Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/9e9241ead43ac4284262f8f6593d4f8d5d9eac79.roa
File:                     9e9241ead43ac4284262f8f6593d4f8d5d9eac79.roa (raw, json)
Hash identifier:          FheFUAQJ0QUneYh4OUYxMfdwUngOwGoMt6x7+T9gjjE=
Subject key identifier:   75:F6:F6:D5:F6:0E:A8:14:9E:CA:25:76:38:D3:A2:8C:74:ED:F2:C3
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       192F83
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/9e9241ead43ac4284262f8f6593d4f8d5d9eac79.roa
Signing time:             Thu 15 Sep 2022 20:21:29 +0000
ROA not before:           Thu 15 Sep 2022 20:19:35 +0000
ROA not after:            Sun 15 Sep 2024 20:19:35 +0000
asID:                     3790
IP address blocks:        190.10.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1650563 (0x192f83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 15 20:19:35 2022 GMT
            Not After : Sep 15 20:19:35 2024 GMT
        Subject: CN=9e9241ead43ac4284262f8f6593d4f8d5d9eac79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:1b:e3:37:0f:d3:bd:f4:58:a1:e0:9b:40:43:
                    cb:bf:55:77:d7:0f:72:d1:ff:52:f0:5f:8b:e5:e8:
                    06:8f:f9:d0:94:22:e2:6c:eb:af:d8:03:b3:79:e0:
                    69:22:88:d1:71:70:ce:d1:cd:c9:e3:55:93:c6:44:
                    7a:f8:e0:96:1e:9b:0a:8f:64:ed:9e:c8:19:19:ce:
                    86:7f:c5:72:26:24:7a:60:b3:45:f4:93:af:eb:34:
                    39:26:24:ab:e1:43:21:4a:02:90:8e:bf:f7:0b:0b:
                    f3:db:e0:6e:bb:3f:49:b2:f8:a8:4e:e9:ac:b1:f8:
                    e8:58:11:5d:ac:22:ef:03:8b:85:09:ec:ba:b8:e5:
                    d5:7f:64:7f:a1:f2:9c:4c:65:99:20:e7:b4:f3:2f:
                    0c:d2:11:3f:b2:77:b5:d1:6b:7e:1b:70:bc:5b:ca:
                    fa:7f:0c:72:24:70:15:ca:44:53:7e:f0:b4:97:69:
                    72:31:5e:ca:67:1e:4b:3b:17:78:7a:57:df:08:4b:
                    0e:43:b9:0b:a6:17:ad:b2:06:a6:a7:53:f3:cb:54:
                    96:1a:f9:3a:45:bf:a5:7f:ca:fa:31:25:71:2e:ad:
                    45:d9:ac:e5:22:30:0a:17:e9:38:82:95:d3:be:dd:
                    43:c7:9c:56:c0:23:99:3f:c7:e9:f5:61:e1:31:3d:
                    45:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F6:F6:D5:F6:0E:A8:14:9E:CA:25:76:38:D3:A2:8C:74:ED:F2:C3
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/9e9241ead43ac4284262f8f6593d4f8d5d9eac79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:f2:a3:b0:26:9e:b2:11:a0:dd:6d:52:33:23:91:e5:d1:96:
         94:d6:b6:bc:47:41:16:23:dc:fb:3d:e0:ee:83:71:fb:2d:72:
         1d:f2:8c:e2:4f:b9:9d:de:ad:b5:a2:cc:71:05:7f:0a:d9:a2:
         6d:8b:80:35:12:51:19:f3:9b:a8:be:3b:bf:1e:4c:ac:21:66:
         45:9e:ea:c2:30:44:74:75:b9:f7:58:87:a3:ef:0f:e1:0a:68:
         d9:44:7c:79:94:23:07:c5:23:f6:0d:dd:35:c5:5a:65:27:96:
         de:5b:47:17:e7:ce:33:2b:d0:5f:a7:38:db:3d:5b:4a:a0:fc:
         f0:1e:a9:f9:d7:a1:82:46:da:0c:34:f6:08:bf:15:43:73:86:
         d8:6c:9e:08:6e:b2:5b:ff:4a:99:8a:94:e2:da:bb:10:e8:7c:
         9a:5a:a5:84:4c:eb:d3:00:a1:af:51:4e:b4:54:55:bb:a8:a3:
         ec:92:0e:32:6c:45:d2:2c:ac:b5:37:f0:36:26:27:bf:52:9f:
         22:ed:af:2b:2d:87:41:7e:2e:bb:25:e5:fd:ea:f9:f6:be:86:
         de:96:ef:e1:6d:40:69:87:49:c4:59:22:f6:01:18:51:77:7a:
         97:8c:0d:e4:8c:41:85:f9:a8:a8:5d:51:bc:b2:24:f4:bd:9b:
         33:6a:54:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-ams.rpki-client.org