Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/a692f3cc31529d4f55cb744f80b51990f548232c.roa
File:                     a692f3cc31529d4f55cb744f80b51990f548232c.roa (raw, json)
Hash identifier:          ziYeQkUhcDal8HDvOA7u0VwKPUqhiJ8vauvPNcdsICA=
Subject key identifier:   A8:A1:38:EA:6E:27:C8:BD:38:FB:63:57:D6:EE:40:5F:D0:A6:9C:35
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1A9D23
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/a692f3cc31529d4f55cb744f80b51990f548232c.roa
Signing time:             Thu 22 Sep 2022 20:54:49 +0000
ROA not before:           Thu 22 Sep 2022 20:54:09 +0000
ROA not after:            Sun 22 Sep 2024 20:54:09 +0000
asID:                     3790
IP address blocks:        196.40.72.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1744163 (0x1a9d23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 22 20:54:09 2022 GMT
            Not After : Sep 22 20:54:09 2024 GMT
        Subject: CN=a692f3cc31529d4f55cb744f80b51990f548232c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:76:86:80:05:7a:f1:ac:f5:9c:ac:32:f9:ff:
                    cd:0a:0b:e0:fc:95:37:af:d9:17:10:76:c6:3c:95:
                    d5:b2:de:73:6b:fe:bf:e1:61:49:b7:2c:ba:cf:c7:
                    bb:f8:4e:d4:64:cd:d9:2c:aa:f0:f4:fa:07:0d:a2:
                    73:42:75:66:22:93:db:bc:fc:80:01:ef:f5:f0:12:
                    55:d9:15:ce:89:65:a9:f9:b7:24:7a:51:a1:4d:ff:
                    76:c2:8f:28:d7:91:42:7f:78:69:2b:02:6a:28:49:
                    01:c9:f5:3c:ae:50:c6:e1:38:78:cc:8e:17:5c:a5:
                    23:d1:f8:79:c2:2e:2f:ac:1a:c8:81:59:9c:c2:e4:
                    2b:63:b0:78:3c:38:8e:61:08:41:3b:82:98:19:de:
                    75:5d:41:63:66:3b:c0:19:77:9f:d0:54:b7:4b:41:
                    f1:4f:b6:05:26:16:59:0d:b9:f4:51:34:48:5a:70:
                    81:6d:7f:b1:5c:78:d0:8c:a6:21:1b:4d:44:7f:21:
                    6b:9e:3e:bc:f5:6f:2f:2f:11:23:ac:d5:de:a3:b9:
                    4d:f1:18:f8:11:eb:46:b6:cc:22:06:af:eb:ec:c5:
                    38:fc:37:0e:fd:d3:d9:84:78:65:54:81:9a:56:0c:
                    be:71:69:02:43:7e:3e:f0:5d:10:1e:4b:ff:99:23:
                    25:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A1:38:EA:6E:27:C8:BD:38:FB:63:57:D6:EE:40:5F:D0:A6:9C:35
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/a692f3cc31529d4f55cb744f80b51990f548232c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.40.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:4f:4e:b7:7b:cd:cb:07:bd:67:1a:d0:6e:cb:6b:23:bd:44:
         a1:c5:a6:46:19:f2:db:2a:ed:3b:21:00:eb:57:2d:10:d9:f3:
         77:8d:62:85:59:b0:92:a7:9b:1d:b8:09:e3:ed:45:e3:06:6e:
         f0:a7:4a:0d:06:b7:5b:99:8c:54:3d:1f:24:aa:f4:91:e9:5d:
         72:6d:c5:43:66:b0:9a:09:a2:b1:e6:46:a3:9c:6b:5d:7b:ec:
         0a:f8:0e:7b:4a:90:d6:bc:15:e7:ba:29:a7:86:98:01:e8:e1:
         91:08:83:32:fd:df:0f:2c:bc:b5:29:f0:19:d5:07:86:d6:6f:
         e2:82:ca:59:62:84:e1:11:d9:f8:9e:21:41:cb:fd:5c:37:d9:
         09:74:75:f0:5c:cc:62:04:9f:ce:61:59:07:26:00:dd:d6:e7:
         4b:51:64:56:3c:fb:e7:ad:48:70:8d:7b:2c:de:e7:0c:61:b9:
         7f:d0:bb:a0:70:45:46:59:c7:72:ec:ea:a2:40:f2:8a:66:54:
         e5:a7:ad:cd:69:a3:ac:8e:2c:08:32:46:07:fb:8e:84:4a:e6:
         57:dd:72:88:da:62:c8:3e:d7:fa:36:4f:7a:d8:53:c9:d6:6b:
         6e:2b:91:ab:28:b3:cd:ab:1f:57:8b:a2:8c:d8:bb:b0:29:3f:
         5c:c2:9e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:59 2024 by rpki-client on console-ams.rpki-client.org