Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/b12160fa95020ff08861673af00462eedc5f5bd9.roa
File:                     b12160fa95020ff08861673af00462eedc5f5bd9.roa (raw, json)
Hash identifier:          CNG8kAj5MueFOhtfnw/4BXc3VOwG3ITMJvOZmneLXf4=
Subject key identifier:   B6:BF:E0:08:4D:08:83:00:B2:4E:C4:83:4F:6E:A3:5D:73:98:19:A1
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1927DF
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/b12160fa95020ff08861673af00462eedc5f5bd9.roa
Signing time:             Thu 15 Sep 2022 20:18:25 +0000
ROA not before:           Thu 15 Sep 2022 20:17:59 +0000
ROA not after:            Sun 15 Sep 2024 20:17:59 +0000
asID:                     3790
IP address blocks:        190.10.25.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1648607 (0x1927df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 15 20:17:59 2022 GMT
            Not After : Sep 15 20:17:59 2024 GMT
        Subject: CN=b12160fa95020ff08861673af00462eedc5f5bd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:39:15:0c:04:e4:d2:95:1a:75:ad:ae:aa:1e:
                    7f:c3:be:5b:40:6c:a0:64:78:46:2a:b2:0e:26:16:
                    be:c6:e3:78:8e:f2:af:2a:e8:df:6e:92:52:82:cb:
                    8c:45:5d:06:34:80:b2:df:fe:2c:ca:ad:8c:2b:bb:
                    ab:28:b5:8a:01:23:c7:02:bc:00:83:38:c4:8c:4c:
                    a4:fd:9a:d4:70:5d:80:b9:e1:f6:d1:7c:b5:95:0c:
                    06:23:4b:eb:f3:8d:d0:ce:f1:29:2f:53:08:22:ab:
                    7d:b8:05:3f:c3:42:7d:ac:0e:b7:aa:f2:fb:d7:d0:
                    7b:26:f1:88:b9:f9:cf:e7:28:cb:29:a9:bc:c1:9c:
                    72:96:8e:88:f9:fe:7b:79:f0:03:97:d0:28:ec:7e:
                    2d:50:3c:7d:01:0a:06:4a:c4:da:09:9c:b0:32:3e:
                    ac:aa:33:ca:bb:74:04:e0:50:eb:53:0c:d5:cb:bc:
                    f1:7d:fc:50:2a:75:c5:8d:d1:bb:48:e2:4c:c8:bf:
                    e5:50:51:81:f1:37:00:38:87:e9:79:e9:14:73:aa:
                    17:96:bb:49:f5:4b:4f:76:50:45:a8:9f:6d:09:60:
                    da:b1:41:ca:25:04:19:e7:08:14:02:25:96:c6:14:
                    90:48:28:8d:82:0a:56:2f:ae:7d:73:7f:a0:72:30:
                    84:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:BF:E0:08:4D:08:83:00:B2:4E:C4:83:4F:6E:A3:5D:73:98:19:A1
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/b12160fa95020ff08861673af00462eedc5f5bd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:60:4a:7d:c7:d3:1c:16:cc:9d:72:f6:e3:4e:10:88:dc:1c:
         9e:d5:bb:0d:4b:2b:fc:99:5a:3a:dd:37:e8:b4:0e:31:2f:95:
         32:c4:11:b2:f6:03:96:63:a5:d9:c2:d1:c5:23:1e:3a:94:14:
         98:86:c9:87:8e:8e:ca:b2:2b:4f:cf:a5:33:b5:5a:b7:71:1c:
         cd:c4:b1:50:aa:6b:01:51:5c:12:e3:df:14:8c:f2:85:9f:63:
         93:f9:c9:10:e7:7f:e8:6c:d9:c7:18:5f:12:1d:51:84:38:a9:
         47:1f:10:be:7a:d7:4e:27:e6:50:71:72:6a:47:2e:32:a3:32:
         35:d1:21:aa:77:d5:89:63:88:53:14:e0:a1:2c:81:34:ec:e9:
         43:80:da:45:d5:eb:24:05:0e:48:99:14:b1:dd:2e:d6:83:9d:
         3e:df:13:32:1e:43:1d:28:7d:93:26:3f:1d:1b:b7:3c:6a:3d:
         c2:b7:53:73:f4:a0:12:60:90:3f:1c:a5:8f:88:ab:b7:f4:ce:
         39:1e:19:c7:1a:2c:4e:6d:bb:1a:2e:02:bc:5f:84:9f:6a:4f:
         a4:31:ef:62:dd:5e:38:07:41:80:69:c9:77:c7:36:5d:76:21:
         c2:56:60:89:ce:4b:5a:ba:d2:b5:30:34:b0:41:99:d4:e6:90:
         68:5a:b7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-ams.rpki-client.org