLbqWa9bgk7dHfkbRsKzsOgQKgQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFEus9xG2Z6JI99AH9eevj7J3eT9WMB8GA1UdIwQYMBaAFNgLQZU9gBToGKPM
I8FMT5TRqMEbMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmMzZjNj
YmY5NzFiMzFkNGEwZmI0OGEwNjNlZDg2ZjBiNTk0YWMzZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmE3ODYyZTgtZDJkYi00OGVhLWI4MDktZDRiOTcw
ZDFkODkyLzk4ZGY5NmE5ZDIxYTE4OWM4MmVlYzM2ODJlZTU4ZTkzYmI1OTFhNWQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82YTc4NjJlOC1kMmRiLTQ4ZWEtYjgwOS1kNGI5
NzBkMWQ4OTIvNmMzZjNjYmY5NzFiMzFkNGEwZmI0OGEwNjNlZDg2ZjBiNTk0YWMz
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL4KLjANBgkqhkiG9w0BAQsFAAOCAQEAi5uZclww4jeNkfog
OeGUHu20hc6YuraPoUwYC5en/hp6tWyKKxnPxkLWe57t0/Wes7WAguJdt7912Hjv
mir4+FnPOe9ffg2S5vddmmM17wLGo38xG25iRhXsZL16KfommMeJ2Zd0NTY2Yzth
WDIz87xMpJ7BtqweTZfUszxyaRE3yGqELODtwO1jOSJHfts2rxRTXaPAbQ3PC2co
oLuI+PRijZJeExGfWSNcgmSPl5eXH9bWbYKZLKHiu18VzwtB8p90bxtJ5Y/nDW5g
zOhr0MQKh2uv/8wwDXRt3Pa8gN/tI0LOuvjTrSJb0Y0ASbH5H7cGnlD1afQBRgnp
9HyufQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:49 2024 by rpki-client on console-fra.rpki-client.org