Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/bde77c289587ea994d72531ba7642218b4f545de.roa
File:                     bde77c289587ea994d72531ba7642218b4f545de.roa (raw, json)
Hash identifier:          kUbc366phBkCrLmDfPat1o8pPcx26Ok87Hdg4RjLw9k=
Subject key identifier:   E6:24:0D:87:FC:12:F2:17:48:AD:6C:0A:9C:F0:E9:66:47:3F:D9:90
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1A6B09
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/bde77c289587ea994d72531ba7642218b4f545de.roa
Signing time:             Thu 22 Sep 2022 20:37:25 +0000
ROA not before:           Thu 22 Sep 2022 20:36:55 +0000
ROA not after:            Sun 22 Sep 2024 20:36:55 +0000
asID:                     3790
IP address blocks:        190.241.199.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1731337 (0x1a6b09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 22 20:36:55 2022 GMT
            Not After : Sep 22 20:36:55 2024 GMT
        Subject: CN=bde77c289587ea994d72531ba7642218b4f545de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:13:3f:ed:f2:5b:e1:a4:d3:75:0b:8b:c3:79:
                    e7:77:65:7f:a7:22:7c:ff:38:e6:ca:68:c6:d9:c1:
                    70:4a:46:c2:fb:f6:3f:45:9c:c6:e5:fd:47:86:90:
                    34:c9:5b:80:b8:42:50:cd:a6:98:4f:fa:9f:5b:51:
                    6b:c8:3e:f6:ef:72:fb:0a:ec:af:0a:c8:44:14:18:
                    bf:5d:78:e0:34:fa:56:70:2f:1b:92:3b:5f:79:82:
                    fa:6b:07:ab:3b:33:06:24:50:37:eb:57:0a:1a:e7:
                    12:16:ec:10:ca:f1:55:37:41:ed:e3:3f:ee:aa:27:
                    17:1a:c1:9d:ad:1b:ec:77:2b:26:99:7f:ae:cd:7b:
                    7a:77:80:e8:2f:c6:a3:e6:07:1d:e0:a2:ec:9c:9a:
                    c2:c3:0b:58:f9:3e:fa:b2:4d:18:9e:d0:72:75:61:
                    b4:13:10:08:76:a9:59:6c:73:de:ee:76:d1:f5:c3:
                    96:fe:96:d6:7e:4b:39:cc:df:01:fb:2d:1a:82:10:
                    d0:95:19:6c:30:79:97:62:0d:0f:0c:81:e5:d3:44:
                    67:2d:1c:3e:3e:d4:8a:ea:dc:66:22:ea:6c:3a:ec:
                    2f:e2:a1:9c:11:d6:8e:c5:31:f1:80:16:26:e1:9d:
                    56:92:b4:c5:2a:06:92:4e:ae:51:1c:f5:3e:d5:af:
                    f6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:24:0D:87:FC:12:F2:17:48:AD:6C:0A:9C:F0:E9:66:47:3F:D9:90
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/bde77c289587ea994d72531ba7642218b4f545de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.241.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:c8:4e:44:07:10:30:6c:72:5e:f3:75:0b:5a:ed:45:b9:3f:
         55:c1:87:3e:e3:48:a3:5b:05:d4:a3:0b:4b:48:8e:48:6c:d8:
         e9:f9:3a:f1:82:90:71:36:a0:ca:a5:13:e7:62:0c:8e:0b:13:
         ff:75:4c:3e:1f:cd:17:02:9e:f0:b8:6c:54:ff:bc:b0:d6:6e:
         5d:2b:e3:8a:88:69:f7:ef:e4:53:b0:17:cb:bf:11:7b:20:29:
         9c:f0:a0:54:44:ab:27:77:b0:30:f6:67:9b:d2:d7:dd:9e:0a:
         88:38:9f:17:3d:99:1c:d2:9e:4b:88:6e:f5:f8:5b:53:e3:66:
         76:63:e1:d6:0d:58:ef:18:af:83:51:c6:24:cc:ce:98:14:dd:
         65:f4:40:18:f8:2e:eb:02:55:94:b3:02:1f:be:d7:30:e8:38:
         fe:e5:82:d3:ea:02:19:d9:c0:58:c1:ed:a2:20:ed:7e:41:4d:
         d0:96:c7:54:ff:d3:49:7d:c9:ff:9e:a7:24:f7:db:7f:86:58:
         c8:97:f0:f9:e0:ce:39:a4:a6:9a:b1:73:fc:44:da:47:b9:8c:
         be:cb:3c:d1:95:6a:4d:69:e5:a2:a0:74:8c:bf:9e:36:9f:bc:
         43:4a:1e:e0:8b:40:3d:b3:36:15:17:85:97:62:e7:07:66:14:
         50:ca:84:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-ams.rpki-client.org