Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/f1cba4f00c346dc4df6f4eed80161dfc371a43db.roa
File:                     f1cba4f00c346dc4df6f4eed80161dfc371a43db.roa (raw, json)
Hash identifier:          c/uDgSXSHiDOaKLWqF/jmJ1VKNmpB+gzWj5ZTLWfpBc=
Subject key identifier:   44:23:3D:03:8A:B7:29:1F:99:E9:21:19:8F:F7:A0:4D:4B:72:AB:89
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       198A61
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/f1cba4f00c346dc4df6f4eed80161dfc371a43db.roa
Signing time:             Thu 15 Sep 2022 20:51:48 +0000
ROA not before:           Thu 15 Sep 2022 20:51:06 +0000
ROA not after:            Sun 15 Sep 2024 20:51:06 +0000
asID:                     3790
IP address blocks:        190.171.14.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1673825 (0x198a61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 15 20:51:06 2022 GMT
            Not After : Sep 15 20:51:06 2024 GMT
        Subject: CN=f1cba4f00c346dc4df6f4eed80161dfc371a43db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a7:8f:36:5a:25:5f:d0:e3:7d:77:53:a0:73:
                    39:2d:18:bf:e4:d5:28:3d:82:55:99:2a:25:36:f3:
                    75:64:18:7e:54:ef:51:f9:fe:34:51:07:25:3c:21:
                    f6:ae:1d:70:8e:a3:d6:cf:1f:7e:70:a7:bf:42:70:
                    cd:1f:f4:1b:c2:b6:46:3d:77:4e:da:1f:18:d2:79:
                    00:27:7e:ad:8c:19:72:db:3f:0a:33:39:a8:5f:8e:
                    a1:0e:24:3b:e0:1c:84:b6:89:6d:04:3e:a2:35:88:
                    21:f7:77:6a:e0:90:ca:72:9f:eb:6c:ae:d2:13:87:
                    04:5c:12:88:5b:ff:2f:8f:5d:fd:a3:fe:b2:ed:cb:
                    a6:3d:ac:90:67:db:e1:02:91:14:d7:dd:93:20:f2:
                    82:49:d5:a7:6b:a4:a9:25:b4:fc:64:8c:f3:b5:5e:
                    95:cd:f2:af:06:be:12:30:e8:08:83:a9:6d:c1:ee:
                    38:d9:1f:a9:0b:92:ba:36:ea:62:df:62:fe:3f:2d:
                    68:c5:7b:fb:be:be:4f:69:36:0f:1f:6f:d3:1f:2e:
                    11:d3:83:f5:32:79:c0:58:23:12:72:f1:16:5a:44:
                    86:d6:ad:84:9e:32:56:76:a3:79:53:60:ee:a5:c6:
                    3a:4c:e4:fd:ba:52:51:7b:01:fe:cf:c7:cd:d3:b0:
                    8c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:23:3D:03:8A:B7:29:1F:99:E9:21:19:8F:F7:A0:4D:4B:72:AB:89
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/f1cba4f00c346dc4df6f4eed80161dfc371a43db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:8a:c2:0e:f8:6c:be:03:87:b7:30:ac:fe:74:05:63:54:16:
         b4:84:3b:20:2a:9b:2b:1d:09:86:b3:04:c0:10:00:11:68:bb:
