Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/af94301b38945b8ef72b13a7635ef3e2c0aebfc0.roa
File:                     af94301b38945b8ef72b13a7635ef3e2c0aebfc0.roa (raw, json)
Hash identifier:          rDQLjeDdrtgyr9z9h0wMjNNgJEVAgCF0oE7hukfrJjA=
Subject key identifier:   A5:19:C0:02:21:EE:8D:5E:A7:2D:EE:A1:90:CD:9D:72:52:81:FA:46
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1CA1AB
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/af94301b38945b8ef72b13a7635ef3e2c0aebfc0.roa
Signing time:             Wed 28 Sep 2022 16:31:38 +0000
ROA not before:           Wed 28 Sep 2022 16:30:34 +0000
ROA not after:            Sat 28 Sep 2024 16:30:34 +0000
asID:                     11830
IP address blocks:        190.241.117.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1876395 (0x1ca1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 28 16:30:34 2022 GMT
            Not After : Sep 28 16:30:34 2024 GMT
        Subject: CN=af94301b38945b8ef72b13a7635ef3e2c0aebfc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2b:56:1b:b9:68:a6:8c:cd:5a:97:bb:29:39:
                    11:32:0a:74:f6:75:0e:21:09:c0:d1:48:13:85:8d:
                    ca:c1:9b:61:30:f9:cb:c6:3f:3f:43:48:ee:44:7d:
                    2a:6a:c5:c1:2a:0d:d0:69:1f:4a:b9:6f:b9:25:8e:
                    85:73:f8:bc:5b:0c:ce:fb:7c:5c:8b:b0:60:bd:6c:
                    58:1f:98:77:33:1e:53:97:30:04:91:d4:2a:49:e8:
                    e7:db:97:b2:c4:b9:6c:ea:4f:fe:71:36:3b:c1:ea:
                    7e:b1:87:02:18:9f:7f:c2:68:53:57:ba:1c:24:9f:
                    5d:34:cf:8c:2d:f7:7d:e3:04:22:d6:bd:71:8d:d3:
                    43:fd:35:36:43:02:a8:50:54:cf:53:ca:76:fe:50:
                    2e:a8:10:77:c6:30:ea:4f:83:23:54:ce:0d:d0:1a:
                    b3:d5:a6:9e:a8:2b:1e:05:8e:d7:8a:a3:fe:a4:e1:
                    c6:cb:95:33:a2:4a:0e:77:c2:11:24:7c:82:54:69:
                    98:bd:43:90:e0:f0:a8:77:18:2c:cb:12:12:0c:08:
                    81:4b:62:72:d4:b3:51:6a:d5:89:48:b2:51:af:00:
                    34:83:c7:62:08:c1:06:d2:87:0b:52:99:4e:17:06:
                    0c:ba:f6:d7:62:7b:66:44:aa:b2:ba:18:f7:dc:c9:
                    a9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:19:C0:02:21:EE:8D:5E:A7:2D:EE:A1:90:CD:9D:72:52:81:FA:46
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/af94301b38945b8ef72b13a7635ef3e2c0aebfc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.241.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:aa:2e:c9:99:2c:d7:72:56:12:6b:32:a9:01:a1:40:0a:6b:
         a8:a6:a9:df:02:9c:2f:5a:f8:44:a0:79:fc:3e:8d:31:28:1a:
