Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/b39cb55e54a88ce65d51db863ccfc39cbaac39a6.roa
File:                     b39cb55e54a88ce65d51db863ccfc39cbaac39a6.roa (raw, json)
Hash identifier:          wiGMRwDdXMYj2ps3iq8kc+iqMB9z6QC8afmabjEq1/o=
Subject key identifier:   57:1C:73:E7:85:59:33:69:F2:9C:21:73:2D:0A:FD:9D:B8:16:66:76
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1BE32B
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/b39cb55e54a88ce65d51db863ccfc39cbaac39a6.roa
Signing time:             Tue 27 Sep 2022 22:57:17 +0000
ROA not before:           Tue 27 Sep 2022 22:54:36 +0000
ROA not after:            Fri 27 Sep 2024 22:54:36 +0000
asID:                     11830
IP address blocks:        190.10.104.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1827627 (0x1be32b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 27 22:54:36 2022 GMT
            Not After : Sep 27 22:54:36 2024 GMT
        Subject: CN=b39cb55e54a88ce65d51db863ccfc39cbaac39a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a8:64:90:d8:88:d1:74:7e:25:e2:3a:7e:05:
                    26:cf:b9:f5:61:cc:d3:63:1f:cf:64:9d:88:a5:26:
                    f7:7a:1e:ce:65:5a:74:cd:f5:c0:32:09:00:1b:ef:
                    01:dc:95:9b:8e:18:28:62:03:6c:ed:51:87:b2:00:
                    3a:85:0a:db:21:dd:ad:a5:6d:dc:2a:e0:ec:ee:90:
                    d5:b9:2b:5d:5b:68:a7:74:fb:0a:a5:c3:56:5b:5d:
                    fb:8a:44:61:0d:91:18:e7:03:14:1e:2c:ce:5e:58:
                    c9:01:d0:0d:98:96:aa:4c:d7:d7:00:ba:93:3c:e6:
                    55:36:9b:de:8c:3c:19:3f:62:09:34:47:1e:98:90:
                    3a:26:90:02:7a:f7:fe:7b:4b:75:f2:8e:4f:34:d7:
                    dd:6c:80:dd:00:78:5d:f0:96:49:f3:12:75:23:85:
                    31:b8:5f:e9:ae:5f:b8:77:e1:24:ef:5f:d0:87:64:
                    a1:cb:89:a9:43:74:4a:87:5f:19:64:28:9e:05:ec:
                    29:eb:8a:d3:a1:6d:3e:43:77:7b:ff:73:a0:a3:8d:
                    53:e4:c8:08:68:2f:58:06:79:b7:e7:05:7c:f5:7b:
                    3f:6b:7a:cb:a5:d1:3b:79:7e:1c:56:eb:94:d8:94:
                    cb:53:6d:60:a9:1c:4b:7d:bc:12:69:95:0f:c2:c2:
                    bf:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:1C:73:E7:85:59:33:69:F2:9C:21:73:2D:0A:FD:9D:B8:16:66:76
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/b39cb55e54a88ce65d51db863ccfc39cbaac39a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:c6:75:58:c4:82:6f:20:82:a2:ed:b7:0f:d8:96:11:7a:d8:
         37:da:d3:a5:9f:c2:4e:d4:ca:01:3d:68:23:44:77:29:b2:6b:
         74:13:94:8d:ef:06:c5:e4:d7:19:17:30:a5:bd:e6:da:16:3f:
         a6:e9:45:9c:4c:e6:86:13:76:9f:90:ba:6b:6b:9c:0d:4c:11:
         c4:77:58:09:ad:5d:a1:99:4c:6f:16:ed:d9:f6:a9:c4:5d:c6:
         1d:90:f9:9b:a8:e0:ee:b0:10:0f:95:92:12:ac:b2:63:48:53:
         32:d5:fd:18:be:5b:33:6b:ea:77:a7:e3:f9:04:b3:98:00:c7:
         cb:46:42:68:63:70:73:b2:cc:2c:2e:43:00:12:e1:ed:3a:e3:
         48:a7:0a:10:fc:07:a2:4a:60:e2:58:a6:80:27:a9:c5:83:91:
         6f:aa:c8:97:5e:6d:53:2b:16:8f:cb:33:9a:f2:d2:0e:90:c2:
         f2:77:42:e0:9c:b8:ca:5f:ea:73:16:e4:26:ea:c6:00:61:2b:
         d5:e1:1e:e2:5f:02:f6:f7:c1:c3:ba:74:5c:bd:79:3f:d3:68:
         14:ae:e8:55:c1:92:69:2d:fb:be:a8:96:ab:40:5b:b4:24:17:
         cb:32:a5:3b:89:63:c4:ac:33:72:a8:96:9b:99:74:83:32:0d:
         d7:0e:cc:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:49 2024 by rpki-client on console-fra.rpki-client.org