Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/9f80310511b902f6fc5a291bce8c6b807e03ddf9.roa
File:                     9f80310511b902f6fc5a291bce8c6b807e03ddf9.roa (raw, json)
Hash identifier:          ytxNw1C8J7Wsb3dCBbsYI9+B3XomisGNkfIx5k7weWA=
Subject key identifier:   2E:22:13:36:60:B9:A5:0C:2E:4E:A9:83:84:96:08:13:DA:92:48:37
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       17FE07
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/9f80310511b902f6fc5a291bce8c6b807e03ddf9.roa
Signing time:             Fri 12 Aug 2022 17:16:58 +0000
ROA not before:           Fri 12 Aug 2022 17:12:39 +0000
ROA not after:            Mon 12 Aug 2024 17:12:39 +0000
asID:                     3790
IP address blocks:        190.10.8.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1572359 (0x17fe07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Aug 12 17:12:39 2022 GMT
            Not After : Aug 12 17:12:39 2024 GMT
        Subject: CN=9f80310511b902f6fc5a291bce8c6b807e03ddf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f2:d4:50:cd:15:20:79:53:89:2d:03:0e:9e:
                    cd:21:b2:be:88:ba:df:bc:34:20:d1:2f:e9:c7:32:
                    88:02:ba:86:e2:cc:03:28:d2:9d:7e:f4:2e:86:4b:
                    39:20:1e:f3:8d:27:9c:0e:1e:c3:b8:05:d4:89:24:
                    35:af:2c:d2:d9:ee:59:c2:e7:81:ce:7e:40:d2:b0:
                    42:43:32:16:3c:af:c3:e9:12:9b:be:56:41:88:ab:
                    23:2c:54:d0:9f:5f:05:6d:78:e6:57:80:1f:f8:20:
                    bd:64:b2:fd:da:d0:8a:51:2a:7d:bb:f3:fe:02:d6:
                    21:09:e4:9c:29:d4:30:c1:21:ec:f7:44:11:dd:91:
                    99:34:a9:93:a0:50:cb:29:5b:21:db:f0:77:83:e7:
                    12:7b:89:c6:f3:5e:36:43:40:34:dd:c4:33:c9:3f:
                    5d:58:97:b1:b9:80:43:af:9f:46:9c:a3:9c:f9:f0:
                    6d:b9:09:74:d8:76:54:f1:08:07:74:56:10:73:dd:
                    0e:1c:2b:a4:12:4d:b4:09:bd:74:a9:f8:9d:c9:9e:
                    98:54:56:d4:c5:bc:50:ea:df:8c:6e:1a:f0:da:d4:
                    09:f7:eb:ae:32:9f:a0:fb:69:ce:24:3d:c5:2b:40:
                    7a:6f:2d:9c:3e:b6:63:19:20:94:3e:f9:72:60:32:
                    e3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:22:13:36:60:B9:A5:0C:2E:4E:A9:83:84:96:08:13:DA:92:48:37
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/9f80310511b902f6fc5a291bce8c6b807e03ddf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:70:b3:40:f7:c3:ff:79:3c:a5:c1:be:dd:10:22:74:7e:c3:
         1b:b7:5f:8d:18:2e:c1:4a:ee:74:cc:ad:3f:ee:97:7c:e9:3c:
         15:8a:c3:2e:d5:31:ff:3e:dc:99:ad:0c:af:62:cf:6e:09:38:
         5a:57:d9:44:4b:8a:65:b4:0a:94:53:9f:0d:65:42:e6:32:0c:
         51:76:17:32:e7:85:c3:26:57:9b:3a:1b:5a:33:cb:f6:59:af:
         f1:fe:72:76:6e:5e:ac:90:7d:e0:fa:5b:c1:17:05:20:64:7e:
         2e:2b:fb:97:2f:e5:84:20:e0:e7:88:54:f8:1f:65:ca:58:53:
         c0:c6:37:54:9b:e9:1c:68:77:55:69:19:a2:fa:dd:e6:83:8b:
         ae:fb:6c:0d:bf:26:af:02:bb:2f:25:33:93:ac:32:0d:46:83:
         52:53:87:fb:b9:c0:03:0d:39:fe:d6:13:ca:1a:1a:a8:88:92:
         49:96:d3:80:57:0b:32:05:70:93:6e:8b:c4:52:78:a8:ae:be:
         44:eb:2d:dd:27:9c:d8:79:9d:de:55:ef:34:4d:d4:76:53:bd:
         0c:ef:3e:3c:ef:19:19:e2:f5:51:0f:be:f0:53:80:1d:3a:18:
         39:e9:ec:f9:1e:7e:80:48:54:94:4b:d3:59:78:a3:84:a8:ed:
         1b:66:65:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-fra.rpki-client.org