Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/9b1c6df8e349ebfa8d48152cb69247c114876920.roa
File:                     9b1c6df8e349ebfa8d48152cb69247c114876920.roa (raw, json)
Hash identifier:          y5wk8wBF7iEw+F/lbhg7ibAYEAAwkrangKAy2SMRpxA=
Subject key identifier:   D5:29:B9:17:32:88:6B:C6:60:D8:CE:65:35:E9:64:DD:34:5A:0A:A2
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1C957C
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/9b1c6df8e349ebfa8d48152cb69247c114876920.roa
Signing time:             Wed 28 Sep 2022 16:27:58 +0000
ROA not before:           Wed 28 Sep 2022 16:26:52 +0000
ROA not after:            Sat 28 Sep 2024 16:26:52 +0000
asID:                     11830
IP address blocks:        190.241.74.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1873276 (0x1c957c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 28 16:26:52 2022 GMT
            Not After : Sep 28 16:26:52 2024 GMT
        Subject: CN=9b1c6df8e349ebfa8d48152cb69247c114876920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:09:9b:1c:de:7b:78:9b:7f:77:d2:f1:c6:d4:
                    cd:45:fb:9f:e3:70:89:3c:d4:52:ef:53:4f:3d:98:
                    31:42:ae:0d:e0:79:7f:42:34:66:3c:3a:25:c7:fb:
                    6f:31:a6:4a:2e:af:e6:17:8d:51:ee:51:0f:92:6e:
                    99:4b:8a:2b:51:35:ea:2b:0b:b6:6d:13:c5:9b:30:
                    de:4b:62:a3:ad:0c:dd:8a:24:48:25:19:d3:ff:e2:
                    11:5c:fe:42:00:7f:a2:5f:a0:dc:38:9c:58:a9:d9:
                    97:23:ae:54:3c:13:0f:ad:04:01:de:95:0c:67:f4:
                    20:a2:5b:4e:a4:bb:03:e7:c3:78:1e:f8:95:68:33:
                    0b:2f:b6:42:9b:a8:e9:e0:98:53:89:9b:71:53:51:
                    9f:10:2f:8c:2a:7c:7b:44:bf:61:40:5c:14:0e:81:
                    14:e5:2d:1e:fa:4b:7f:bf:ae:01:e3:f0:80:88:c8:
                    1b:07:1e:47:1f:0e:93:bf:44:66:94:34:ee:a5:94:
                    2c:51:a3:30:6f:54:cb:12:3a:58:c6:2b:f4:87:c2:
                    51:f1:7d:6b:e3:b4:07:98:6e:85:c7:05:7c:35:cc:
                    21:88:bc:3b:a2:d1:4d:7d:08:bd:8b:f3:e7:1e:56:
                    4f:1f:5c:3f:66:e8:9b:d8:b6:4e:c3:76:86:f8:a5:
                    04:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:29:B9:17:32:88:6B:C6:60:D8:CE:65:35:E9:64:DD:34:5A:0A:A2
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/9b1c6df8e349ebfa8d48152cb69247c114876920.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.241.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:6c:7e:dc:b8:1f:4b:e6:af:f1:57:e8:ec:70:21:31:ae:f5:
         75:af:d1:0c:09:18:67:76:b3:57:69:fe:d6:11:15:ff:67:c8:
