Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/d834dc1030dc32db7830acc861ebde77289d122f.roa
File:                     d834dc1030dc32db7830acc861ebde77289d122f.roa (raw, json)
Hash identifier:          OnAPMKms4lNGhHP1IcQGDCrKNFVbCm+tDlJOkGHgjkA=
Subject key identifier:   20:C5:2D:24:34:44:9C:79:7A:C6:67:35:BD:B2:D3:7B:3C:AF:1E:AB
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1C4FAC
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/d834dc1030dc32db7830acc861ebde77289d122f.roa
Signing time:             Wed 28 Sep 2022 16:07:17 +0000
ROA not before:           Wed 28 Sep 2022 16:06:29 +0000
ROA not after:            Sat 28 Sep 2024 16:06:29 +0000
asID:                     11830
IP address blocks:        190.171.2.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1855404 (0x1c4fac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 28 16:06:29 2022 GMT
            Not After : Sep 28 16:06:29 2024 GMT
        Subject: CN=d834dc1030dc32db7830acc861ebde77289d122f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:17:d3:eb:54:44:5b:13:c1:bc:c2:9f:09:7a:
                    2c:79:e3:ee:f8:7d:18:10:12:5d:9b:a5:4e:1e:96:
                    f1:43:34:00:94:be:30:21:f5:a6:5c:9c:c7:a2:ab:
                    7a:a5:fd:ab:ed:e3:7c:15:e0:8d:dc:f3:bd:80:ae:
                    aa:66:49:36:e7:72:08:74:ac:4f:c6:1e:58:cf:38:
                    75:de:57:11:3c:40:85:94:79:8c:9e:14:0c:00:e1:
                    bf:09:de:23:3f:74:a4:81:8c:84:7c:8a:1c:78:73:
                    7c:f0:fc:22:4e:5c:6a:39:64:9f:40:c9:6a:21:3a:
                    7e:e3:aa:5c:59:d2:de:4b:3f:bc:0e:57:48:7c:7d:
                    dd:c3:c6:c1:00:95:fa:69:95:df:3c:f3:d3:ca:f8:
                    ba:b3:05:24:20:b4:03:77:dd:6d:3f:4b:10:ca:59:
                    cb:26:ae:b1:b9:50:6e:98:fe:71:e0:be:5d:2a:be:
                    65:82:13:5d:c3:8a:fe:b7:76:78:b0:f6:7f:89:fe:
                    ca:6a:06:6c:d7:fc:8f:0e:38:5c:ed:cf:34:a3:55:
                    10:28:bf:04:db:51:a9:25:fb:7f:3b:85:68:1a:d2:
                    52:28:f0:5c:db:b7:83:8c:e3:13:7d:28:64:ed:f1:
                    6d:47:b7:57:df:46:f7:10:e8:a5:8f:5a:fa:33:b4:
                    bb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C5:2D:24:34:44:9C:79:7A:C6:67:35:BD:B2:D3:7B:3C:AF:1E:AB
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/d834dc1030dc32db7830acc861ebde77289d122f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:f7:9c:dc:36:22:43:ff:64:86:56:87:11:b0:fe:d5:11:65:
         84:c4:33:d2:df:f8:1f:a2:ad:e8:ed:8f:92:89:5a:b1:fd:07:
         7d:86:44:d0:aa:52:12:81:81:f3:aa:28:d1:64:f5:b1:42:9f:
         c5:47:65:b7:d3:fc:2e:54:e7:25:83:c6:fb:78:99:c8:c0:89:
         fa:19:09:13:89:7a:30:12:e2:5a:73:ab:9f:55:23:23:f7:ed:
         a1:0c:9f:83:d9:5f:6b:74:02:ae:d1:3e:5d:db:db:b7:6e:f7:
         41:d3:a6:59:d0:82:9e:a0:15:3f:31:da:5d:27:32:6c:75:f1:
         35:b5:53:4f:cc:e1:f0:07:5e:62:82:85:f0:fa:5d:74:00:ca:
         bc:36:5f:cf:69:ec:59:b9:41:e1:c9:2d:1d:af:d7:1a:cb:2d:
         ef:b0:61:09:1f:96:83:27:20:a1:03:6b:e2:5c:19:64:38:f8:
         b7:a2:ee:ff:fa:a1:96:84:33:54:9a:c4:27:e4:75:88:70:ff:
         24:ec:46:20:af:93:dd:fb:27:c1:fc:41:4e:d7:4b:5d:21:96:
         e1:df:26:14:e5:4f:88:2b:06:c2:67:8c:59:80:55:a8:b3:83:
         70:4e:67:8d:64:96:d7:95:3b:82:13:2c:d2:f8:e1:88:9e:1b:
         41:05:85:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-fra.rpki-client.org