Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/f43e5a9e2a1f2409b4b75249b5c3abe2c82977e5.roa
File:                     f43e5a9e2a1f2409b4b75249b5c3abe2c82977e5.roa (raw, json)
Hash identifier:          NhTJ0IhC1eiRsNVdf/MOq3xLc9r7/k4DGszylNvhpNE=
Subject key identifier:   F4:AE:99:2A:E8:7D:29:4B:F6:EB:5A:DE:AA:89:14:C9:78:E3:C0:30
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1C35EA
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/f43e5a9e2a1f2409b4b75249b5c3abe2c82977e5.roa
Signing time:             Wed 28 Sep 2022 16:00:50 +0000
ROA not before:           Wed 28 Sep 2022 15:59:48 +0000
ROA not after:            Sat 28 Sep 2024 15:59:48 +0000
asID:                     11830
IP address blocks:        190.10.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1848810 (0x1c35ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 28 15:59:48 2022 GMT
            Not After : Sep 28 15:59:48 2024 GMT
        Subject: CN=f43e5a9e2a1f2409b4b75249b5c3abe2c82977e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a1:37:89:3d:86:a2:9c:32:dc:aa:55:9b:5b:
                    1f:5a:0d:59:9c:6f:bd:d5:6f:04:ec:20:1f:8e:1f:
                    6a:29:8b:34:e3:ee:6d:f0:d7:2e:47:e8:5b:c5:2c:
                    21:24:2c:ce:c8:43:aa:0d:2b:78:c0:58:7d:d4:40:
                    b7:91:30:cd:27:13:f3:e4:06:9a:23:75:b4:43:e6:
                    12:af:3d:99:c4:1a:b2:98:cf:1a:ce:f6:e2:c7:7c:
                    25:c9:2b:2e:f5:67:32:87:11:8e:5f:09:74:e3:31:
                    d8:3b:5a:4d:ea:e3:e7:d5:b5:42:b1:a4:82:a9:4c:
                    27:e7:24:47:cf:b0:89:79:6c:c2:ec:eb:1f:4c:65:
                    47:42:d2:73:3c:16:aa:21:95:ec:3d:df:97:09:e8:
                    ca:eb:49:13:85:29:5a:8d:6e:7a:86:dc:bd:e4:f7:
                    b0:51:95:8d:78:49:43:0a:81:a7:be:49:31:96:4b:
                    92:25:f4:8c:b7:d0:18:28:af:b1:b7:3b:c7:ae:b3:
                    e8:b6:46:f0:61:b5:f3:af:2d:b0:82:1f:e1:86:ca:
                    3a:ba:6e:a2:4c:c6:67:4c:90:4d:1e:37:91:ec:74:
                    82:e7:5f:6f:af:2c:3a:3e:8b:dc:64:38:67:e2:14:
                    ad:df:fc:4e:36:35:b6:fa:83:da:f5:09:1b:b4:43:
                    37:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:AE:99:2A:E8:7D:29:4B:F6:EB:5A:DE:AA:89:14:C9:78:E3:C0:30
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/f43e5a9e2a1f2409b4b75249b5c3abe2c82977e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:1c:01:93:92:2c:35:6f:53:7a:06:2a:ec:6f:1a:3a:b6:f6:
         1b:b9:45:23:b7:ec:50:5c:a6:d7:31:a5:de:6b:d0:ca:98:6e:
         91:1b:ab:00:68:9c:b5:78:35:eb:b8:9d:ef:4b:36:63:e4:ff:
         cd:70:83:23:f2:7c:8d:03:eb:15:cc:a0:2c:ff:a1:46:fd:e6:
         f3:5a:97:9f:d7:38:1f:aa:80:10:75:78:28:1f:98:52:e2:2b:
         9b:03:7b:83:12:e8:22:2d:0d:ff:b4:97:90:96:6a:4a:da:2f:
         d9:0e:57:63:35:26:80:b0:7b:d4:0c:7b:a5:a5:dc:d0:6a:7b:
         40:d6:cc:d9:bf:b9:18:ce:07:0d:c5:85:43:01:0d:e9:d6:b7:
         79:8a:6c:bb:40:9e:ca:e4:93:24:79:13:b2:f3:d5:c8:b0:51:
         34:4b:99:cb:19:f0:f4:6c:40:c0:30:98:5e:c2:c0:1e:22:f8:
         dc:8a:bb:71:97:81:0e:81:4b:44:d9:bd:bf:4b:cb:12:c0:63:
         12:40:01:cf:bf:49:ea:dd:28:e6:da:a2:28:ea:d5:6a:b0:ee:
         89:bf:d6:73:97:0d:cb:d1:b5:b3:13:9e:dc:28:d5:44:00:2d:
         e9:a4:b6:5c:b1:91:2f:7d:67:92:aa:59:0c:d3:15:17:dd:86:
         8d:c2:13:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-fra.rpki-client.org