Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/b5d188b308073d9ee568a3056d45b32a03704428.roa
File:                     b5d188b308073d9ee568a3056d45b32a03704428.roa (raw, json)
Hash identifier:          5pnDeTY5V3MgdonlemcDFpADod/lqSMswQC0j0kM0H0=
Subject key identifier:   E6:CA:EE:BF:6D:06:E9:95:0C:D8:25:E2:5C:97:E6:B7:EA:FE:8D:E4
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1B66A7
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/b5d188b308073d9ee568a3056d45b32a03704428.roa
Signing time:             Tue 27 Sep 2022 22:21:43 +0000
ROA not before:           Tue 27 Sep 2022 22:21:03 +0000
ROA not after:            Fri 27 Sep 2024 22:21:03 +0000
asID:                     11830
IP address blocks:        190.10.63.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1795751 (0x1b66a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 27 22:21:03 2022 GMT
            Not After : Sep 27 22:21:03 2024 GMT
        Subject: CN=b5d188b308073d9ee568a3056d45b32a03704428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a1:21:a7:1b:49:11:ab:77:02:69:47:1d:ef:
                    a2:ec:dd:01:18:54:6b:4d:82:62:03:20:64:e3:35:
                    40:9a:14:60:43:ed:5c:b7:c5:ef:0c:06:ca:72:0e:
                    60:2d:d9:5d:89:ae:36:7e:ef:e1:12:1e:58:b8:94:
                    fa:07:11:9d:b4:2a:83:a8:5a:a1:39:30:36:e8:2a:
                    10:72:93:42:b8:9c:1c:7c:1a:ab:8a:27:b3:22:18:
                    1b:de:cb:65:d3:2f:b5:dc:63:78:88:1f:d6:26:ac:
                    fd:56:19:c2:ad:7e:8c:a0:c1:13:64:f8:98:dd:f8:
                    3f:3b:18:bd:d8:4b:52:26:46:cc:a1:00:88:36:f0:
                    8f:02:b5:a1:f4:76:81:1e:1d:47:99:bf:60:34:2e:
                    be:8f:03:b0:f6:ef:99:d3:d5:62:1f:90:74:d4:29:
                    32:a5:14:10:d8:ec:9d:ea:e5:3b:de:49:84:37:9c:
                    50:d0:5a:bf:63:6e:dc:a4:c7:55:a7:ed:52:9d:c6:
                    43:85:8c:5c:fa:ee:49:9c:a1:c9:45:39:59:e5:cc:
                    7a:d1:c0:2e:5e:9b:b7:eb:6b:4e:09:ea:54:62:aa:
                    56:e4:70:ad:4c:15:4b:b6:71:b7:ed:74:40:5f:95:
                    71:dd:f0:70:ea:eb:1e:d6:f4:18:94:20:04:a8:08:
                    09:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:CA:EE:BF:6D:06:E9:95:0C:D8:25:E2:5C:97:E6:B7:EA:FE:8D:E4
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/b5d188b308073d9ee568a3056d45b32a03704428.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:53:d8:ea:51:bf:2a:84:b2:52:71:e3:9d:9c:3f:4f:90:22:
         40:d4:24:26:9e:6b:51:77:fd:ad:7d:07:72:19:aa:0b:7a:53:
         4e:ca:8a:6d:e8:d8:86:bb:c0:da:a0:2b:ef:20:ae:7f:54:3c:
         05:8b:92:db:e5:29:d7:72:5d:e4:a8:d1:81:2d:48:84:2e:c9:
         55:06:e0:d2:cf:f8:e0:3b:08:48:e5:96:26:0e:c1:1c:3b:ef:
         41:e6:0c:6d:71:c6:2e:37:35:9e:88:06:57:67:37:44:48:9a:
         67:e4:9e:c5:db:a8:89:35:bf:d7:a4:06:25:a1:f4:ee:14:5f:
         99:fd:35:4a:2f:5b:04:8a:ec:50:57:b3:04:e7:75:5a:06:4a:
         55:53:7f:16:09:46:35:ca:4b:7f:b9:a9:8a:1d:f0:67:ad:53:
         19:4b:e0:73:6b:70:20:a2:03:f8:e5:37:52:3b:2d:3a:70:f5:
         dc:e1:88:6e:65:0c:c5:07:23:c4:e5:bc:ca:f4:88:d3:45:5c:
         2f:ba:88:cd:99:7d:ba:0d:3a:7c:75:d6:6a:a6:57:38:63:57:
         07:ed:be:d5:04:07:f0:1e:89:27:3a:52:79:37:27:47:60:eb:
         31:cd:4e:f7:0e:4e:e0:07:63:a4:d8:f7:5c:1f:6c:31:e3:45:
         7d:1e:d9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-ams.rpki-client.org