Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/9fd3aebd7d48a61d4a292b40f3c9822c0daa2848.roa
File:                     9fd3aebd7d48a61d4a292b40f3c9822c0daa2848.roa (raw, json)
Hash identifier:          VI2zFhj77tssLQMc9fu42BMM+BzgYLC3IajbskU2Pnw=
Subject key identifier:   A1:F6:7D:C9:45:45:67:8E:85:0A:08:88:42:06:D9:79:77:80:77:37
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1C7AC7
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/9fd3aebd7d48a61d4a292b40f3c9822c0daa2848.roa
Signing time:             Wed 28 Sep 2022 16:20:05 +0000
ROA not before:           Wed 28 Sep 2022 16:19:07 +0000
ROA not after:            Sat 28 Sep 2024 16:19:07 +0000
asID:                     11830
IP address blocks:        190.171.30.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1866439 (0x1c7ac7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 28 16:19:07 2022 GMT
            Not After : Sep 28 16:19:07 2024 GMT
        Subject: CN=9fd3aebd7d48a61d4a292b40f3c9822c0daa2848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9b:c7:f1:7f:f1:1b:bd:c9:7e:3c:15:00:22:
                    ee:a5:80:17:9c:55:13:ad:df:8e:9f:ba:18:a8:cb:
                    f6:09:de:0b:d5:44:2a:43:35:d5:cf:56:81:ab:ea:
                    65:9a:7b:6e:60:cb:72:b8:ca:52:54:b0:f5:43:4c:
                    21:2f:09:8f:66:ea:6d:73:1e:88:95:7b:71:cb:c4:
                    ae:54:05:85:01:80:b6:40:10:3f:7f:e1:82:15:e9:
                    ee:cc:cb:90:e0:2c:ba:5b:99:fc:ea:65:df:1a:48:
                    e5:6b:97:4a:c9:90:ea:70:a0:48:92:ac:40:8e:d7:
                    c5:b1:6a:2b:15:64:b5:80:29:a7:d1:0f:2c:15:2d:
                    e0:c2:8f:26:ee:a4:0b:df:ac:63:09:41:2e:ff:7d:
                    2c:cd:2a:34:4a:fb:77:28:20:6a:ee:9e:99:74:70:
                    b3:16:ee:5b:1c:0b:6b:57:48:ee:6c:03:9e:c4:81:
                    4d:77:58:c6:9b:d3:19:ec:9b:66:75:32:5a:78:20:
                    57:63:62:9c:af:61:98:ad:75:01:96:70:67:5b:bc:
                    9a:9e:78:cf:d2:9a:db:cd:0f:0b:e8:ed:9a:18:dc:
                    d6:54:66:0d:84:aa:37:02:65:f2:6c:af:b2:8c:d8:
                    03:ae:73:09:cf:ad:2c:30:8d:cb:fb:3c:a6:30:9d:
                    25:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F6:7D:C9:45:45:67:8E:85:0A:08:88:42:06:D9:79:77:80:77:37
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/9fd3aebd7d48a61d4a292b40f3c9822c0daa2848.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:11:08:45:ce:e8:0f:21:37:db:7b:3a:83:a5:d3:13:32:b9:
         c1:ad:4b:aa:4c:a4:ac:4a:b5:a6:5f:0c:e9:66:1b:2f:bc:37:
         1b:9e:67:3b:5d:f4:f2:61:0d:f8:30:2c:2d:88:ba:a7:0f:48:
         3c:89:ce:c6:a0:9d:d2:0b:19:07:27:f2:53:35:cd:e9:bc:97:
         ab:dc:36:b8:4b:50:e3:c9:3f:4f:fd:4f:52:06:91:ca:28:eb:
         08:14:dd:c0:80:5b:0a:38:39:08:ba:81:43:37:3f:87:c9:c1:
         05:b0:b4:92:d7:9f:52:4b:48:2f:94:a6:38:dd:78:b7:cc:fd:
         f0:4a:86:e0:71:80:db:fe:83:10:d8:28:3c:8e:00:a3:e0:d6:
         69:70:6d:9f:f2:45:b6:99:e0:6d:8a:b7:ef:e2:cb:75:ec:d0:
         ff:73:45:28:aa:c7:07:2b:fe:37:1b:e2:97:40:7d:e2:33:f8:
         c0:48:6b:36:0d:e7:30:d7:49:7a:36:17:e6:44:9e:e7:c2:ac:
         61:c2:f4:e9:1c:17:65:3a:b0:e4:30:cf:b4:b5:ec:12:34:f6:
         5b:51:cc:2e:28:44:3e:9e:54:bd:84:0c:0b:a3:44:07:c0:8b:
         bc:3d:21:84:53:80:d6:3c:ab:1a:1b:7d:3f:bd:af:c7:e7:f0:
         10:b5:12:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:49 2024 by rpki-client on console-fra.rpki-client.org