Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/f7577a3014ac53e6cbff91bb64e7166077c3fdd2.roa
File:                     f7577a3014ac53e6cbff91bb64e7166077c3fdd2.roa (raw, json)
Hash identifier:          kGZ9MxYj56EJyvQN9yd/aIwdHw/+Ynk24WT/PbNHZgQ=
Subject key identifier:   BF:49:34:8A:2A:8C:F5:78:F5:2F:16:46:3B:02:E2:D0:55:94:F4:7B
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       198370
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/f7577a3014ac53e6cbff91bb64e7166077c3fdd2.roa
Signing time:             Thu 15 Sep 2022 20:50:27 +0000
ROA not before:           Thu 15 Sep 2022 20:49:57 +0000
ROA not after:            Sun 15 Sep 2024 20:49:57 +0000
asID:                     3790
IP address blocks:        190.171.4.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1672048 (0x198370)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 15 20:49:57 2022 GMT
            Not After : Sep 15 20:49:57 2024 GMT
        Subject: CN=f7577a3014ac53e6cbff91bb64e7166077c3fdd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e0:2d:62:d1:19:e2:96:c7:e3:90:7e:b9:16:
                    ac:16:f3:08:06:82:be:5d:be:e7:ea:39:df:2f:01:
                    84:3c:0f:09:74:85:e1:02:84:ff:26:d6:8a:e4:dc:
                    79:83:2c:82:1c:3d:ce:04:18:1f:15:e1:dc:eb:3b:
                    3e:c8:4d:fa:be:33:b7:ca:83:75:84:ea:d1:f3:01:
                    6f:b4:11:71:c6:8a:4c:d2:65:65:91:57:39:f0:e8:
                    5f:1e:03:01:57:f5:26:06:bb:7f:03:86:9e:86:36:
                    23:dc:bb:22:89:9a:cc:6f:37:bf:56:cd:c6:cc:38:
                    3f:a4:2b:7f:c3:b5:c1:69:aa:8b:3e:59:ab:d7:1d:
                    e7:d0:02:23:bd:1d:fb:58:04:09:d9:37:3c:9d:6f:
                    0c:2c:01:da:ff:9c:db:b4:00:d5:ca:96:53:09:b3:
                    dd:59:a3:e4:c5:48:ab:c2:d4:4a:03:49:4b:9f:b3:
                    e2:5d:0f:5e:8c:35:e3:45:c5:ed:46:3f:ee:35:5e:
                    87:12:71:f2:b7:30:ae:40:a3:5b:98:62:5d:60:8b:
                    5c:a6:bd:e4:31:13:68:89:73:fa:38:a8:ad:0f:a2:
                    2e:03:69:e4:ad:19:f8:ef:9f:60:c4:ed:ca:61:9f:
                    be:af:e5:95:9b:b0:8f:c2:45:eb:a3:7e:d4:c8:83:
                    99:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:49:34:8A:2A:8C:F5:78:F5:2F:16:46:3B:02:E2:D0:55:94:F4:7B
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/f7577a3014ac53e6cbff91bb64e7166077c3fdd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:f9:f0:2b:7f:ab:8b:7e:ea:4e:9c:c2:85:65:43:18:e8:11:
         93:c8:5d:75:1e:59:75:f4:f3:e2:a2:94:64:01:9e:2d:e0:34:
         65:09:a9:7f:83:8a:0c:a3:26:09:37:92:3b:6a:4b:c3:f0:92:
         c2:55:8a:d1:be:6a:3b:0e:43:52:64:f7:48:6f:07:7d:bc:9a:
         3a:b1:7d:db:83:65:a4:30:88:1d:63:2a:db:f9:84:65:15:0c:
         f6:a1:03:48:15:47:0a:11:98:cd:da:d7:71:98:27:95:cd:00:
         64:da:e7:4b:73:42:4b:a5:41:37:00:93:15:37:d2:d7:f0:60:
         d6:87:90:a3:01:02:4e:67:1d:75:6e:c7:79:c2:37:d2:e0:81:
         74:9c:2a:d3:01:2c:8b:6a:ea:14:e1:b1:bf:34:8e:a1:fd:82:
         f3:31:df:db:10:1e:51:03:95:24:5c:ff:57:b9:4a:ad:65:34:
         0e:42:5c:8f:ab:d5:a1:75:de:73:e7:14:d3:53:bd:58:61:0e:
         2d:59:57:16:60:45:bc:36:bb:d7:2a:95:54:4b:36:8e:65:54:
         02:75:b5:ff:7a:48:40:08:be:a1:7a:e6:1a:26:43:fe:32:0d:
         e9:32:10:ac:f1:bd:cb:f6:7c:d7:33:fa:53:ec:f0:70:06:6a:
         68:4b:f0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-ams.rpki-client.org