Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/be8b7bbb6a5f279f39ebdb4faf57f118e89bec02.roa
File:                     be8b7bbb6a5f279f39ebdb4faf57f118e89bec02.roa (raw, json)
Hash identifier:          F/FsSWHqW1gcpgo1Ztrc3rYTo4Nvxlr0egbLynJ34xE=
Subject key identifier:   4F:AB:A6:43:6C:BB:91:4D:2D:7A:40:B9:78:F3:6E:A7:18:21:42:A5
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1B175D
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/be8b7bbb6a5f279f39ebdb4faf57f118e89bec02.roa
Signing time:             Tue 27 Sep 2022 17:11:02 +0000
ROA not before:           Tue 27 Sep 2022 17:10:24 +0000
ROA not after:            Fri 27 Sep 2024 17:10:24 +0000
asID:                     11830
IP address blocks:        190.10.44.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1775453 (0x1b175d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 27 17:10:24 2022 GMT
            Not After : Sep 27 17:10:24 2024 GMT
        Subject: CN=be8b7bbb6a5f279f39ebdb4faf57f118e89bec02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:66:f3:13:43:02:b0:7b:9e:1b:22:5c:42:bf:
                    fd:4a:3f:26:a7:59:05:ca:74:f3:61:75:e6:ec:01:
                    66:c4:bf:15:ae:53:35:a1:70:6e:ea:a9:e6:17:5f:
                    cf:ed:56:2b:3b:5a:ce:b2:5a:2d:b2:e1:b5:b0:9b:
                    87:aa:79:6c:86:b9:20:a0:1c:e7:b5:dd:38:95:5d:
                    0f:d4:ae:10:80:cd:6d:dc:cb:5b:ef:60:df:c2:35:
                    01:14:de:38:28:ff:55:70:85:11:29:70:f3:20:8b:
                    70:df:b3:bf:3f:8f:24:ca:5c:16:58:18:f7:98:4d:
                    44:55:dc:d8:88:e1:ad:3d:e1:d6:ac:7b:bf:2a:87:
                    ad:8b:dc:41:50:0f:41:d6:11:d0:3f:94:4d:06:76:
                    0e:a0:4f:8a:9e:fa:34:ab:4e:d5:12:6e:cd:82:04:
                    da:40:ac:6a:a8:36:4b:45:39:8c:28:ae:3e:84:4d:
                    c2:79:fa:98:1d:6c:58:2b:c1:db:83:f5:c3:f3:f5:
                    4e:4e:37:c4:10:63:d6:99:44:fb:2e:24:85:ec:47:
                    08:c5:d6:48:88:a2:9c:6a:59:bd:8b:e3:83:ba:6c:
                    11:9c:e6:d9:c6:3c:8c:28:0d:ea:70:03:72:c8:d6:
                    d1:05:a9:a7:85:8a:7e:67:3a:4a:d5:75:c2:5c:60:
                    bb:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:AB:A6:43:6C:BB:91:4D:2D:7A:40:B9:78:F3:6E:A7:18:21:42:A5
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/be8b7bbb6a5f279f39ebdb4faf57f118e89bec02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:47:e1:38:51:27:d3:49:83:7b:ba:9a:d9:f5:3f:49:e1:98:
         a4:02:bf:d7:a1:78:76:ee:cd:6c:39:6e:e7:d8:4a:ab:dc:5b:
         ea:98:d0:41:46:7c:f3:b4:50:9e:10:77:e4:f6:bf:dd:24:c5:
         8f:7f:8f:7f:6d:b0:3b:4e:b8:31:29:ae:c1:fc:ea:2b:09:db:
         f8:b6:fd:64:42:e6:32:23:ce:e2:8f:f9:82:e2:0f:60:12:cb:
         e7:c6:8c:51:1e:d6:db:3c:5e:dc:f2:93:ec:fb:3f:29:52:00:
         48:b5:29:ae:d1:99:23:64:cb:ff:bc:98:38:40:23:23:79:12:
         33:96:ef:a9:23:70:8d:dc:92:64:ad:db:fc:a7:48:90:9f:ee:
         17:1f:3d:c3:3d:f0:09:b0:e3:a4:40:5a:28:4f:23:0e:f8:a7:
         b5:f9:ca:dd:16:a6:03:3b:8d:5f:e6:04:b8:76:9c:79:ff:ab:
         29:12:5a:a4:ee:47:3e:58:80:73:6a:39:9f:a0:a6:d7:9b:58:
         ef:98:41:84:d4:19:99:cb:f6:0c:56:13:62:ac:86:96:50:7e:
         d8:92:db:13:e5:af:60:4e:64:32:40:24:d3:51:cf:3b:3d:5f:
         68:c9:50:39:d5:30:b5:67:8b:95:16:f4:a3:72:dc:95:37:90:
         f6:c4:33:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-ams.rpki-client.org