Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/dcc33670989b376a3f1dc5ae079fa3fce7d255a5.roa
File:                     dcc33670989b376a3f1dc5ae079fa3fce7d255a5.roa (raw, json)
Hash identifier:          gfBQWCzVchLhyeMaVxXWBMUGXXt04ImICYKHtM7tkj0=
Subject key identifier:   7B:94:A9:72:47:04:78:CC:A0:7A:A0:43:80:B4:BE:B3:2D:FA:FF:40
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       196BC1
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/dcc33670989b376a3f1dc5ae079fa3fce7d255a5.roa
Signing time:             Thu 15 Sep 2022 20:45:44 +0000
ROA not before:           Thu 15 Sep 2022 20:45:15 +0000
ROA not after:            Sun 15 Sep 2024 20:45:15 +0000
asID:                     3790
IP address blocks:        190.10.68.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1665985 (0x196bc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 15 20:45:15 2022 GMT
            Not After : Sep 15 20:45:15 2024 GMT
        Subject: CN=dcc33670989b376a3f1dc5ae079fa3fce7d255a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:de:88:23:80:3b:93:27:53:09:86:c9:36:f6:
                    b2:f3:57:de:d2:d0:be:be:b0:0d:10:48:31:61:cb:
                    27:76:94:7e:77:2f:8e:4e:6b:b2:b4:6a:b9:c1:d8:
                    e4:ba:3c:18:94:cc:7d:de:0b:85:1b:ab:ff:82:a9:
                    8a:5e:9a:ab:9c:fb:86:59:c4:5c:4c:9b:7a:5e:34:
                    31:e9:1b:bc:5f:b9:28:a9:e9:c3:dd:c9:4f:6b:25:
                    f6:e1:89:97:3c:81:f0:b4:a4:9a:b6:44:81:6b:5d:
                    e6:87:fe:dc:d0:1e:d6:ac:9d:98:9f:18:18:68:5f:
                    72:b2:17:20:5c:b2:bb:02:61:58:0f:60:7e:79:1f:
                    cd:61:43:4f:62:a4:66:64:2e:ca:8b:10:1f:fd:f9:
                    ed:84:74:f8:61:fa:d7:ec:ab:a7:ac:ed:9d:f5:6a:
                    0b:90:46:53:0f:0b:ae:af:2d:41:42:a3:0f:e8:1e:
                    e1:04:25:be:df:8f:4d:18:14:17:c2:7e:74:07:5c:
                    fc:a6:74:41:03:e1:09:6e:ec:e7:74:50:8d:ad:3a:
                    32:ab:5b:a0:ab:6d:59:2a:50:1c:74:ac:0b:67:fb:
                    99:97:0a:f2:4e:a3:ee:5c:a1:0f:a1:db:89:5c:cd:
                    b7:b1:42:76:4b:cd:37:55:ca:a7:92:c0:42:cf:11:
                    90:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:94:A9:72:47:04:78:CC:A0:7A:A0:43:80:B4:BE:B3:2D:FA:FF:40
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/dcc33670989b376a3f1dc5ae079fa3fce7d255a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:91:e1:20:c7:7f:26:f0:39:12:c6:96:03:4b:e9:89:89:27:
         e6:2d:f7:8c:e1:15:df:23:a5:5d:70:ed:2c:d2:f6:bf:75:81:
         92:68:5d:8a:bc:37:06:71:e5:46:25:2e:80:70:63:6c:1a:b8:
         84:d1:2c:82:57:88:b6:35:1c:f4:20:8d:04:06:da:0d:70:c9:
         89:b7:f3:41:7f:41:80:d6:f9:27:a7:0f:af:2d:f4:44:84:fc:
         b3:31:64:ff:78:64:78:5b:ab:c9:f6:8c:40:40:ce:29:95:40:
         53:46:a5:b0:4a:fb:96:2a:53:dc:55:2e:a7:75:94:e3:32:55:
         2a:07:3c:2a:64:fe:8f:f8:a0:45:6c:21:c1:59:10:13:00:8b:
         e2:35:a5:ce:be:e4:a4:f0:2d:50:8c:be:a7:09:f7:e7:3b:08:
         b3:8d:7a:46:76:00:c6:fa:84:ff:70:b7:5b:f4:ee:81:23:16:
         db:11:d3:0f:25:6b:5c:f1:10:25:0f:82:b8:19:65:c3:ec:c6:
         8d:c0:a8:98:49:2c:c4:13:72:ff:73:8e:0b:58:89:fe:6d:b0:
         b0:52:f9:a3:e9:9d:70:e6:87:27:ba:a8:78:f9:a2:e7:1d:f3:
         e0:6c:24:3b:1a:83:24:22:37:dc:70:fd:6e:88:6a:ad:ec:fe:
         e0:d4:79:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-ams.rpki-client.org