Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/bcba401f36642226968c03218f6acefd727f8f68.roa
File:                     bcba401f36642226968c03218f6acefd727f8f68.roa (raw, json)
Hash identifier:          XzosImdcoalRuM3/0tPPCIW1eJA0qk8afIVfP1A3WGU=
Subject key identifier:   32:DA:62:44:A2:DF:B7:99:86:E8:74:C0:AA:55:40:7B:5A:2F:9C:19
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1C11A5
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/bcba401f36642226968c03218f6acefd727f8f68.roa
Signing time:             Wed 28 Sep 2022 15:50:19 +0000
ROA not before:           Wed 28 Sep 2022 15:49:39 +0000
ROA not after:            Sat 28 Sep 2024 15:49:39 +0000
asID:                     11830
IP address blocks:        190.10.112.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1839525 (0x1c11a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 28 15:49:39 2022 GMT
            Not After : Sep 28 15:49:39 2024 GMT
        Subject: CN=bcba401f36642226968c03218f6acefd727f8f68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0d:37:5f:ff:f1:35:a0:60:e1:44:00:a3:3f:
                    22:4a:88:66:ee:87:56:b0:af:f7:32:08:3d:9c:95:
                    72:44:d8:e2:0e:da:08:9b:39:ea:0f:74:56:a3:4f:
                    42:1d:4f:87:0e:7f:f2:74:f3:37:c8:03:cd:11:a3:
                    2c:76:d2:a5:e4:cc:7d:5c:dd:07:4d:cb:3b:33:62:
                    96:ff:b2:c9:40:7b:b1:5c:34:5a:55:84:08:c3:ee:
                    39:b4:37:e4:e3:b0:37:24:54:15:19:00:64:8b:45:
                    9d:28:e8:f6:45:f0:ea:22:45:06:63:b8:26:3c:08:
                    30:2d:c4:0f:a9:70:6b:70:08:2f:5b:07:01:58:72:
                    e9:29:9e:49:96:f6:1c:c4:3d:7a:c9:9a:4d:0a:f9:
                    4c:18:1c:de:d3:d9:1f:c7:4e:4b:26:c8:04:d2:ba:
                    aa:db:11:ca:b2:a7:e0:10:9b:d5:33:74:6d:88:36:
                    52:10:09:f8:74:31:ee:db:52:8c:06:9a:ca:b6:fa:
                    a4:1d:2a:85:1b:ce:1c:94:be:7f:66:b7:a5:a2:1d:
                    4e:05:ca:ed:3d:88:90:df:36:a7:48:66:17:c5:75:
                    1a:74:b7:e3:12:56:0c:1b:48:ea:14:60:a6:f4:75:
                    d8:e0:66:d8:4c:0d:9b:b7:38:c5:84:7d:df:72:22:
                    10:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:DA:62:44:A2:DF:B7:99:86:E8:74:C0:AA:55:40:7B:5A:2F:9C:19
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/bcba401f36642226968c03218f6acefd727f8f68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:9c:09:c6:5f:5a:10:f9:e6:a4:bc:d9:f7:09:5c:89:64:ee:
         2e:f1:b3:94:48:ae:85:fc:ac:b1:09:b3:3a:8e:00:4f:24:48:
         f1:13:13:09:c6:36:71:aa:4e:80:72:10:c2:48:ae:63:d5:13:
         bb:b9:57:4d:de:0c:dc:2c:ca:b2:32:3b:05:fe:cc:d9:a3:ba:
         cf:c4:43:6f:fc:59:1a:6c:b7:8e:c8:1e:92:5b:07:92:50:3a:
         db:01:da:15:e9:b6:59:7c:67:a9:10:9c:35:28:58:61:72:d3:
         dc:50:98:17:39:9a:e2:23:2a:70:e4:e8:31:84:90:5a:0e:2a:
         af:d8:20:9c:07:02:a7:fa:00:30:5b:9b:8c:ff:f6:8f:21:2d:
         0d:84:13:76:e1:21:92:87:4c:3a:5c:e6:07:2a:db:f1:c0:10:
         61:26:ce:33:51:f0:5a:77:56:51:1f:2e:da:72:40:d5:14:e5:
         10:7a:b7:45:60:31:07:37:e6:f8:9f:ce:25:0c:97:77:0b:5a:
         b7:fd:61:28:ce:44:43:08:06:23:58:f1:61:f4:0a:1e:d8:2e:
         56:28:ab:06:d8:cb:bf:d2:69:69:71:97:87:ed:86:f5:b5:03:
         7a:08:86:f9:32:37:71:ed:dd:25:90:54:bf:b3:ad:63:48:2c:
         2a:2a:ef:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-fra.rpki-client.org