Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/a2091972b397ce4483d103feb7270f9abec3316f.roa
File:                     a2091972b397ce4483d103feb7270f9abec3316f.roa (raw, json)
Hash identifier:          9G8p4lUvUcU9lpM/wxblfZ5swt3OZ/0RVji5PrxtOtw=
Subject key identifier:   F7:62:C2:FF:57:5D:A8:E5:A3:BC:BA:B1:03:C7:DB:77:20:B6:48:44
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1A8419
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/a2091972b397ce4483d103feb7270f9abec3316f.roa
Signing time:             Thu 22 Sep 2022 20:48:48 +0000
ROA not before:           Thu 22 Sep 2022 20:48:22 +0000
ROA not after:            Sun 22 Sep 2024 20:48:22 +0000
asID:                     3790
IP address blocks:        196.40.36.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1737753 (0x1a8419)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 22 20:48:22 2022 GMT
            Not After : Sep 22 20:48:22 2024 GMT
        Subject: CN=a2091972b397ce4483d103feb7270f9abec3316f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:58:3c:98:2a:24:2f:82:9b:f8:71:00:f0:3e:
                    62:30:37:63:d8:d6:f0:59:ad:79:d7:10:1b:54:1d:
                    f4:60:c1:21:0a:14:fb:cd:20:41:98:f8:27:ff:1b:
                    a9:2b:ec:a3:b2:73:84:df:9e:40:74:59:8c:b9:ef:
                    52:cb:ce:fd:91:2d:09:46:fe:7a:31:3c:dd:e8:88:
                    81:68:f6:47:40:bc:c9:e0:c2:d7:2e:38:5e:96:b9:
                    f2:2a:cf:26:15:ec:84:ac:ed:3e:cb:46:eb:ab:14:
                    f5:6f:6c:e9:4e:fa:e4:35:a0:ea:5e:79:86:a6:e4:
                    dd:d0:94:08:8b:63:18:07:75:09:54:ed:e9:29:58:
                    bc:aa:32:85:fb:f9:a8:a2:92:16:99:51:f2:a8:62:
                    f9:28:e6:53:57:cd:82:29:7e:93:7e:28:07:fd:a7:
                    17:3e:85:d0:71:9b:b0:0a:a5:86:d8:e9:f4:83:a9:
                    19:20:9d:50:98:c8:bd:55:df:8c:c4:f7:de:b6:8f:
                    0f:09:90:09:d4:cf:10:40:ba:f1:97:d3:f1:1d:48:
                    90:76:77:5f:cc:37:6f:22:56:cc:a5:69:5a:1d:14:
                    d0:d7:95:0f:34:ac:f0:43:4b:46:b5:de:a1:5b:4e:
                    6a:98:8d:02:7c:63:a5:37:2d:56:0a:44:b6:e2:e4:
                    17:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:62:C2:FF:57:5D:A8:E5:A3:BC:BA:B1:03:C7:DB:77:20:B6:48:44
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/a2091972b397ce4483d103feb7270f9abec3316f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.40.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:61:c4:4b:e9:16:32:dd:36:45:4a:76:8c:64:fd:ce:51:41:
         83:4b:de:fa:54:b2:97:97:54:36:50:79:61:f9:f3:ab:75:d5:
         af:4b:28:9e:72:da:f1:e9:1c:e3:0a:fd:e7:6b:96:4f:c7:9c:
         bf:da:e7:3b:11:70:b1:ca:d0:a9:60:62:a6:3c:06:de:29:d0:
         28:35:e3:c6:d1:08:28:8b:90:17:1c:44:d0:6d:44:82:d6:bf:
         fc:fe:bb:97:ff:f5:98:77:ed:db:fc:4a:9e:ca:15:11:21:ef:
         a2:3d:d6:98:ee:49:70:f4:d9:2d:45:b5:d1:07:cd:15:5d:64:
         ea:59:81:4f:5a:fd:3e:58:a0:17:7f:51:27:16:60:27:96:3a:
         21:c8:81:d0:ca:bf:3f:d3:3d:7b:4e:7e:24:9d:08:16:f3:47:
         82:6e:77:96:d1:70:60:e6:7a:3f:77:71:eb:cb:6e:df:34:71:
         b2:95:8d:37:9c:92:51:22:e7:61:a0:70:01:90:6d:84:55:9c:
         33:4c:01:67:a7:bb:c9:74:4c:c9:2b:01:1d:9a:dd:37:06:20:
         13:18:51:c9:ac:19:94:7f:50:d8:c5:8c:20:d8:7d:26:f1:92:
         9d:3c:a3:1f:db:ab:62:6b:f9:80:56:fe:f7:de:93:3e:b7:c3:
         01:dc:3a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-ams.rpki-client.org