Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/ca3edd7b48c6ab862c3c06f1599884e30cfa2676.roa
File:                     ca3edd7b48c6ab862c3c06f1599884e30cfa2676.roa (raw, json)
Hash identifier:          vSYwgnREwYVGO3f15iArZRo+zhD+1yHojiEXYhqivPc=
Subject key identifier:   D5:0E:9E:4E:A1:FF:9D:FE:01:46:DD:A8:52:F7:D8:7E:63:F8:C2:CE
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1B46B9
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/ca3edd7b48c6ab862c3c06f1599884e30cfa2676.roa
Signing time:             Tue 27 Sep 2022 17:29:38 +0000
ROA not before:           Tue 27 Sep 2022 17:28:17 +0000
ROA not after:            Fri 27 Sep 2024 17:28:17 +0000
asID:                     11830
IP address blocks:        190.10.55.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1787577 (0x1b46b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 27 17:28:17 2022 GMT
            Not After : Sep 27 17:28:17 2024 GMT
        Subject: CN=ca3edd7b48c6ab862c3c06f1599884e30cfa2676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:11:14:d4:ff:62:33:9f:6a:8e:91:4d:bd:33:
                    69:af:fe:f9:e5:cf:72:ad:6e:fc:0e:e1:0c:a4:cd:
                    ae:60:46:4e:db:dc:eb:e8:4b:d8:4b:2c:29:f4:cb:
                    34:f3:8c:bb:1f:81:6b:3f:e2:19:77:6c:b0:00:c4:
                    c7:80:c1:af:f9:34:b1:96:69:3a:94:5e:65:28:2e:
                    88:fa:ec:f5:7e:f7:45:d2:2d:0f:42:95:35:9f:e7:
                    a1:3b:d7:c7:c9:26:89:d4:94:84:a8:0e:28:1d:d2:
                    9a:e1:ef:b9:25:70:91:e2:03:c4:d6:5f:07:51:31:
                    01:39:0f:0d:f3:0c:65:c9:50:0f:29:60:13:33:a5:
                    b9:b7:66:9d:6d:a5:69:4e:0d:15:a7:b9:8c:98:3f:
                    8f:02:05:3f:55:db:3f:20:48:f7:56:8f:36:41:d4:
                    71:c9:62:df:ea:bd:5c:83:cc:9d:79:47:08:97:48:
                    98:34:8d:9f:ea:e9:4d:0b:9e:a6:b7:73:f1:51:00:
                    03:0f:26:86:f0:e3:ca:aa:de:c2:0e:83:69:ec:09:
                    69:35:52:66:ae:dc:92:36:53:a1:90:b1:46:ed:50:
                    a9:6c:96:95:80:7d:6a:38:e2:2c:84:87:1d:ee:d0:
                    9a:91:8a:f4:f6:07:d8:20:26:69:d5:d6:fd:5d:a7:
                    b4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:0E:9E:4E:A1:FF:9D:FE:01:46:DD:A8:52:F7:D8:7E:63:F8:C2:CE
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/ca3edd7b48c6ab862c3c06f1599884e30cfa2676.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:22:e0:5d:54:dc:35:02:82:6b:43:73:44:cc:97:66:2d:62:
         9f:2f:8b:3b:d8:c4:cc:d8:bb:e0:e0:78:51:d2:92:ea:56:ab:
         35:da:f7:31:05:73:45:f2:0e:f2:3e:d2:33:4c:af:f8:e7:32:
         b1:07:de:a0:2b:34:76:8d:80:19:d5:40:a7:fd:08:2d:58:78:
         4c:c0:6e:e0:86:68:27:af:ec:ac:13:53:88:b0:e7:27:0f:df:
         a1:43:07:21:f0:69:22:06:1c:b4:93:57:a2:6a:e9:ec:cf:d4:
         6a:10:2d:13:0a:42:e0:3d:71:25:a9:16:97:5f:84:68:a2:33:
         39:30:6d:ff:ae:c8:fa:c0:d1:a4:a9:f8:7a:75:04:83:2c:90:
         75:cf:dd:09:30:d6:17:46:f8:95:9a:1d:39:4c:ab:ca:75:92:
         4f:cf:c9:92:3f:6d:cd:cf:3a:43:3c:16:68:94:93:ce:33:74:
         5c:4a:c6:56:a1:45:d7:96:c3:f1:23:9d:4b:5e:a9:a9:2f:f4:
         1a:29:03:d4:90:68:e6:79:2e:16:77:9c:7e:d7:62:4b:4a:ed:
         dd:d2:cd:76:0a:7b:4d:b2:6f:19:34:57:2b:f7:c5:bd:a7:07:
         99:6f:82:64:85:d5:49:24:fe:d2:82:71:bd:ee:45:4d:78:25:
         a4:b3:7d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:49 2024 by rpki-client on console-fra.rpki-client.org