Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/a1ce66bd0c9534b80411d83918fed06337ab4bc5.roa
File:                     a1ce66bd0c9534b80411d83918fed06337ab4bc5.roa (raw, json)
Hash identifier:          R2UwYOB4Ro7gMqHxynTidXgdJdeo+icU64SeFuywah0=
Subject key identifier:   30:16:0A:D3:2C:BA:77:0A:E4:19:5F:18:17:1F:5A:27:37:CB:38:75
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1A4D59
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/a1ce66bd0c9534b80411d83918fed06337ab4bc5.roa
Signing time:             Thu 22 Sep 2022 20:33:07 +0000
ROA not before:           Thu 22 Sep 2022 20:32:43 +0000
ROA not after:            Sun 22 Sep 2024 20:32:43 +0000
asID:                     3790
IP address blocks:        190.241.132.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1723737 (0x1a4d59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 22 20:32:43 2022 GMT
            Not After : Sep 22 20:32:43 2024 GMT
        Subject: CN=a1ce66bd0c9534b80411d83918fed06337ab4bc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b3:69:a1:b0:f3:b6:93:56:f6:7a:ad:c0:2e:
                    b8:84:bb:e8:4c:ee:25:66:37:87:ac:11:d8:c8:72:
                    a9:a7:80:e7:7f:11:57:74:a5:78:48:00:94:86:eb:
                    bc:b2:e6:0e:a4:e6:c0:7b:2e:bd:c0:b6:c7:84:99:
                    87:32:19:dd:e2:78:55:a2:25:ed:a6:16:86:76:23:
                    66:bf:b5:ab:5a:e3:6b:c4:d8:2c:4b:76:e8:09:14:
                    c9:56:44:d9:ae:5d:b6:3a:a1:c4:d8:b5:4b:57:e5:
                    98:a2:59:c1:10:a9:56:97:27:61:44:51:9f:17:8e:
                    0f:54:31:96:6e:d2:f8:e8:a7:15:72:aa:97:65:9a:
                    63:b6:8b:ef:6e:31:32:a0:39:21:70:e5:1a:da:7b:
                    6b:45:fd:90:26:4a:bb:38:24:78:14:4a:64:80:7b:
                    a6:a4:a7:40:95:52:74:f1:e1:e3:7f:d9:d8:6e:a0:
                    f4:da:fa:e5:0d:82:b7:d9:70:35:4d:af:39:19:92:
                    46:4f:7e:ac:a0:5b:7b:8e:df:35:1d:29:0d:90:3b:
                    8d:a0:c5:95:36:87:00:f8:b9:a9:3c:c5:ba:11:59:
                    76:14:35:76:ae:7b:9c:9c:5c:63:dc:b2:5d:53:9e:
                    af:bb:72:90:7c:3d:54:5f:56:cc:b1:7f:da:c7:35:
                    91:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:16:0A:D3:2C:BA:77:0A:E4:19:5F:18:17:1F:5A:27:37:CB:38:75
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/a1ce66bd0c9534b80411d83918fed06337ab4bc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.241.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:98:4f:59:99:8b:29:7b:ff:e3:02:e6:90:64:c6:91:7a:dd:
         fa:61:30:00:6a:d4:65:83:ad:fd:b0:1a:47:db:9f:73:d6:2c:
         b3:dd:20:7a:14:74:36:2c:1b:20:3c:64:9d:4a:a7:05:54:de:
         45:f9:5a:15:48:a5:d1:3a:21:79:70:e0:32:0b:7a:0f:6a:f9:
         ed:bf:c9:d1:90:88:0b:81:15:de:4d:ba:c4:e9:34:46:9c:ea:
         4d:82:ab:31:d2:4a:a6:04:89:ff:07:59:a5:70:fc:86:a7:85:
         72:07:c2:c6:d2:cd:58:c1:10:d0:36:d1:07:d8:99:1b:f6:e9:
         1e:73:69:1e:9b:65:17:3c:34:5b:47:a9:49:1e:f6:6d:53:90:
         f5:ee:98:2e:41:23:df:01:04:bd:d1:cc:8d:6b:76:02:22:86:
         a0:36:f7:60:33:89:d2:5a:3c:80:5c:5f:f1:42:8d:b8:28:a6:
         71:96:76:6e:c4:7b:7a:b7:6d:1b:e7:bc:b2:26:b7:70:c2:c7:
         c6:72:3a:14:51:0e:eb:7e:ab:af:eb:22:c9:d6:69:2b:9c:d6:
         2c:a6:ff:a9:e9:f2:b2:cd:5a:90:cb:87:a4:68:df:6e:99:bc:
         86:a9:09:f5:21:5b:a2:fd:87:c1:16:09:5f:70:9e:7d:39:d2:
         89:20:d6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-ams.rpki-client.org