Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/ac1b4f5dbf4088cc85897fdbaf3a70015920b33b.roa
File:                     ac1b4f5dbf4088cc85897fdbaf3a70015920b33b.roa (raw, json)
Hash identifier:          fBlCsKTMcyF5u1uZ6u5RQDQqvcbcf2k13PQNVKwpjKA=
Subject key identifier:   2B:1C:C5:96:C9:EC:F1:31:EA:79:70:12:C2:AC:91:BC:E5:48:11:25
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1CE378
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/ac1b4f5dbf4088cc85897fdbaf3a70015920b33b.roa
Signing time:             Wed 28 Sep 2022 17:05:35 +0000
ROA not before:           Wed 28 Sep 2022 17:04:15 +0000
ROA not after:            Sat 28 Sep 2024 17:04:15 +0000
asID:                     11830
IP address blocks:        190.241.201.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1893240 (0x1ce378)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 28 17:04:15 2022 GMT
            Not After : Sep 28 17:04:15 2024 GMT
        Subject: CN=ac1b4f5dbf4088cc85897fdbaf3a70015920b33b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:71:2e:64:0a:47:e7:28:cf:4f:8b:51:4d:a0:
                    a2:85:49:5d:10:c0:f3:d0:97:ec:f8:15:ad:27:b7:
                    72:2f:0f:2c:14:79:de:f4:82:48:f3:0c:69:42:8a:
                    27:35:5f:0c:fe:8f:be:b1:1e:51:b4:82:f8:30:0a:
                    8b:8f:81:59:8c:80:fb:c2:74:b9:3b:25:3c:17:eb:
                    fc:3c:dd:77:69:1f:e4:b7:25:6c:71:25:31:9b:98:
                    0b:28:44:af:d7:6a:77:4d:02:ce:78:bd:20:85:1e:
                    aa:b9:d7:58:16:fe:ea:6d:e4:8a:bc:e2:d3:d1:e6:
                    e1:28:cb:d2:6e:75:fa:98:02:14:33:46:53:c2:40:
                    11:0f:18:2a:ac:5f:94:5d:bd:0b:9d:e4:d5:9f:e2:
                    d6:c8:d2:f5:0e:5f:05:1d:61:06:40:25:76:db:e4:
                    0c:7a:a7:bb:18:84:dd:94:5c:6d:d1:d1:55:da:97:
                    f9:6f:18:da:ab:7d:85:75:08:b4:24:d8:63:ca:28:
                    18:0e:4e:75:06:79:06:52:80:85:50:25:6e:ee:6f:
                    15:ce:67:c1:90:0b:20:88:4a:90:94:ef:53:a9:f0:
                    f6:55:d4:17:03:7e:3c:0f:53:96:da:91:3c:0d:db:
                    80:dc:56:7e:de:68:8a:15:67:87:9e:1c:b8:2b:32:
                    67:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:1C:C5:96:C9:EC:F1:31:EA:79:70:12:C2:AC:91:BC:E5:48:11:25
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/ac1b4f5dbf4088cc85897fdbaf3a70015920b33b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.241.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:7d:55:58:0b:48:3e:95:6c:ec:a8:b9:34:d8:a6:1f:e5:3d:
         79:d6:dd:c0:1f:ee:d0:45:d0:65:4a:23:0e:87:5c:2f:39:b6:
         0b:d1:b9:ef:8a:fc:be:08:ce:09:a0:9a:6c:ac:b3:6d:16:98:
         42:6a:ec:78:63:a6:ca:13:51:03:c2:42:a6:92:c9:7c:af:0b:
         d6:9f:49:dd:2b:c7:52:88:8f:84:66:f6:09:f1:ed:89:ff:ed:
         e7:e7:e1:a5:62:1a:2f:5b:d9:90:0f:07:68:08:0b:0e:6d:6c:
         e7:83:bd:40:b4:1e:7d:7b:7f:d0:87:d1:0d:e6:e4:52:2f:25:
         94:14:93:9c:51:08:07:ff:33:2c:ea:a8:ad:73:4a:c8:68:57:
         49:80:8d:01:e7:64:32:cb:6a:7f:aa:c7:19:f9:9c:6d:dc:c1:
         8f:fe:51:c0:3e:f1:51:9b:b8:bc:dd:8d:3b:99:95:8c:de:8b:
         91:53:3a:e9:81:ea:e7:49:8c:fb:e8:c7:30:f1:97:f7:8c:2b:
         28:65:ce:57:cb:27:7a:6c:0d:6d:b5:7e:93:af:70:cc:f7:d0:
         87:ea:25:79:1a:84:fb:bf:03:17:fc:4c:d4:0d:5d:35:fc:43:
         6f:79:10:b2:33:c9:17:01:19:fd:55:2d:08:07:6f:51:24:fb:
         f7:3d:04:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-ams.rpki-client.org