Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/9ba515e1aab858c39441a5bd8e6eaad4a9697f50.roa
File:                     9ba515e1aab858c39441a5bd8e6eaad4a9697f50.roa (raw, json)
Hash identifier:          3aHShRIPBQ6XYvZSEvPelhoqwdi4pbxS38NNSIpiNvM=
Subject key identifier:   90:D9:37:44:DC:CD:54:5F:65:36:FD:DB:FF:A3:33:A0:AB:76:B7:CF
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1A2A93
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/9ba515e1aab858c39441a5bd8e6eaad4a9697f50.roa
Signing time:             Thu 22 Sep 2022 20:25:56 +0000
ROA not before:           Thu 22 Sep 2022 20:25:25 +0000
ROA not after:            Sun 22 Sep 2024 20:25:25 +0000
asID:                     3790
IP address blocks:        190.241.112.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1714835 (0x1a2a93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 22 20:25:25 2022 GMT
            Not After : Sep 22 20:25:25 2024 GMT
        Subject: CN=9ba515e1aab858c39441a5bd8e6eaad4a9697f50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:18:e9:c6:02:46:bd:00:3d:2b:15:37:ee:1c:
                    52:e0:b5:d5:e0:3a:5a:17:b6:58:7f:e1:61:c7:bc:
                    99:77:a6:1b:1f:b6:5c:76:02:cf:c6:22:be:ed:0e:
                    93:e8:62:59:40:71:b2:d5:5c:41:30:ad:04:b2:4b:
                    73:19:ad:0e:fb:19:57:8c:44:47:f7:37:8c:94:eb:
                    39:cd:8b:81:95:65:3a:d5:ae:cf:76:60:10:70:29:
                    38:ee:73:4f:cf:a2:6c:1f:50:c4:c7:bb:42:33:01:
                    c0:55:48:e4:68:24:aa:92:1e:9a:cb:a8:7c:13:97:
                    74:ad:ac:1d:8c:89:65:15:18:1f:fc:0b:c5:e2:99:
                    d7:e9:1d:88:60:da:a0:8e:32:fb:83:4c:82:4f:42:
                    d8:96:ad:90:37:33:98:ea:e4:92:37:ad:79:76:07:
                    d2:ef:23:f6:72:7b:8d:df:69:07:59:cb:38:fa:91:
                    c4:64:92:ae:4d:cf:b7:94:db:8e:4e:19:3f:45:68:
                    03:3b:dc:93:f9:16:d4:23:de:21:91:e0:0a:e2:b3:
                    c9:21:bc:4c:e2:e7:84:3b:b3:b3:ad:fd:96:ad:9c:
                    d2:1e:86:9b:08:62:33:e3:c4:92:5c:8b:4d:3b:d8:
                    5b:b5:a1:c1:d5:61:bc:9c:66:a1:f7:05:22:3a:78:
                    65:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D9:37:44:DC:CD:54:5F:65:36:FD:DB:FF:A3:33:A0:AB:76:B7:CF
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/9ba515e1aab858c39441a5bd8e6eaad4a9697f50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.241.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:4c:3b:b0:5a:d6:92:6a:ff:98:31:97:28:15:fa:83:e0:ba:
         bc:16:03:41:10:ad:6c:f8:65:1c:db:ca:b1:09:a5:b5:d0:a1:
         8e:0b:7e:00:41:a9:9d:68:d4:cc:80:15:1d:d0:6d:2b:f6:ed:
         78:e4:ef:fa:17:cc:6c:93:10:24:9b:fa:89:96:a4:36:67:5d:
         75:2b:13:8f:67:e0:85:03:d4:74:27:29:78:77:20:6e:4b:3a:
         cb:ef:da:8a:d9:e1:ea:bb:ff:8f:d8:cf:70:d9:b2:fa:09:48:
         d1:54:12:cc:a9:00:af:45:90:94:91:5a:b9:ff:dc:d0:c0:a3:
         84:61:06:7b:ca:fb:3f:82:e0:71:21:ea:65:33:db:95:7e:df:
         b5:65:c9:6f:8e:79:6d:2d:f9:b7:2f:24:fe:0e:fa:96:df:a5:
         88:7d:c9:c6:5a:43:d8:90:fa:03:59:c9:96:e2:9e:1e:f2:dc:
         9b:36:b0:64:15:32:e7:e6:2e:4c:2b:31:4a:00:f5:87:14:4e:
         e8:65:82:b9:b5:70:b2:7e:5a:d7:63:af:3d:33:7d:5e:a9:5d:
         98:b6:0d:33:0e:bf:f6:88:16:d9:fa:a5:19:22:ed:ea:b2:2c:
         5c:a0:6b:67:82:2e:c3:33:8a:1e:f8:f1:12:68:f9:1f:ac:f0:
         ac:cf:a5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-fra.rpki-client.org