Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/a47b17677b43eacd153c98fed294531b4cf4d098.roa
File:                     a47b17677b43eacd153c98fed294531b4cf4d098.roa (raw, json)
Hash identifier:          AJszpE1f3kYevUjfzNFOH94hPLD5lZsW92Mp61RDgno=
Subject key identifier:   99:2D:66:55:53:68:DC:21:DB:B1:D5:2C:A0:55:AC:F9:B3:90:C9:64
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1B1B1C
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/a47b17677b43eacd153c98fed294531b4cf4d098.roa
Signing time:             Tue 27 Sep 2022 17:11:47 +0000
ROA not before:           Tue 27 Sep 2022 17:11:08 +0000
ROA not after:            Fri 27 Sep 2024 17:11:08 +0000
asID:                     11830
IP address blocks:        190.10.45.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1776412 (0x1b1b1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 27 17:11:08 2022 GMT
            Not After : Sep 27 17:11:08 2024 GMT
        Subject: CN=a47b17677b43eacd153c98fed294531b4cf4d098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:3d:df:4b:f7:d4:93:3b:c3:e7:3c:bb:35:18:
                    4b:cf:e7:d6:bb:19:06:55:b4:c7:7a:f7:a7:b9:4e:
                    54:ff:aa:48:8c:ac:6e:94:f8:3e:ee:d3:41:c2:51:
                    fc:c3:35:b2:a8:e3:90:9a:a9:a2:c4:30:ae:04:94:
                    1e:a2:a2:84:b0:be:1e:d8:96:a8:63:89:05:7e:8b:
                    c8:6e:91:a0:b4:16:0f:8a:20:7c:1c:f3:ab:6e:2c:
                    2e:55:d7:e8:67:5e:d4:91:ab:5b:15:47:3b:b5:56:
                    4d:4a:64:af:94:be:3f:ba:76:e9:fa:b0:ee:28:6e:
                    08:26:bc:13:bb:eb:50:c1:9e:f7:d3:ed:46:29:60:
                    11:6f:1c:9b:7d:d7:8f:e8:8d:d4:f5:da:63:ab:1a:
                    6a:be:ab:d2:8d:74:a4:7a:eb:ea:42:89:ec:1f:ad:
                    dc:9c:25:44:86:a4:f7:16:c7:af:f3:92:8c:21:cf:
                    ed:fb:1a:e3:1a:cd:63:cd:40:8a:10:fd:6a:10:75:
                    67:eb:2e:96:a5:3f:59:9e:a8:5a:ed:b0:e6:64:a0:
                    65:f9:cd:78:34:cf:59:d2:f2:07:62:b8:0c:16:e4:
                    ae:34:f7:c2:08:67:ae:d4:f5:6a:cb:69:6f:f3:6e:
                    19:d1:12:4a:1b:13:aa:f2:1b:a8:54:a8:ba:16:6e:
                    6b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:2D:66:55:53:68:DC:21:DB:B1:D5:2C:A0:55:AC:F9:B3:90:C9:64
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/a47b17677b43eacd153c98fed294531b4cf4d098.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:ad:62:93:13:42:37:49:d0:25:f3:1f:6b:fc:3d:6e:7f:02:
         e6:54:5f:c1:4b:58:52:c2:f5:02:bb:0e:2b:ff:f9:3a:fd:98:
