Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/f7ecc0cd12b16e7e97324ac13e4f1234facf89bf.roa
File:                     f7ecc0cd12b16e7e97324ac13e4f1234facf89bf.roa (raw, json)
Hash identifier:          ajfyYbZuj2b6qdhQf2igoRmjQtOj6BbAnkN7Gg4GlwI=
Subject key identifier:   06:27:E8:86:F7:6B:FD:D6:62:F5:2F:78:72:3D:B4:1C:52:D8:4C:38
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1BC724
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/f7ecc0cd12b16e7e97324ac13e4f1234facf89bf.roa
Signing time:             Tue 27 Sep 2022 22:47:08 +0000
ROA not before:           Tue 27 Sep 2022 22:45:47 +0000
ROA not after:            Fri 27 Sep 2024 22:45:47 +0000
asID:                     11830
IP address blocks:        190.10.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1820452 (0x1bc724)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 27 22:45:47 2022 GMT
            Not After : Sep 27 22:45:47 2024 GMT
        Subject: CN=f7ecc0cd12b16e7e97324ac13e4f1234facf89bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e0:f1:02:a7:fd:fd:ed:87:64:d0:71:24:3f:
                    93:bd:c8:53:1a:c3:8c:d3:c1:37:cf:da:94:66:08:
                    d2:41:99:31:78:6a:c3:80:51:8b:a6:8f:77:5c:b5:
                    58:91:4f:76:11:8a:cf:ce:86:c7:c5:40:35:91:62:
                    57:12:2f:61:1b:50:e5:49:d6:a7:68:ee:4e:e1:d9:
                    88:3f:c9:d4:b1:63:eb:bb:6e:de:47:8d:ff:ef:c4:
                    d4:71:43:ec:42:65:8f:89:60:40:e6:f5:84:63:a2:
                    e1:fe:f7:b2:b7:6d:82:91:4b:c8:9a:d9:9f:35:0c:
                    d3:bb:67:f5:e5:b3:21:fb:ec:4f:af:dc:36:c4:f1:
                    9e:16:d5:02:83:6d:5f:aa:6b:42:db:2e:cf:34:e4:
                    48:2e:2e:c7:1a:24:87:e9:47:2e:5e:77:a0:6c:09:
                    07:13:b5:97:ca:aa:fe:e5:28:9c:4a:e2:90:b4:03:
                    0f:71:7a:bf:25:de:84:ef:d7:91:f8:fd:c5:a6:29:
                    c1:47:b6:ef:84:76:00:1c:6c:ce:58:90:f0:78:22:
                    58:72:4a:cb:45:e6:0d:08:51:3e:86:c0:4a:c1:61:
                    7e:87:a9:5f:c6:0a:5f:06:04:03:ab:ca:35:21:47:
                    a5:c4:05:0f:ef:a2:2a:97:fd:1d:b7:b7:85:be:e2:
                    e3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:27:E8:86:F7:6B:FD:D6:62:F5:2F:78:72:3D:B4:1C:52:D8:4C:38
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/f7ecc0cd12b16e7e97324ac13e4f1234facf89bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:0a:2b:f8:a8:ab:bb:6e:cb:a8:5c:42:d0:12:23:89:c6:cf:
         63:af:4b:14:12:3a:ed:8f:98:74:3c:13:41:52:2d:5f:b4:ea:
         e1:1b:e1:fb:dd:14:73:5d:cc:80:4f:58:01:b4:85:98:45:83:
         87:ab:b1:20:6a:9a:e1:4f:be:fe:72:b2:33:81:5b:02:db:6f:
         36:87:a1:e1:70:b0:ed:41:f4:52:8a:79:1b:ca:a7:ce:22:b2:
         b5:4d:53:7e:ae:13:28:91:4a:e7:f5:23:2e:5d:99:be:82:bf:
         6f:3d:93:f7:a4:17:92:47:e3:9f:ce:1a:48:7b:4f:68:a4:ba:
         bc:73:8d:47:0d:60:f3:d4:8c:2c:8e:59:ea:ce:2f:1d:51:ec:
         0e:72:36:47:76:02:8c:c2:91:19:d9:e2:43:36:07:ca:ac:bb:
         2f:66:7c:90:08:6c:bf:37:d5:94:57:49:01:9d:63:11:11:89:
         37:98:2f:04:eb:0f:fe:df:45:be:c8:32:4f:ae:28:6d:e6:ba:
         8e:72:fd:b3:58:c7:cb:6d:b3:9d:0e:88:c4:e2:03:b2:87:3f:
         cf:97:30:ad:9e:fe:d6:2d:8b:c4:20:ce:0a:19:26:15:e3:4f:
         96:5e:01:3e:18:38:e8:b2:00:9b:28:d8:08:a1:7d:23:04:ac:
         9c:0e:be:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:49 2024 by rpki-client on console-fra.rpki-client.org