         af:fb:2d:17:d3:94:01:8e:72:5c:75:38:5d:a2:91:98:e1:de:
         6f:f0:66:4d:80:d4:e9:cd:ef:a9:3e:5d:10:f8:a4:9f:df:0e:
         c7:f0:dc:4e:2c:a2:5f:f5:18:e6:33:a9:6d:f1:02:49:05:23:
         7d:fb:eb:17:1d:08:98:dd:52:b4:18:af:bf:20:d6:52:84:a4:
         9d:5f:b3:39:92:f6:df:7b:ae:6c:e3:d2:ba:af:65:e5:99:35:
         03:bc:83:ab:85:38:a6:2f:24:6f:27:58:ad:05:9f:30:e5:fa:
         a7:39:d8:04:4f:09:38:12:9b:17:e7:8b:f7:5a:fa:b5:d8:33:
         2f:f3:ab:d1:a7:1f:a3:13:73:81:7a:f7:82:1f:a1:91:06:07:
         14:7c:89:3b:1b:eb:91:ca:13:e9:5b:64:75:2a:b6:03:18:21:
         a0:e5:8c:e8:7d:d7:0f:0a:19:7a:06:a4:e0:e6:4e:47:db:b3:
         4c:3b:83:11:1b:eb:ba:69:b9:28:6b:26:b9:81:e3:c9:a1:22:
         ce:01:e9:70:48:39:9b:69:c8:73:e4:98:db:8d:9d:e5:8b:af:
         98:2e:90:d7
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGYphMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZj
M2YzY2JmOTcxYjMxZDRhMGZiNDhhMDYzZWQ4NmYwYjU5NGFjM2UwHhcNMjIwOTE1
MjA1MTA2WhcNMjQwOTE1MjA1MTA2WjAzMTEwLwYDVQQDEyhmMWNiYTRmMDBjMzQ2
ZGM0ZGY2ZjRlZWQ4MDE2MWRmYzM3MWE0M2RiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwqePNlolX9DjfXdToHM5LRi/5NUoPYJVmSolNvN1ZBh+VO9R
+f40UQclPCH2rh1wjqPWzx9+cKe/QnDNH/QbwrZGPXdO2h8Y0nkAJ36tjBly2z8K
MzmoX46hDiQ74ByEtoltBD6iNYgh93dq4JDKcp/rbK7SE4cEXBKIW/8vj139o/6y
7cumPayQZ9vhApEU192TIPKCSdWna6SpJbT8ZIzztV6VzfKvBr4SMOgIg6ltwe44
2R+pC5K6Nupi32L+Py1oxXv7vr5PaTYPH2/THy4R04P1MnnAWCMScvEWWkSG1q2E
njJWdqN5U2DupcY6TOT9ulJRewH+z8fN07CM1QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFEQjPQOKtykfmekhGY/3oE1LcquJMB8GA1UdIwQYMBaAFNgLQZU9gBToGKPM
I8FMT5TRqMEbMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmMzZjNj
YmY5NzFiMzFkNGEwZmI0OGEwNjNlZDg2ZjBiNTk0YWMzZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmE3ODYyZTgtZDJkYi00OGVhLWI4MDktZDRiOTcw
ZDFkODkyL2YxY2JhNGYwMGMzNDZkYzRkZjZmNGVlZDgwMTYxZGZjMzcxYTQzZGIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82YTc4NjJlOC1kMmRiLTQ4ZWEtYjgwOS1kNGI5
NzBkMWQ4OTIvNmMzZjNjYmY5NzFiMzFkNGEwZmI0OGEwNjNlZDg2ZjBiNTk0YWMz
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL6rDjANBgkqhkiG9w0BAQsFAAOCAQEAMorCDvhsvgOHtzCs
/nQFY1QWtIQ7ICqbKx0JhrMEwBAAEWi7r/stF9OUAY5yXHU4XaKRmOHeb/BmTYDU
6c3vqT5dEPikn98Ox/DcTiyiX/UY5jOpbfECSQUjffvrFx0ImN1StBivvyDWUoSk
nV+zOZL233uubOPSuq9l5Zk1A7yDq4U4pi8kbydYrQWfMOX6pznYBE8JOBKbF+eL
91r6tdgzL/Or0acfoxNzgXr3gh+hkQYHFHyJOxvrkcoT6VtkdSq2AxghoOWM6H3X
DwoZegak4OZOR9uzTDuDERvrumm5KGsmuYHjyaEizgHpcEg5m2nIc+SY242d5Yuv
mC6Q1w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:59 2024 by rpki-client on console-ams.rpki-client.org