Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/9de84577439ba6c1e3db1594d2046b5f15def92f.roa
File:                     9de84577439ba6c1e3db1594d2046b5f15def92f.roa (raw, json)
Hash identifier:          OSn2OBV61x4MdoDVOlaNpkywn0ocuRX59u+FINLeZpo=
Subject key identifier:   94:D6:43:36:FC:24:96:47:ED:3F:F9:8A:DB:9A:44:BB:B3:B6:22:FA
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1C5E5E
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/9de84577439ba6c1e3db1594d2046b5f15def92f.roa
Signing time:             Wed 28 Sep 2022 16:10:27 +0000
ROA not before:           Wed 28 Sep 2022 16:09:31 +0000
ROA not after:            Sat 28 Sep 2024 16:09:31 +0000
asID:                     11830
IP address blocks:        190.171.12.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1859166 (0x1c5e5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 28 16:09:31 2022 GMT
            Not After : Sep 28 16:09:31 2024 GMT
        Subject: CN=9de84577439ba6c1e3db1594d2046b5f15def92f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:04:a5:53:44:ad:e5:39:2a:16:57:f1:2a:f2:
                    8c:ed:1e:5d:02:e8:df:44:ee:7b:fa:51:3a:7b:14:
                    1d:ee:da:05:b2:17:2d:47:c1:46:47:fe:88:34:a5:
                    31:d6:cf:04:b3:a0:84:f8:f8:e7:3a:98:20:49:8a:
                    2b:42:dd:3a:ad:d7:06:80:54:0f:3d:71:01:ac:58:
                    46:0c:94:78:2c:11:51:80:9a:68:8d:1f:81:d9:54:
                    aa:58:03:4e:4c:ad:54:a4:b8:05:a8:09:c5:fd:53:
                    e4:a9:21:12:db:21:b9:ef:59:25:e7:eb:ef:fa:fc:
                    47:cf:64:17:71:47:2b:65:d8:21:1e:74:74:cd:5b:
                    8d:f2:79:9a:82:4b:3a:f7:04:8f:eb:3c:35:1e:7d:
                    19:45:15:03:ba:c5:00:3c:a6:fb:a9:8c:d6:76:c6:
                    06:e5:ac:86:6b:92:97:94:9e:c9:cf:dd:c1:c0:56:
                    29:cb:eb:e5:d2:a7:bc:2f:55:2f:aa:3e:7c:a7:b9:
                    fc:59:63:7f:42:09:0e:73:d4:74:d6:11:1f:e7:71:
                    92:af:f3:58:77:09:bc:3d:c1:a4:5d:88:f3:21:91:
                    20:01:1a:94:99:49:82:c3:be:10:69:1b:da:4d:4c:
                    27:56:bb:78:1b:81:06:6d:44:3a:83:64:d9:4f:a1:
                    fa:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D6:43:36:FC:24:96:47:ED:3F:F9:8A:DB:9A:44:BB:B3:B6:22:FA
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/9de84577439ba6c1e3db1594d2046b5f15def92f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:06:06:7d:9f:96:83:d7:48:6f:41:64:08:50:eb:18:4d:6a:
         58:ff:30:c8:e6:78:c0:9c:07:35:6d:e1:a7:98:7d:66:29:8e:
