Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/a713d5775e04e0286642b2dd3e6ab388f95e7f0d.roa
File:                     a713d5775e04e0286642b2dd3e6ab388f95e7f0d.roa (raw, json)
Hash identifier:          dkj70HB28ugWQfx7pgSxsO4Z9WNiq3MDbuDBhraWwo8=
Subject key identifier:   F8:E0:8F:82:39:F0:20:CA:88:DA:E8:03:3A:B4:4C:9A:B5:33:26:7F
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1E5CA5
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/a713d5775e04e0286642b2dd3e6ab388f95e7f0d.roa
Signing time:             Tue 22 Nov 2022 23:22:49 +0000
ROA not before:           Mon 21 Nov 2022 23:21:27 +0000
ROA not after:            Fri 22 Nov 2024 23:21:27 +0000
asID:                     3790
IP address blocks:        190.171.28.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1989797 (0x1e5ca5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Nov 21 23:21:27 2022 GMT
            Not After : Nov 22 23:21:27 2024 GMT
        Subject: CN=a713d5775e04e0286642b2dd3e6ab388f95e7f0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:dd:d9:8a:ba:0d:67:92:1c:6f:87:29:fd:95:
                    13:cc:8e:68:90:f9:a1:c9:86:71:ce:75:7c:cd:40:
                    37:24:91:d4:4c:2e:5f:8f:a6:ef:1a:a9:aa:3f:72:
                    f5:cb:7f:3d:5d:2e:c7:ce:77:f2:c6:e5:9f:a0:24:
                    4d:ce:ca:6f:73:45:d7:67:17:e0:27:f5:42:86:3e:
                    ac:75:40:f4:f2:b9:41:69:5a:1b:db:87:ff:5b:ed:
                    8c:41:10:29:76:8b:68:10:9c:11:73:a3:68:ee:72:
                    61:49:20:b6:88:26:23:db:67:a0:e9:e3:50:dd:02:
                    71:a6:4f:a8:06:96:5d:10:a4:ff:55:0e:76:da:95:
                    56:ca:13:41:d3:53:9b:ea:5a:a8:47:82:ad:d6:82:
                    90:cd:7d:fe:88:0a:43:66:d9:e1:02:78:02:53:0c:
                    08:03:aa:0a:54:5f:ff:8b:83:97:e8:4e:11:33:cf:
                    de:ad:32:75:a0:11:03:76:27:36:b8:d2:d2:b8:b2:
                    95:2f:7c:29:24:78:b8:87:51:1f:59:6d:84:6a:2e:
                    7f:f6:38:c2:a0:14:93:33:2b:bf:80:3e:54:52:f0:
                    e4:c0:ce:72:08:b4:71:1c:d2:2a:31:f1:bf:45:25:
                    04:2f:7d:dd:c2:dc:3d:1f:3c:22:2a:8b:c1:67:c9:
                    eb:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E0:8F:82:39:F0:20:CA:88:DA:E8:03:3A:B4:4C:9A:B5:33:26:7F
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/a713d5775e04e0286642b2dd3e6ab388f95e7f0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:18:b3:0e:8b:67:a6:0d:93:17:cc:3e:c8:30:a5:ba:50:80:
         00:0e:b5:76:e2:45:6c:71:40:79:98:ab:30:7d:04:9f:85:ee:
         26:c1:4e:92:08:0c:84:fd:ed:25:ac:9a:91:06:7f:00:5f:5f:
         0e:bf:b7:7e:f9:54:36:8e:55:b3:06:4b:0f:62:ca:12:85:bf:
         c7:d8:ef:6e:e1:ea:54:74:f4:d1:1d:79:28:68:36:c0:f7:9d:
         91:f3:34:87:73:e9:7c:74:f4:06:87:e1:c2:0e:58:72:2c:b0:
         57:6d:08:9e:29:5f:f9:03:48:d0:e2:50:f4:d0:21:59:1e:bc:
         71:d9:86:70:1f:73:1c:1f:91:91:ff:91:78:30:42:0c:17:9e:
         ef:2a:e2:83:51:b4:ef:16:54:bf:b9:8f:21:98:b9:b2:ad:8b:
         6e:a5:69:14:f6:6b:b2:e4:13:74:af:8e:9b:c6:a7:33:39:af:
         4c:1d:ce:c8:4f:49:3c:8f:90:1c:4a:40:55:f5:c0:e8:4c:39:
         0d:21:75:cf:3f:4f:81:79:32:b7:b7:99:09:09:cf:d9:0f:3a:
         66:3a:3f:72:3e:a4:0c:bc:ee:7f:25:15:cc:9f:b4:6d:f9:a3:
         ec:0d:89:ac:e7:88:ea:a0:9b:e2:8a:c7:65:42:fd:4d:70:a5:
         d1:60:e6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-fra.rpki-client.org