Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/f138a50b6aeebf87b2c660ea9c402dad570594ad.roa
File:                     f138a50b6aeebf87b2c660ea9c402dad570594ad.roa (raw, json)
Hash identifier:          Frdt/OEsgUZeCYmGysH3UR0VvRpRqDzcP1JlcPQXpmo=
Subject key identifier:   5F:7B:0C:67:9A:43:DD:2C:E9:FF:7C:63:98:0A:E1:08:F9:54:8A:9E
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1B6341
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/f138a50b6aeebf87b2c660ea9c402dad570594ad.roa
Signing time:             Tue 27 Sep 2022 22:20:55 +0000
ROA not before:           Tue 27 Sep 2022 22:14:44 +0000
ROA not after:            Fri 27 Sep 2024 22:14:44 +0000
asID:                     11830
IP address blocks:        190.10.62.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1794881 (0x1b6341)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 27 22:14:44 2022 GMT
            Not After : Sep 27 22:14:44 2024 GMT
        Subject: CN=f138a50b6aeebf87b2c660ea9c402dad570594ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ce:60:d7:03:88:69:49:b7:d5:46:8d:e1:9d:
                    cc:54:7f:f2:25:3e:ba:49:6d:88:91:7a:dd:51:b3:
                    ba:a9:a3:d8:b1:5c:d7:f0:c3:fc:bb:f7:f0:5a:a1:
                    d0:43:0e:37:7a:5a:a3:25:03:18:4d:93:72:9f:5d:
                    57:e0:ee:89:cf:9e:07:3c:71:74:d4:43:6b:70:bd:
                    88:0c:6c:2c:ba:6b:4a:01:d8:bf:3c:df:59:a9:65:
                    b6:07:e8:6c:37:60:36:9b:d6:c1:5a:8f:2d:96:cf:
                    c4:f4:df:c6:ba:d9:ad:a1:ed:5e:35:51:56:b6:99:
                    7e:70:30:6a:38:12:b4:10:fc:73:8f:c3:7d:3c:20:
                    5e:0b:76:e1:2f:4c:3c:bc:bc:3d:02:02:a3:64:77:
                    36:b4:83:e6:e3:e5:f7:47:05:d6:42:f5:11:c5:7c:
                    e5:00:07:8d:f4:f7:75:9a:38:b6:44:cd:d6:34:61:
                    6b:c4:f8:7c:61:bc:ff:fd:57:a7:65:80:63:ce:79:
                    1e:cf:5d:6c:9c:0b:24:1f:b7:89:e3:66:0c:00:0f:
                    8d:45:92:cf:63:fd:2a:55:0c:3d:13:64:5e:1a:51:
                    37:23:45:a3:cb:20:41:dd:bd:45:ee:f4:90:79:a3:
                    ca:cd:55:a8:fc:de:20:cc:77:9a:a0:4e:4f:62:29:
                    70:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:7B:0C:67:9A:43:DD:2C:E9:FF:7C:63:98:0A:E1:08:F9:54:8A:9E
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/f138a50b6aeebf87b2c660ea9c402dad570594ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:f3:a4:ad:1a:e0:75:ea:0e:6f:1b:d6:f3:9f:9a:ee:09:7a:
         69:5b:50:2f:85:2d:7f:d3:e0:c6:47:c3:e6:3d:ce:7c:e1:6b:
         da:c8:db:ca:35:5d:f3:93:39:17:07:30:61:05:28:9e:22:67:
         b1:7c:59:57:60:30:c5:83:cc:37:0b:20:1e:dc:90:56:e4:be:
         b4:40:24:64:17:b1:06:a8:1c:17:b3:d3:a2:34:4c:b1:2e:df:
         3a:79:c6:b1:00:cd:52:dd:cf:86:90:d0:60:54:46:0c:19:d2:
         7c:b1:8b:d7:a7:7b:26:fe:fa:5c:c2:83:51:21:d2:f3:d0:48:
         b0:2f:64:4f:f9:65:ed:71:f8:54:9e:ca:23:e4:fb:6f:72:d6:
         36:31:69:26:a3:7c:a9:d3:63:63:1d:7f:31:00:ab:c6:e4:bb:
         4b:4e:95:6a:4a:c2:c7:9a:e6:14:55:24:73:0a:67:2b:8e:5d:
         50:41:08:f7:8f:ab:e9:4f:20:b4:c0:ab:f1:d4:22:31:89:56:
         20:c1:f8:c8:15:41:53:4e:c5:ca:f5:80:c6:37:67:d2:01:bd:
         a3:3d:37:d8:ea:47:d3:e0:4a:2d:a7:c7:07:e7:8d:03:7b:31:
         5b:35:b5:9a:07:67:53:3a:ab:0c:4c:ac:1e:46:4f:49:bd:f0:
         5c:92:4c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-ams.rpki-client.org