Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/bb3116272f0303ce6d89f1fbd4154985f0546da5.roa
File:                     bb3116272f0303ce6d89f1fbd4154985f0546da5.roa (raw, json)
Hash identifier:          +QmgPxtwiEcU2AD8tiMInArYos2TFoXnsN3uqdtYHgg=
Subject key identifier:   FC:2E:23:BC:3E:D8:5D:ED:1A:2B:E7:72:19:B9:2B:F9:46:04:E3:02
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1C7DC5
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/bb3116272f0303ce6d89f1fbd4154985f0546da5.roa
Signing time:             Wed 28 Sep 2022 16:21:23 +0000
ROA not before:           Wed 28 Sep 2022 16:20:16 +0000
ROA not after:            Sat 28 Sep 2024 16:20:16 +0000
asID:                     11830
IP address blocks:        190.171.31.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1867205 (0x1c7dc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 28 16:20:16 2022 GMT
            Not After : Sep 28 16:20:16 2024 GMT
        Subject: CN=bb3116272f0303ce6d89f1fbd4154985f0546da5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6d:1c:8f:31:89:5c:ee:a2:3f:60:b8:94:0e:
                    45:c4:0e:45:9b:24:73:64:1b:e0:33:01:14:b3:44:
                    60:77:d6:f5:ff:e4:58:e1:91:c0:9b:9f:e0:55:48:
                    50:76:0d:a7:5f:92:8c:21:1a:fe:ae:5d:40:5b:90:
                    be:9a:e8:2f:52:20:37:76:ee:4c:0a:9c:cb:03:4a:
                    73:f4:8f:2f:9d:17:1c:4b:21:41:b1:88:58:d6:4a:
                    ef:d3:4f:7a:cb:7a:2e:1d:83:b1:4b:47:36:34:2f:
                    7d:da:98:18:2f:18:09:e3:ce:1c:1a:86:70:1e:3d:
                    7d:07:70:e0:d3:e7:81:ee:39:dd:5c:e7:f8:a1:91:
                    70:a7:47:42:d0:d9:b8:f8:f4:6e:25:c8:23:d2:f6:
                    35:64:26:6e:bb:12:de:3d:8d:8c:dc:62:75:87:38:
                    4e:51:69:e2:2b:78:2c:5f:e6:58:69:25:77:2d:bb:
                    a4:68:27:ff:c8:49:32:c4:37:72:65:b7:b5:8c:f7:
                    da:71:bd:1c:ea:5d:cf:3b:c2:17:ce:a4:40:33:23:
                    b2:48:23:e4:a2:20:02:3f:e9:cd:f8:1e:29:2f:ed:
                    11:0f:31:fe:83:30:bd:90:36:66:b5:7e:ca:b3:2d:
                    1f:64:43:ad:45:26:72:d0:3d:54:fd:58:fe:63:e5:
                    76:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:2E:23:BC:3E:D8:5D:ED:1A:2B:E7:72:19:B9:2B:F9:46:04:E3:02
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/bb3116272f0303ce6d89f1fbd4154985f0546da5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:3d:ae:e2:f0:9c:af:e2:19:de:04:d4:49:e6:fb:94:b9:19:
         6c:59:47:9e:5c:b2:f6:d3:c0:55:6f:ba:1e:a3:33:fc:38:9c:
