Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/c8fa0faf8575f8f15dac273923c366cd5d8d35d1.roa
File:                     c8fa0faf8575f8f15dac273923c366cd5d8d35d1.roa (raw, json)
Hash identifier:          hPYLvxN72ZBI2hIAvvWZvHXMoIdyw8ufUdZ53bYonVs=
Subject key identifier:   80:E7:3C:73:F0:9B:90:F9:24:7B:3B:DC:84:44:A1:65:CA:67:AC:52
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1AD1B6
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/c8fa0faf8575f8f15dac273923c366cd5d8d35d1.roa
Signing time:             Thu 22 Sep 2022 22:57:36 +0000
ROA not before:           Thu 22 Sep 2022 22:56:57 +0000
ROA not after:            Sun 22 Sep 2024 22:56:57 +0000
asID:                     11830
IP address blocks:        190.10.24.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1757622 (0x1ad1b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 22 22:56:57 2022 GMT
            Not After : Sep 22 22:56:57 2024 GMT
        Subject: CN=c8fa0faf8575f8f15dac273923c366cd5d8d35d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b8:09:a6:23:fe:2a:92:3d:aa:1f:06:49:2d:
                    db:36:9d:76:03:9c:b6:86:19:c2:7f:3e:83:99:ca:
                    24:7d:ef:c1:37:a8:40:a4:0c:69:3f:46:f6:b5:ab:
                    93:fd:1d:ab:91:a5:66:f8:b9:85:d5:0d:61:1b:47:
                    81:19:0e:69:48:2b:33:1b:74:fa:3c:c0:63:ab:0d:
                    d1:c2:0f:7b:40:7e:35:62:12:92:82:59:c2:26:34:
                    6f:6f:1f:43:95:f0:f8:cf:5a:f7:3b:c7:ed:2b:f8:
                    d4:0d:b9:ad:02:0c:ed:db:2f:1e:e7:b7:16:02:86:
                    60:07:fe:15:95:50:8e:0e:dc:b5:b3:56:1d:a9:44:
                    29:df:8e:c7:1c:1b:4d:98:4a:58:1e:21:91:31:46:
                    1d:67:13:19:50:37:c3:25:59:65:2a:65:55:ea:0d:
                    65:28:11:d2:8a:8e:e1:78:16:38:82:58:ce:1a:ef:
                    d2:12:eb:39:08:55:4d:48:19:62:fe:00:9d:08:0a:
                    47:d0:a1:ca:b0:55:0c:32:84:7a:b7:e7:11:81:6b:
                    c5:d0:52:6f:cc:21:6a:f0:d5:8f:9b:77:09:b1:f6:
                    8b:ef:49:2e:b8:f5:1d:31:59:01:05:d6:05:2c:90:
                    84:43:05:dc:ad:8c:56:cd:5e:20:90:1d:2e:14:9e:
                    ef:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E7:3C:73:F0:9B:90:F9:24:7B:3B:DC:84:44:A1:65:CA:67:AC:52
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/c8fa0faf8575f8f15dac273923c366cd5d8d35d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:ff:8b:8a:eb:32:2f:7d:59:8b:69:66:38:a4:8d:3b:07:77:
         20:62:58:73:ef:12:80:5d:ef:14:4a:df:c1:43:23:aa:52:d0:
         7e:39:c2:69:b0:42:af:9a:b1:f0:53:36:e0:c3:99:80:b9:9a:
         98:1a:48:e2:d9:59:b2:a7:76:38:84:76:c8:ec:9b:19:50:9a:
         4d:49:e9:74:13:07:23:ab:29:bb:72:a6:e8:eb:4d:51:58:53:
         38:ec:f5:01:1f:a6:08:d8:77:9e:2c:95:db:3f:16:82:82:73:
         02:09:48:09:0d:c6:50:04:7a:90:6d:55:f3:c6:64:c3:f9:78:
         e7:af:b6:d6:5e:db:84:40:c5:dc:02:8b:65:ed:ab:c8:ab:f3:
         6c:f1:00:18:e4:6a:e5:81:08:67:31:00:c0:9a:ea:2b:52:2a:
         f5:67:18:c9:2d:65:fd:27:17:92:29:05:02:54:a2:eb:a9:b9:
         43:37:5a:35:ae:71:08:94:cd:7e:3c:fb:59:6b:8b:29:0b:28:
         f0:12:b9:19:ef:76:fc:72:8c:8d:97:5c:a8:b1:8c:3f:df:34:
         f6:78:bf:e6:06:93:1d:18:5f:36:77:76:95:4f:2e:5d:1c:d0:
         e2:d2:c3:44:84:f0:b7:40:87:12:f7:3f:65:ac:ca:33:33:3a:
         81:25:e1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-fra.rpki-client.org