         d8:62:7e:61:b2:60:a8:b3:af:56:81:71:1c:9b:56:0b:6a:a8:
         e3:8a:10:d5:eb:a1:18:6c:78:29:57:d9:d9:4b:c9:4a:b0:ad:
         e0:f4:3c:4f:1a:b1:dc:83:bd:f2:10:af:ff:cf:38:ba:01:e4:
         b2:82:91:92:19:77:7e:0c:9f:45:83:e0:4c:5f:d2:c6:ab:7f:
         35:40:06:fa:94:3c:f6:93:97:42:0a:24:87:89:f4:4d:5b:c3:
         1c:ea:db:10:77:76:40:79:8a:ee:d1:1a:25:c0:68:7a:d6:1a:
         52:d9:64:ef:9c:e3:de:c5:f2:91:82:61:75:8b:d0:46:63:de:
         23:9f:50:06:69:10:62:15:4f:e8:92:86:a2:ba:a1:7f:c8:03:
         56:ff:01:24:a7:55:9f:26:17:61:26:7c:de:bc:a2:e9:bb:35:
         46:2a:c5:e9:26:56:45:73:0a:5d:3e:f2:6e:f8:2f:c4:a1:dd:
         90:82:5a:1c:9f:5d:9c:49:ef:bd:1b:d2:71:e5:a5:1d:09:f9:
         84:84:a7:30:24:0f:38:a4:00:80:9c:7b:7a:35:33:43:70:54:
         b0:bc:cb:12
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHKGrMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZj
M2YzY2JmOTcxYjMxZDRhMGZiNDhhMDYzZWQ4NmYwYjU5NGFjM2UwHhcNMjIwOTI4
MTYzMDM0WhcNMjQwOTI4MTYzMDM0WjAzMTEwLwYDVQQDEyhhZjk0MzAxYjM4OTQ1
YjhlZjcyYjEzYTc2MzVlZjNlMmMwYWViZmMwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiytWG7lopozNWpe7KTkRMgp09nUOIQnA0UgThY3KwZthMPnL
xj8/Q0juRH0qasXBKg3QaR9KuW+5JY6Fc/i8WwzO+3xci7BgvWxYH5h3Mx5TlzAE
kdQqSejn25eyxLls6k/+cTY7wep+sYcCGJ9/wmhTV7ocJJ9dNM+MLfd94wQi1r1x
jdND/TU2QwKoUFTPU8p2/lAuqBB3xjDqT4MjVM4N0Bqz1aaeqCseBY7XiqP+pOHG
y5UzokoOd8IRJHyCVGmYvUOQ4PCodxgsyxISDAiBS2Jy1LNRatWJSLJRrwA0g8di
CMEG0ocLUplOFwYMuvbXYntmRKqyuhj33MmpowIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFKUZwAIh7o1epy3uoZDNnXJSgfpGMB8GA1UdIwQYMBaAFNgLQZU9gBToGKPM
I8FMT5TRqMEbMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmMzZjNj
YmY5NzFiMzFkNGEwZmI0OGEwNjNlZDg2ZjBiNTk0YWMzZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmE3ODYyZTgtZDJkYi00OGVhLWI4MDktZDRiOTcw
ZDFkODkyL2FmOTQzMDFiMzg5NDViOGVmNzJiMTNhNzYzNWVmM2UyYzBhZWJmYzAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82YTc4NjJlOC1kMmRiLTQ4ZWEtYjgwOS1kNGI5
NzBkMWQ4OTIvNmMzZjNjYmY5NzFiMzFkNGEwZmI0OGEwNjNlZDg2ZjBiNTk0YWMz
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL7xdTANBgkqhkiG9w0BAQsFAAOCAQEAj6ouyZks13JWEmsy
qQGhQAprqKap3wKcL1r4RKB5/D6NMSga2GJ+YbJgqLOvVoFxHJtWC2qo44oQ1euh
GGx4KVfZ2UvJSrCt4PQ8Txqx3IO98hCv/884ugHksoKRkhl3fgyfRYPgTF/Sxqt/
NUAG+pQ89pOXQgokh4n0TVvDHOrbEHd2QHmK7tEaJcBoetYaUtlk75zj3sXykYJh
dYvQRmPeI59QBmkQYhVP6JKGorqhf8gDVv8BJKdVnyYXYSZ83ryi6bs1RirF6SZW
RXMKXT7ybvgvxKHdkIJaHJ9dnEnvvRvSceWlHQn5hISnMCQPOKQAgJx7ejUzQ3BU
sLzLEg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:59 2024 by rpki-client on console-ams.rpki-client.org