         64:6c:89:59:56:96:c9:fd:fe:6c:4d:91:6c:b0:fa:d7:29:bb:
         23:65:e8:e5:9d:6a:ad:1b:ce:c6:f1:b4:fe:f1:9e:fb:d6:c0:
         b3:46:95:1a:8e:7b:cb:6c:72:c7:85:15:43:d2:22:bb:10:af:
         00:dc:21:3c:c6:ef:8e:18:9f:46:ae:05:d2:a8:7e:5c:93:22:
         4f:6d:36:53:ec:0b:58:04:4a:f2:0a:49:9d:8e:73:31:47:bd:
         77:b0:25:7a:1a:e1:2a:84:35:81:3b:30:23:91:fd:a7:c3:0d:
         ed:f5:ff:85:f3:04:6e:66:a9:26:a1:0f:77:17:23:af:eb:8f:
         f1:48:05:a9:6f:64:64:5f:a8:2e:62:15:e2:cc:74:61:a1:e8:
         05:1a:66:6b:e1:71:d8:a3:88:82:8b:bd:3a:75:51:1c:3d:3b:
         0f:fa:4d:e0:b6:c5:dd:d7:e7:29:06:ff:de:be:d0:a5:ab:f1:
         ee:f4:03:ef:49:37:46:56:69:ca:5f:11:38:b7:cd:7b:dd:f0:
         30:eb:cb:33:f4:f4:73:34:a5:43:64:d1:65:76:80:a5:4c:f2:
         a5:19:1a:b5
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHH3FMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZj
M2YzY2JmOTcxYjMxZDRhMGZiNDhhMDYzZWQ4NmYwYjU5NGFjM2UwHhcNMjIwOTI4
MTYyMDE2WhcNMjQwOTI4MTYyMDE2WjAzMTEwLwYDVQQDEyhiYjMxMTYyNzJmMDMw
M2NlNmQ4OWYxZmJkNDE1NDk4NWYwNTQ2ZGE1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlm0cjzGJXO6iP2C4lA5FxA5FmyRzZBvgMwEUs0Rgd9b1/+RY
4ZHAm5/gVUhQdg2nX5KMIRr+rl1AW5C+mugvUiA3du5MCpzLA0pz9I8vnRccSyFB
sYhY1krv0096y3ouHYOxS0c2NC992pgYLxgJ484cGoZwHj19B3Dg0+eB7jndXOf4
oZFwp0dC0Nm4+PRuJcgj0vY1ZCZuuxLePY2M3GJ1hzhOUWniK3gsX+ZYaSV3Lbuk
aCf/yEkyxDdyZbe1jPfacb0c6l3PO8IXzqRAMyOySCPkoiACP+nN+B4pL+0RDzH+
gzC9kDZmtX7Ksy0fZEOtRSZy0D1U/Vj+Y+V2wwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPwuI7w+2F3tGivnchm5K/lGBOMCMB8GA1UdIwQYMBaAFNgLQZU9gBToGKPM
I8FMT5TRqMEbMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmMzZjNj
YmY5NzFiMzFkNGEwZmI0OGEwNjNlZDg2ZjBiNTk0YWMzZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmE3ODYyZTgtZDJkYi00OGVhLWI4MDktZDRiOTcw
ZDFkODkyL2JiMzExNjI3MmYwMzAzY2U2ZDg5ZjFmYmQ0MTU0OTg1ZjA1NDZkYTUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82YTc4NjJlOC1kMmRiLTQ4ZWEtYjgwOS1kNGI5
NzBkMWQ4OTIvNmMzZjNjYmY5NzFiMzFkNGEwZmI0OGEwNjNlZDg2ZjBiNTk0YWMz
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL6rHzANBgkqhkiG9w0BAQsFAAOCAQEADj2u4vCcr+IZ3gTU
Seb7lLkZbFlHnlyy9tPAVW+6HqMz/DicZGyJWVaWyf3+bE2RbLD61ym7I2Xo5Z1q
rRvOxvG0/vGe+9bAs0aVGo57y2xyx4UVQ9IiuxCvANwhPMbvjhifRq4F0qh+XJMi
T202U+wLWARK8gpJnY5zMUe9d7AlehrhKoQ1gTswI5H9p8MN7fX/hfMEbmapJqEP
dxcjr+uP8UgFqW9kZF+oLmIV4sx0YaHoBRpma+Fx2KOIgou9OnVRHD07D/pN4LbF
3dfnKQb/3r7Qpavx7vQD70k3RlZpyl8ROLfNe93wMOvLM/T0czSlQ2TRZXaApUzy
pRkatQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-fra.rpki-client.org