Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/a0c7f3bba1f1bf2f6f1f0cdc4097549e3b34139e.roa
File:                     a0c7f3bba1f1bf2f6f1f0cdc4097549e3b34139e.roa (raw, json)
Hash identifier:          3NXhK3ScMNh1ecbn5bMjvpY/DP2IiVS1GFqFTa6Q/1I=
Subject key identifier:   B5:2B:0E:79:0A:9C:2A:7E:09:0A:44:55:09:E0:82:99:AB:0F:19:C2
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1CC99F
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/a0c7f3bba1f1bf2f6f1f0cdc4097549e3b34139e.roa
Signing time:             Wed 28 Sep 2022 16:56:13 +0000
ROA not before:           Wed 28 Sep 2022 16:55:13 +0000
ROA not after:            Sat 28 Sep 2024 16:55:13 +0000
asID:                     11830
IP address blocks:        190.241.136.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1886623 (0x1cc99f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 28 16:55:13 2022 GMT
            Not After : Sep 28 16:55:13 2024 GMT
        Subject: CN=a0c7f3bba1f1bf2f6f1f0cdc4097549e3b34139e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:69:da:d7:f9:79:4c:95:28:c2:8b:3f:84:4f:
                    a4:6b:d3:f2:19:bd:d5:89:8b:45:10:05:20:93:ba:
                    85:25:f6:55:eb:6d:b7:67:58:39:29:75:82:a7:3b:
                    4d:60:11:e3:fa:eb:84:ca:70:52:4b:a9:7c:56:d9:
                    3c:04:11:78:5d:75:a3:b0:23:34:51:f7:7c:87:ff:
                    d9:ac:1a:14:1b:7f:0d:6e:fb:e5:ea:3c:5c:26:d2:
                    b1:0a:62:3a:69:b1:b0:bb:25:3c:2d:28:56:f2:87:
                    07:f2:a7:8b:de:06:53:9f:24:6a:a7:be:fd:03:e6:
                    4d:81:9e:b3:ad:0d:23:f3:44:67:67:aa:cc:02:6a:
                    1c:5d:a6:e3:d8:10:25:32:60:53:65:18:81:cb:5c:
                    09:b5:c0:3f:da:17:57:bc:f8:12:85:46:4c:a0:22:
                    49:57:0a:cf:e8:00:f9:21:4b:02:aa:2c:11:29:93:
                    db:41:ff:f8:07:78:5e:a3:f2:6f:29:41:99:68:54:
                    9d:9f:67:6c:7e:75:c1:22:a4:7f:36:c4:3a:fd:92:
                    dc:61:b5:af:51:13:48:56:42:48:fb:d1:a8:7c:14:
                    26:dd:09:f8:9c:eb:6e:90:f2:63:6c:eb:0b:28:df:
                    73:67:21:70:fa:f8:80:75:ac:e6:41:99:e0:ad:e2:
                    f4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:2B:0E:79:0A:9C:2A:7E:09:0A:44:55:09:E0:82:99:AB:0F:19:C2
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/a0c7f3bba1f1bf2f6f1f0cdc4097549e3b34139e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.241.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:f6:98:24:da:61:59:0c:45:ec:67:ee:14:3c:23:93:5c:39:
         f6:23:0c:09:c0:74:5d:79:b5:a9:c2:6e:f7:cb:a7:fe:cb:03:
         8d:b2:82:98:cd:c3:f5:fd:09:51:9b:2a:9f:e6:4b:af:ff:41:
         63:3f:90:f6:15:e4:d4:dd:2c:25:bc:05:22:1b:b4:b1:9f:76:
         5f:87:d7:83:81:f1:f7:0a:d7:77:57:fa:c3:b7:76:f6:60:16:
         d0:37:d1:53:06:a4:0f:e5:25:d8:c4:e9:23:42:e6:9d:a9:4d:
         46:82:ca:7f:b3:d6:9e:11:c0:15:7d:db:a5:42:a0:5d:b2:62:
         40:7c:61:8d:63:49:0f:ad:e6:c9:bf:99:53:43:8e:6e:f5:c9:
         b7:44:e0:39:b9:12:5b:d7:c8:ba:d4:e0:70:66:de:82:f6:00:
         45:88:e0:93:b4:53:5b:94:f1:e0:7c:77:c6:39:15:00:80:bc:
         25:4c:80:db:d5:88:36:e5:fe:eb:6b:40:31:74:38:42:ab:5c:
         b0:4b:3b:6c:3c:43:37:32:e8:ca:67:a9:76:4c:c3:2b:83:f4:
         6a:6a:94:a1:da:23:a4:56:4c:d1:60:2f:d8:19:87:fe:33:6c:
         c2:48:84:6e:3a:fe:38:49:3d:08:64:cb:04:67:9e:69:33:2c:
         24:2e:91:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-fra.rpki-client.org