         03:2a:56:8f:54:e3:41:d4:90:ca:95:e5:84:ae:c8:3e:59:e8:
         ac:53:49:b0:06:79:47:01:94:d7:e3:08:4e:74:02:08:0e:25:
         21:8b:4b:85:38:f8:f7:56:a6:47:93:b6:b5:ac:c4:96:49:39:
         60:95:52:ca:ff:29:d3:f0:4b:8c:0b:f8:c8:07:74:fd:d0:27:
         86:61:00:5d:68:e4:f6:bf:44:32:8f:e8:e7:e2:f4:54:6f:b3:
         a1:b3:c9:6b:9d:9f:cc:fd:3c:6d:e1:ac:45:70:60:64:bb:00:
         89:c0:6c:15:c9:73:0a:c7:5d:65:a4:a5:f8:c0:7f:d8:04:a8:
         cc:e0:e8:8b:7e:cd:76:e8:43:f8:6f:c4:56:3c:8f:8f:cf:a0:
         1c:00:d1:a1:95:27:bd:66:97:ea:a9:e8:92:1c:ca:5b:45:a1:
         9f:7f:e5:14:df:5f:cc:24:60:8c:61:cb:2a:43:24:dd:be:99:
         27:31:8f:f0:1f:c8:2a:82:34:c3:2a:13:fa:e6:6a:57:33:5d:
         e1:6b:0d:5e:6a:cd:14:5b:49:a9:ea:ba:96:45:2d:27:98:e4:
         9a:50:98:f8
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHF5eMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZj
M2YzY2JmOTcxYjMxZDRhMGZiNDhhMDYzZWQ4NmYwYjU5NGFjM2UwHhcNMjIwOTI4
MTYwOTMxWhcNMjQwOTI4MTYwOTMxWjAzMTEwLwYDVQQDEyg5ZGU4NDU3NzQzOWJh
NmMxZTNkYjE1OTRkMjA0NmI1ZjE1ZGVmOTJmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkgSlU0St5TkqFlfxKvKM7R5dAujfRO57+lE6exQd7toFshct
R8FGR/6INKUx1s8Es6CE+PjnOpggSYorQt06rdcGgFQPPXEBrFhGDJR4LBFRgJpo
jR+B2VSqWANOTK1UpLgFqAnF/VPkqSES2yG571kl5+vv+vxHz2QXcUcrZdghHnR0
zVuN8nmagks69wSP6zw1Hn0ZRRUDusUAPKb7qYzWdsYG5ayGa5KXlJ7Jz93BwFYp
y+vl0qe8L1Uvqj58p7n8WWN/QgkOc9R01hEf53GSr/NYdwm8PcGkXYjzIZEgARqU
mUmCw74QaRvaTUwnVrt4G4EGbUQ6g2TZT6H6EwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJTWQzb8JJZH7T/5ituaRLuztiL6MB8GA1UdIwQYMBaAFNgLQZU9gBToGKPM
I8FMT5TRqMEbMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmMzZjNj
YmY5NzFiMzFkNGEwZmI0OGEwNjNlZDg2ZjBiNTk0YWMzZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmE3ODYyZTgtZDJkYi00OGVhLWI4MDktZDRiOTcw
ZDFkODkyLzlkZTg0NTc3NDM5YmE2YzFlM2RiMTU5NGQyMDQ2YjVmMTVkZWY5MmYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82YTc4NjJlOC1kMmRiLTQ4ZWEtYjgwOS1kNGI5
NzBkMWQ4OTIvNmMzZjNjYmY5NzFiMzFkNGEwZmI0OGEwNjNlZDg2ZjBiNTk0YWMz
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL6rDDANBgkqhkiG9w0BAQsFAAOCAQEAlgYGfZ+Wg9dIb0Fk
CFDrGE1qWP8wyOZ4wJwHNW3hp5h9ZimOAypWj1TjQdSQypXlhK7IPlnorFNJsAZ5
RwGU1+MITnQCCA4lIYtLhTj491amR5O2tazElkk5YJVSyv8p0/BLjAv4yAd0/dAn
hmEAXWjk9r9EMo/o5+L0VG+zobPJa52fzP08beGsRXBgZLsAicBsFclzCsddZaSl
+MB/2ASozODoi37NduhD+G/EVjyPj8+gHADRoZUnvWaX6qnokhzKW0Whn3/lFN9f
zCRgjGHLKkMk3b6ZJzGP8B/IKoI0wyoT+uZqVzNd4WsNXmrNFFtJqeq6lkUtJ5jk
mlCY+A==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-ams.rpki-client.org