Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/d774ece0da5f06aeafd22ffe581d6745404519c5.roa
File:                     d774ece0da5f06aeafd22ffe581d6745404519c5.roa (raw, json)
Hash identifier:          GsHPKUCVuaQ+yEQmjatr36P+qc8yThcI52O3qO4KZW8=
Subject key identifier:   A7:00:1B:2B:67:90:28:60:D1:04:90:18:9C:7E:F1:C3:15:91:9A:24
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1E590A
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/d774ece0da5f06aeafd22ffe581d6745404519c5.roa
Signing time:             Tue 22 Nov 2022 23:21:13 +0000
ROA not before:           Mon 21 Nov 2022 23:16:45 +0000
ROA not after:            Fri 22 Nov 2024 23:16:45 +0000
asID:                     3790
IP address blocks:        190.171.27.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1988874 (0x1e590a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Nov 21 23:16:45 2022 GMT
            Not After : Nov 22 23:16:45 2024 GMT
        Subject: CN=d774ece0da5f06aeafd22ffe581d6745404519c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:57:57:c2:85:0e:87:b3:ba:1f:01:95:54:70:
                    85:25:71:ef:d0:f9:74:c7:c5:6a:4f:44:fc:df:8e:
                    4c:20:2a:57:6a:f0:ce:c0:bd:1b:fb:e5:3d:09:7b:
                    7b:4b:77:1f:3b:73:b0:3f:89:c6:e7:8d:19:4f:8c:
                    2a:42:3c:8f:50:36:15:10:a4:d5:11:00:4c:fe:9d:
                    b4:e9:a5:ab:f5:f0:77:86:d0:7d:68:2d:d4:85:07:
                    f7:3b:ea:2f:65:42:5b:a7:4d:d9:65:ec:4e:f3:f2:
                    ea:fd:87:3f:66:f6:8d:73:8f:fd:ec:35:11:31:41:
                    96:a8:00:4b:af:f9:15:c1:c4:f1:57:39:2f:0e:d7:
                    70:0d:a5:34:4b:2c:33:78:db:c5:9c:37:84:40:97:
                    e4:e4:30:05:9a:c8:a8:57:d1:3f:42:a5:67:94:29:
                    f2:5a:9a:fe:e0:ed:80:3e:9f:23:a9:b4:0e:4e:0b:
                    8a:27:9f:3e:2c:b7:80:bf:1a:e6:da:d1:c4:3e:0d:
                    53:29:4a:b4:fb:7e:73:bc:32:b0:99:23:dd:b7:0e:
                    d2:91:a6:39:ce:6a:1d:76:3c:d9:9a:27:ab:9e:eb:
                    fc:19:46:13:41:a5:e7:b0:13:8a:c5:b4:b8:16:6d:
                    ed:37:a2:d1:14:c4:39:58:ff:95:fb:49:96:da:52:
                    d9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:00:1B:2B:67:90:28:60:D1:04:90:18:9C:7E:F1:C3:15:91:9A:24
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/d774ece0da5f06aeafd22ffe581d6745404519c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:83:34:f8:df:f6:bf:01:c1:ea:a1:8a:5e:3e:ca:fa:55:11:
         be:59:03:ae:08:ae:60:f4:8d:c5:16:2e:dd:2f:63:f4:5e:2e:
         26:8b:ae:61:11:c2:e8:3e:24:b0:1a:ee:ec:45:1a:8e:ed:c6:
         a3:bb:27:f9:04:39:73:15:1a:a8:08:a4:7f:54:ab:85:9d:09:
         11:eb:a2:7f:ed:a7:59:62:fe:e6:74:d0:c7:40:d8:a2:f2:ed:
         63:54:68:11:37:71:d3:d8:51:af:51:47:4b:21:0c:31:de:84:
         5d:71:f0:78:fa:1a:f9:a3:bb:7b:94:c6:ac:78:2d:4b:5c:c1:
         42:3a:94:0a:16:03:fe:08:24:7c:cc:d1:b6:f7:87:99:48:f4:
         1e:dc:df:8d:9f:25:ab:63:d4:96:e6:e7:9c:46:cc:71:be:74:
         61:32:34:07:cf:ef:68:cb:81:ad:70:c1:04:98:a1:a4:c0:9a:
         6e:bf:fe:c7:1f:ac:e4:a5:a3:5e:38:03:f7:c5:89:50:83:01:
         70:34:ce:c9:61:65:11:43:51:29:99:a5:33:03:97:26:da:c8:
         c6:a3:16:38:79:82:0e:14:9e:0e:4b:fb:4b:f1:d0:d0:15:8d:
         0c:92:f9:42:ca:ea:71:1a:2d:52:57:9c:8a:4a:e3:41:cf:f4:
         e4:41:65:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-ams.rpki-client.org