         e0:60:f2:c7:5b:43:9d:ec:a4:9d:01:d3:90:0e:e0:96:d1:f8:
         e6:47:e9:81:a7:c5:4a:d2:5a:6c:10:e1:e7:08:bd:c0:f8:8c:
         c4:07:0d:c9:cd:c7:51:13:32:6c:c4:3a:97:d4:1f:ce:03:05:
         23:fa:77:7e:66:5e:67:bb:b0:fb:6c:8b:db:96:ba:dd:03:4c:
         a7:33:18:d5:bd:f4:e5:56:f9:49:66:a8:ca:6d:3b:0f:ee:a3:
         3a:09:42:85:67:d8:f5:5c:b1:f6:b7:29:89:53:11:d0:cd:10:
         16:fe:70:03:52:e1:2c:f2:d7:e6:78:5a:42:3a:06:cb:68:21:
         f2:e8:d1:d1:bb:d1:ef:57:d8:d2:f6:fd:12:2e:6e:bd:d6:8b:
         bc:21:a5:85:12:f4:79:63:84:5e:6d:e3:22:4e:db:d4:12:4c:
         16:b3:75:6e:9e:a5:df:a2:f7:f1:c3:46:d5:9d:ab:28:bd:55:
         ad:8d:a0:fa:a3:5d:5a:3c:c5:64:d1:67:d2:d3:74:f4:b2:34:
         90:88:36:9f:17:44:55:d4:43:a5:66:81:42:8c:eb:52:92:7e:
         9b:a5:bc:27
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGxscMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZj
M2YzY2JmOTcxYjMxZDRhMGZiNDhhMDYzZWQ4NmYwYjU5NGFjM2UwHhcNMjIwOTI3
MTcxMTA4WhcNMjQwOTI3MTcxMTA4WjAzMTEwLwYDVQQDEyhhNDdiMTc2NzdiNDNl
YWNkMTUzYzk4ZmVkMjk0NTMxYjRjZjRkMDk4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA6j3fS/fUkzvD5zy7NRhLz+fWuxkGVbTHevenuU5U/6pIjKxu
lPg+7tNBwlH8wzWyqOOQmqmixDCuBJQeoqKEsL4e2JaoY4kFfovIbpGgtBYPiiB8
HPOrbiwuVdfoZ17UkatbFUc7tVZNSmSvlL4/unbp+rDuKG4IJrwTu+tQwZ730+1G
KWARbxybfdeP6I3U9dpjqxpqvqvSjXSkeuvqQonsH63cnCVEhqT3Fsev85KMIc/t
+xrjGs1jzUCKEP1qEHVn6y6WpT9Znqha7bDmZKBl+c14NM9Z0vIHYrgMFuSuNPfC
CGeu1PVqy2lv824Z0RJKGxOq8huoVKi6Fm5r+wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJktZlVTaNwh27HVLKBVrPmzkMlkMB8GA1UdIwQYMBaAFNgLQZU9gBToGKPM
I8FMT5TRqMEbMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmMzZjNj
YmY5NzFiMzFkNGEwZmI0OGEwNjNlZDg2ZjBiNTk0YWMzZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmE3ODYyZTgtZDJkYi00OGVhLWI4MDktZDRiOTcw
ZDFkODkyL2E0N2IxNzY3N2I0M2VhY2QxNTNjOThmZWQyOTQ1MzFiNGNmNGQwOTgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82YTc4NjJlOC1kMmRiLTQ4ZWEtYjgwOS1kNGI5
NzBkMWQ4OTIvNmMzZjNjYmY5NzFiMzFkNGEwZmI0OGEwNjNlZDg2ZjBiNTk0YWMz
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL4KLTANBgkqhkiG9w0BAQsFAAOCAQEATa1ikxNCN0nQJfMf
a/w9bn8C5lRfwUtYUsL1ArsOK//5Ov2Y4GDyx1tDneyknQHTkA7gltH45kfpgafF
StJabBDh5wi9wPiMxAcNyc3HURMybMQ6l9QfzgMFI/p3fmZeZ7uw+2yL25a63QNM
pzMY1b305Vb5SWaoym07D+6jOglChWfY9Vyx9rcpiVMR0M0QFv5wA1LhLPLX5nha
QjoGy2gh8ujR0bvR71fY0vb9Ei5uvdaLvCGlhRL0eWOEXm3jIk7b1BJMFrN1bp6l
36L38cNG1Z2rKL1VrY2g+qNdWjzFZNFn0tN09LI0kIg2nxdEVdRDpWaBQozrUpJ+
m6W8Jw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-fra.rpki-client.org