Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/e1af9f8d813edf192cd94fd658a09639b15bb11b.roa
File:                     e1af9f8d813edf192cd94fd658a09639b15bb11b.roa (raw, json)
Hash identifier:          vOW/F2Sp5qvD/mgdrjaJfEen2lOl7LYdKSQrhWHrsiQ=
Subject key identifier:   DB:A5:21:6C:AD:1B:AA:7E:2D:AB:36:95:E8:1D:A1:81:D4:7E:68:95
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1BD293
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/e1af9f8d813edf192cd94fd658a09639b15bb11b.roa
Signing time:             Tue 27 Sep 2022 22:51:22 +0000
ROA not before:           Tue 27 Sep 2022 22:50:12 +0000
ROA not after:            Fri 27 Sep 2024 22:50:12 +0000
asID:                     11830
IP address blocks:        190.10.100.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1823379 (0x1bd293)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 27 22:50:12 2022 GMT
            Not After : Sep 27 22:50:12 2024 GMT
        Subject: CN=e1af9f8d813edf192cd94fd658a09639b15bb11b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:9e:b2:95:f1:7f:43:7b:01:a0:1a:7a:4d:3a:
                    d3:49:07:5d:7d:e1:e3:88:44:63:1d:c4:15:b8:91:
                    93:62:fd:b9:c7:c9:64:fe:5f:73:ef:75:5f:73:e2:
                    ae:25:47:72:11:24:6f:e6:3f:82:b9:7a:50:23:06:
                    79:2a:b5:88:c3:ea:f5:09:ff:7c:2c:89:a5:5c:e8:
                    b3:3a:a5:d8:5e:48:46:b4:96:b6:b6:40:66:9b:82:
                    7a:7f:6a:68:be:d9:93:6e:37:34:af:72:b0:35:58:
                    d3:bc:1e:d0:4f:f0:4a:a0:76:36:39:71:56:fd:27:
                    18:06:5b:86:4e:90:42:1e:98:a2:c6:75:0b:0a:39:
                    bc:01:d3:36:ce:92:df:ad:8a:f8:7f:b0:3f:db:5f:
                    cc:05:23:e9:85:ab:af:ed:0f:5d:e4:26:5a:8b:77:
                    12:2e:09:72:cd:23:80:b7:02:e1:ff:9a:ef:c4:03:
                    42:d6:6b:ae:3d:58:18:12:ae:c9:16:3b:da:bb:3f:
                    21:d2:47:af:48:76:dd:b9:57:a3:71:a9:db:31:f8:
                    3b:30:4d:c3:f4:1a:55:d2:26:37:e4:a7:a0:57:7e:
                    f5:1d:98:b5:d5:dc:4c:5c:66:12:ae:a5:8a:9e:09:
                    c9:8e:0b:e1:18:bc:e9:f9:74:31:91:6a:25:15:33:
                    6a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A5:21:6C:AD:1B:AA:7E:2D:AB:36:95:E8:1D:A1:81:D4:7E:68:95
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/e1af9f8d813edf192cd94fd658a09639b15bb11b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:4b:e2:d9:0b:19:2b:11:12:4b:d7:3f:78:2f:73:4c:a0:06:
         33:98:4b:7e:9c:65:28:5f:45:ad:7b:2d:d9:fe:3b:f3:26:a3:
         f3:da:ab:1e:d0:45:a5:75:e7:45:f1:44:fa:ae:7f:c6:11:16:
         99:90:21:a5:d3:77:a7:c0:db:5c:14:e9:3a:1f:8d:95:1d:49:
         de:8d:d4:6e:6c:e6:31:ff:e2:6e:d9:f6:8d:51:a2:fc:61:0c:
         52:d3:6e:4d:44:ea:f6:19:16:74:b0:a7:77:0c:0a:bf:d7:e4:
         c0:d1:a8:ad:ea:eb:e7:68:52:06:9a:c9:d3:7a:9a:ba:01:9b:
         42:19:d9:32:1a:18:9d:33:b0:1d:50:20:55:a4:73:ea:2e:1b:
         86:e7:58:99:ba:ef:da:76:15:63:16:d1:1f:6d:98:e5:0a:c9:
         5b:fe:97:ff:7c:50:e9:cc:63:83:af:e0:1e:b2:97:81:b5:cd:
         66:b6:a0:70:c5:64:1c:66:f5:66:82:94:78:a8:56:02:06:e7:
         43:66:8e:01:3d:5c:a6:9c:01:13:02:7c:34:7d:cc:ae:dc:21:
         e3:c3:79:9b:db:20:5b:88:f0:a1:c0:4a:df:15:a4:88:29:dc:
         22:77:fa:bc:62:5e:4f:bb:de:9d:0c:b1:8a:0a:8a:19:17:ce:
         8a:e5:4f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-fra.rpki-client.org