Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/bd9a7c24c40c88f51b25ee720198b1980014daba.roa
File:                     bd9a7c24c40c88f51b25ee720198b1980014daba.roa (raw, json)
Hash identifier:          YKUvKAeOhtkrHxI+HXQQNG2uMFqBLJ2tQCUYD1aK9KY=
Subject key identifier:   0C:5A:90:9A:B5:BC:94:30:A3:9D:1A:3D:92:B1:60:CC:37:64:D0:9C
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1B6BB7
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/bd9a7c24c40c88f51b25ee720198b1980014daba.roa
Signing time:             Tue 27 Sep 2022 22:22:36 +0000
ROA not before:           Tue 27 Sep 2022 22:21:51 +0000
ROA not after:            Fri 27 Sep 2024 22:21:51 +0000
asID:                     11830
IP address blocks:        190.10.67.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1797047 (0x1b6bb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 27 22:21:51 2022 GMT
            Not After : Sep 27 22:21:51 2024 GMT
        Subject: CN=bd9a7c24c40c88f51b25ee720198b1980014daba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:21:95:ef:ab:ec:8b:3d:10:f1:c1:13:50:5c:
                    0a:e0:89:ad:99:49:3e:f6:b1:ea:05:c5:2f:24:54:
                    a5:1d:0e:cb:1c:60:5e:10:fe:bb:86:42:09:8f:6e:
                    7b:29:03:bb:df:28:8d:cf:12:90:b0:d2:50:ca:19:
                    95:d5:8f:74:f2:18:fe:78:ab:f6:d3:f1:b6:f3:60:
                    10:ed:c6:db:01:4e:d4:89:97:52:7a:5e:fd:d2:b1:
                    57:12:ff:89:47:d5:ca:fd:a1:7e:9a:a3:7f:36:a0:
                    49:8f:c0:fd:c2:18:e3:8d:8b:bb:d1:8d:65:86:90:
                    50:ba:86:8a:d0:28:1e:40:e0:e1:2a:c8:96:e8:94:
                    ba:af:5f:b9:09:2c:c8:bd:9f:12:1a:79:eb:89:a1:
                    cc:da:65:2b:25:e7:f9:31:7b:8d:dd:71:90:e0:e2:
                    6f:c2:26:48:84:ae:ab:6f:87:e0:87:4d:70:ba:bf:
                    7e:7b:43:97:8b:6b:44:77:11:d8:bd:29:12:e2:78:
                    d4:4e:3c:c9:c1:1c:e4:d5:2b:90:28:b4:88:36:3e:
                    37:8b:28:f1:e4:dd:7f:1c:e7:77:9a:b8:4d:38:dc:
                    f4:75:89:f0:ef:7c:9a:40:d7:1b:ab:60:dc:73:01:
                    29:bf:04:0f:0d:3c:a3:1f:a7:34:e7:9b:96:f5:2d:
                    ef:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:5A:90:9A:B5:BC:94:30:A3:9D:1A:3D:92:B1:60:CC:37:64:D0:9C
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/bd9a7c24c40c88f51b25ee720198b1980014daba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:3c:33:b7:ef:77:0e:d7:53:36:38:1b:b0:71:26:17:56:26:
         5d:55:ea:24:25:45:fd:6c:57:ff:57:a8:92:c3:f9:c5:35:6d:
         b5:db:d6:3a:91:2c:ea:23:d7:2d:0f:a6:03:96:4e:27:5e:60:
         05:ce:ab:bb:5c:3e:6f:bc:a4:61:9c:3e:f4:bb:fe:73:62:88:
         51:78:88:ff:fa:fe:d4:a1:e0:53:92:85:e3:dc:42:6c:92:85:
         97:f1:0f:28:d9:90:79:79:36:fc:7e:18:24:55:67:c7:a7:73:
         28:5a:76:4c:aa:fe:ee:09:5c:6d:10:22:2b:a8:23:bd:c8:94:
         db:38:39:79:e2:b9:09:85:c4:92:b5:f6:4e:a4:c2:be:d5:d3:
         70:c7:9b:9b:5c:94:82:25:39:75:53:e6:f9:cd:71:1a:88:29:
         84:23:ce:46:68:9b:0d:5a:33:dd:64:9d:a0:f2:8b:23:d9:3e:
         55:74:62:0e:a5:59:bf:05:a8:34:60:1f:5b:8f:89:99:fd:98:
         7d:89:2b:4e:f7:ee:4b:84:5f:6b:03:81:ea:55:d0:ae:c5:bc:
         76:fd:60:92:8e:41:78:8c:d1:35:4a:dd:62:ba:10:32:f7:54:
         be:cc:ed:a7:e7:48:4b:47:5d:21:dd:a0:0b:52:2f:86:11:36:
         2a:8d:81:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-ams.rpki-client.org