Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/edb680e96dbf9becbd9224db1396d34523006cc7.roa
File:                     edb680e96dbf9becbd9224db1396d34523006cc7.roa (raw, json)
Hash identifier:          dmpiwKzFraCUTRdqYQCpotYyFpfgafnHBDBEvk7d5a8=
Subject key identifier:   DD:90:2A:87:B7:BC:45:DB:6B:33:F4:E5:E6:85:10:C8:C6:EB:DE:54
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1BD918
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/edb680e96dbf9becbd9224db1396d34523006cc7.roa
Signing time:             Tue 27 Sep 2022 22:52:28 +0000
ROA not before:           Tue 27 Sep 2022 22:51:32 +0000
ROA not after:            Fri 27 Sep 2024 22:51:32 +0000
asID:                     11830
IP address blocks:        190.10.101.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1825048 (0x1bd918)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 27 22:51:32 2022 GMT
            Not After : Sep 27 22:51:32 2024 GMT
        Subject: CN=edb680e96dbf9becbd9224db1396d34523006cc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fd:1e:7e:a6:96:be:68:79:38:0a:97:8c:fc:
                    86:e6:4e:2d:38:e2:38:b8:98:31:fd:6a:bf:be:3d:
                    09:a3:54:fb:8c:b9:e8:51:82:4c:c0:ae:8c:dc:4c:
                    a5:53:de:4b:63:3e:12:8c:81:ae:f3:2c:e3:84:11:
                    84:a2:9e:fc:5c:43:f4:e7:22:e8:87:d7:93:45:00:
                    82:b0:7d:f6:4a:55:de:7c:6b:8e:b3:66:e9:82:44:
                    43:81:c1:d7:17:86:51:ce:3e:b8:f8:30:2a:ee:43:
                    6b:ed:c3:5a:f0:65:76:a8:c6:4b:d9:67:7e:ff:9a:
                    5f:4c:29:3b:82:75:a4:b0:8b:87:29:06:41:a3:5c:
                    45:32:38:d5:46:3a:f0:c1:d5:c8:5e:37:23:dd:e5:
                    7f:34:63:1f:c2:b2:bd:df:10:7d:3a:4e:2c:ae:0a:
                    6d:9a:7d:5d:98:38:bf:7f:37:2d:bf:c7:1d:77:36:
                    a7:3a:90:49:45:24:38:01:7e:c8:47:4d:02:43:c4:
                    f6:17:be:2e:da:99:91:f6:59:57:bb:cd:fd:ae:1e:
                    c8:6d:f4:0e:2c:fa:02:79:e2:83:74:f3:5a:ff:1b:
                    a5:82:57:c6:77:6f:3d:2e:e8:f1:59:7a:c9:f5:e6:
                    10:52:f9:4b:59:3c:b5:03:d0:c3:a4:67:68:74:d6:
                    48:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:90:2A:87:B7:BC:45:DB:6B:33:F4:E5:E6:85:10:C8:C6:EB:DE:54
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/edb680e96dbf9becbd9224db1396d34523006cc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:9e:9b:1c:71:52:03:94:76:33:5e:59:07:49:e3:ad:ad:64:
         d9:9a:ba:5e:05:a6:2f:6d:bb:1a:ba:09:4e:bb:d1:91:7b:74:
         97:35:ea:de:9f:ed:93:26:6e:38:14:57:7c:a0:33:7b:7d:8a:
         cd:66:7a:d7:30:75:fe:0a:e0:8d:3b:de:b8:95:12:c1:fa:a8:
         32:55:4b:01:2d:ec:eb:be:2b:9f:e0:36:9d:36:65:f0:30:48:
         4f:7f:a0:7b:78:a8:a2:28:9c:51:19:97:7d:5b:b5:02:61:73:
         dd:0f:ad:30:75:81:c3:29:d2:96:4a:2e:b3:d8:62:9f:1b:42:
         de:44:ce:f4:94:e0:5b:ff:33:d1:c1:42:94:3b:6c:7e:7e:91:
         52:f7:4f:e4:3a:bc:8f:dc:b8:f4:e5:66:7b:3b:72:df:57:88:
         13:81:cd:ff:fb:27:23:8d:f7:64:7c:c7:fa:01:34:da:55:4f:
         3e:ea:bf:ee:fd:3d:63:65:46:30:57:4e:e1:1b:2b:23:7e:00:
         5d:30:db:56:3e:c4:3c:6e:dd:66:65:c9:fb:bf:aa:f6:59:dd:
         d6:8f:81:25:cc:d5:89:45:b4:19:70:ed:35:61:1d:4f:ee:b7:
         ab:34:2b:78:4d:b3:74:4c:cb:87:35:c8:33:22:cc:1e:89:d7:
         1c:32:4a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:59 2024 by rpki-client on console-ams.rpki-client.org