         7a:8c:08:0b:1d:b3:d1:ee:a0:ff:0e:e6:eb:dd:20:be:d1:e4:
         d5:35:a2:2f:0f:53:fa:56:f4:9f:c8:38:23:a2:4d:71:4e:b7:
         f1:da:ba:ee:28:76:d4:1d:9e:0e:f3:ea:9b:77:bd:f9:60:38:
         5f:83:85:e1:ad:41:3c:8a:21:99:d0:c4:cb:a0:a7:ac:e1:42:
         c0:26:cc:37:72:8f:e4:f8:d9:6c:ab:13:1a:c9:2e:24:db:e8:
         a2:fa:7e:e1:b1:a0:68:2f:26:65:a3:16:d2:ed:6b:80:a5:6e:
         f6:61:b1:7a:a4:b4:b8:c9:17:fc:5c:51:85:56:cb:2c:f5:ce:
         c0:d0:a4:ea:e5:83:71:0c:0c:f8:c1:5e:8b:ce:4f:36:ae:f6:
         6b:8c:a5:0b:28:ad:ae:71:f2:0f:b7:dc:7d:36:e2:b5:f1:8d:
         17:25:80:89:61:fa:47:09:ce:a6:ff:1e:25:71:f6:24:ed:93:
         50:04:2c:ac:c5:f8:74:62:27:eb:11:c2:0d:0e:bb:58:cc:eb:
         3b:2b:ac:18:bf:11:58:d2:66:94:22:48:b0:5d:d6:a8:69:a1:
         b7:74:43:d0
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHJV8MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZj
M2YzY2JmOTcxYjMxZDRhMGZiNDhhMDYzZWQ4NmYwYjU5NGFjM2UwHhcNMjIwOTI4
MTYyNjUyWhcNMjQwOTI4MTYyNjUyWjAzMTEwLwYDVQQDEyg5YjFjNmRmOGUzNDll
YmZhOGQ0ODE1MmNiNjkyNDdjMTE0ODc2OTIwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqQmbHN57eJt/d9LxxtTNRfuf43CJPNRS71NPPZgxQq4N4Hl/
QjRmPDolx/tvMaZKLq/mF41R7lEPkm6ZS4orUTXqKwu2bRPFmzDeS2KjrQzdiiRI
JRnT/+IRXP5CAH+iX6DcOJxYqdmXI65UPBMPrQQB3pUMZ/QgoltOpLsD58N4HviV
aDMLL7ZCm6jp4JhTiZtxU1GfEC+MKnx7RL9hQFwUDoEU5S0e+kt/v64B4/CAiMgb
Bx5HHw6Tv0RmlDTupZQsUaMwb1TLEjpYxiv0h8JR8X1r47QHmG6FxwV8NcwhiLw7
otFNfQi9i/PnHlZPH1w/Zuib2LZOw3aG+KUEWQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNUpuRcyiGvGYNjOZTXpZN00WgqiMB8GA1UdIwQYMBaAFNgLQZU9gBToGKPM
I8FMT5TRqMEbMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmMzZjNj
YmY5NzFiMzFkNGEwZmI0OGEwNjNlZDg2ZjBiNTk0YWMzZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmE3ODYyZTgtZDJkYi00OGVhLWI4MDktZDRiOTcw
ZDFkODkyLzliMWM2ZGY4ZTM0OWViZmE4ZDQ4MTUyY2I2OTI0N2MxMTQ4NzY5MjAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82YTc4NjJlOC1kMmRiLTQ4ZWEtYjgwOS1kNGI5
NzBkMWQ4OTIvNmMzZjNjYmY5NzFiMzFkNGEwZmI0OGEwNjNlZDg2ZjBiNTk0YWMz
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL7xSjANBgkqhkiG9w0BAQsFAAOCAQEARmx+3LgfS+av8Vfo
7HAhMa71da/RDAkYZ3azV2n+1hEV/2fIeowICx2z0e6g/w7m690gvtHk1TWiLw9T
+lb0n8g4I6JNcU638dq67ih21B2eDvPqm3e9+WA4X4OF4a1BPIohmdDEy6CnrOFC
wCbMN3KP5PjZbKsTGskuJNvoovp+4bGgaC8mZaMW0u1rgKVu9mGxeqS0uMkX/FxR
hVbLLPXOwNCk6uWDcQwM+MFei85PNq72a4ylCyitrnHyD7fcfTbitfGNFyWAiWH6
RwnOpv8eJXH2JO2TUAQsrMX4dGIn6xHCDQ67WMzrOyusGL8RWNJmlCJIsF3WqGmh
t3RD0A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:49 2024 by rpki-client on console-fra.rpki-client.org