Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/c036a87b638bbfbfb29bc8782e486810472336d7.roa
File:                     c036a87b638bbfbfb29bc8782e486810472336d7.roa (raw, json)
Hash identifier:          Ag6jp/YPlEV3mqd5ZdzKAD2dDiSR1KW/ulhwlpnUc7Y=
Subject key identifier:   57:29:B7:30:6A:71:42:0D:9C:F6:9E:C6:F0:8B:F8:9D:09:54:15:1A
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1B06A8
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/c036a87b638bbfbfb29bc8782e486810472336d7.roa
Signing time:             Tue 27 Sep 2022 17:06:25 +0000
ROA not before:           Tue 27 Sep 2022 17:01:45 +0000
ROA not after:            Fri 27 Sep 2024 17:01:45 +0000
asID:                     11830
IP address blocks:        190.10.39.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1771176 (0x1b06a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 27 17:01:45 2022 GMT
            Not After : Sep 27 17:01:45 2024 GMT
        Subject: CN=c036a87b638bbfbfb29bc8782e486810472336d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8b:40:8e:e7:c0:c4:60:9d:ad:d2:aa:97:24:
                    5c:12:e5:07:0a:e6:a7:ce:6e:b4:56:2a:c4:16:2d:
                    52:19:bd:57:b6:1a:09:5d:85:d5:74:e7:7b:99:10:
                    2a:b7:bf:15:a7:7c:fe:68:b2:b4:2b:26:1a:e7:8e:
                    a0:01:58:3e:60:c3:00:0a:de:2f:4f:9b:e8:d6:0f:
                    7f:f5:f4:63:05:87:35:75:c5:49:03:11:d6:2d:b8:
                    83:1e:25:62:52:8a:b6:8c:c7:3a:c8:20:e3:33:b1:
                    4d:bd:a3:a5:95:1a:ac:bc:0d:84:03:31:43:ab:43:
                    3a:56:a3:07:63:ad:7b:fd:a6:c9:9e:a8:65:ae:dd:
                    82:e4:bd:3f:05:73:f3:97:ac:88:f0:05:ad:96:24:
                    ba:96:a2:49:43:e1:a6:c5:38:67:0f:8b:07:07:c2:
                    61:f7:8e:8f:09:ee:28:3e:19:ab:bd:45:1e:47:78:
                    25:37:ca:7f:72:ae:38:27:52:c6:5e:03:55:34:56:
                    34:5c:a3:ca:d9:bd:43:cc:91:cb:68:ca:15:2a:3a:
                    f4:48:f9:a4:29:83:69:20:78:15:30:ed:26:c3:52:
                    c8:37:9e:e3:24:50:d2:8b:d8:31:e8:6c:ce:78:4b:
                    70:56:a9:14:c3:d5:55:cf:47:5b:11:97:f1:67:87:
                    39:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:29:B7:30:6A:71:42:0D:9C:F6:9E:C6:F0:8B:F8:9D:09:54:15:1A
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/c036a87b638bbfbfb29bc8782e486810472336d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:b4:61:2f:78:7e:0c:d9:f2:87:21:db:3b:ff:57:28:4f:d1:
         41:5c:b9:2a:c2:f4:ed:c0:8a:f5:4e:5f:5a:80:5e:5c:41:04:
         d2:ac:4d:6b:58:db:fb:47:a3:a7:d8:c2:cd:2f:be:8e:1c:7c:
         fb:9b:ab:69:a0:e5:c3:2c:09:a8:54:ad:56:d0:f2:e3:fb:5e:
         26:2f:ca:7a:d3:45:f6:d5:62:03:38:de:60:46:1a:82:11:b9:
         85:e9:f2:18:be:f5:05:b1:cf:be:f1:d1:96:a7:2a:a3:82:62:
         76:5f:d3:14:25:b1:64:b1:b0:22:f7:ef:cc:fb:5d:47:50:82:
         e2:ad:52:dd:f2:f6:cd:82:82:24:9d:ff:4a:ed:f3:55:3d:86:
         41:6b:0d:97:0d:24:2e:9f:4c:86:6f:94:11:6f:73:d0:0f:46:
         8e:f9:51:c2:70:2a:18:9f:7d:83:df:31:ac:55:06:13:a6:3e:
         ef:ec:95:8f:3b:56:07:a4:fb:d2:d5:50:c8:d8:bc:db:9d:c0:
         bf:4e:a3:dc:4c:2a:1d:f4:87:89:fc:73:2a:72:97:ab:b8:34:
         bf:17:ea:db:19:89:2d:72:94:5e:32:f0:1d:89:0f:e4:b5:27:
         99:39:82:cf:08:a3:aa:0d:3d:bd:e6:03:f6:f0:07:48:04:62:
         fb:43:a0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-ams.rpki-client.org