Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/fd170d3d70cc3ae0a3fd0a5d9f62ea004fa13df9.roa
File:                     fd170d3d70cc3ae0a3fd0a5d9f62ea004fa13df9.roa (raw, json)
Hash identifier:          Tqt5Z5b0SA7HPf9sqVyLeVs9wyOmTzC9dCdI8x4k/rM=
Subject key identifier:   5F:7C:B7:62:AB:3D:C0:A8:B9:49:B2:A9:56:CD:35:01:C5:FC:94:9C
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1C22AD
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/fd170d3d70cc3ae0a3fd0a5d9f62ea004fa13df9.roa
Signing time:             Wed 28 Sep 2022 15:54:54 +0000
ROA not before:           Wed 28 Sep 2022 15:54:04 +0000
ROA not after:            Sat 28 Sep 2024 15:54:04 +0000
asID:                     11830
IP address blocks:        190.10.116.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1843885 (0x1c22ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 28 15:54:04 2022 GMT
            Not After : Sep 28 15:54:04 2024 GMT
        Subject: CN=fd170d3d70cc3ae0a3fd0a5d9f62ea004fa13df9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3b:c9:17:cd:bd:27:9e:46:22:23:a0:0a:41:
                    65:60:d5:68:ff:76:5b:40:67:ec:c7:e1:29:f0:fc:
                    29:27:55:e9:2b:01:dc:56:02:f4:92:5f:70:87:db:
                    42:fe:50:33:c8:0b:56:a6:20:20:6e:10:51:aa:3b:
                    fd:fd:cf:3e:6d:fc:95:1f:6e:71:34:0e:69:ab:8b:
                    fb:1d:a8:40:53:45:97:eb:29:57:35:65:5f:d7:81:
                    c8:32:53:d1:a8:30:33:46:4c:78:2e:f6:28:a3:6b:
                    27:ca:e8:44:46:09:4d:fe:b5:b2:b6:96:71:78:67:
                    1d:d8:3a:ab:35:18:5e:bd:51:9f:ff:ba:a8:a4:6c:
                    76:2a:0d:54:aa:f5:65:90:2d:2c:cc:33:da:4a:cd:
                    c5:a1:2e:07:3b:0e:04:53:51:3e:c3:a4:4f:a2:d3:
                    3c:37:87:b7:4b:db:e4:9c:66:2c:60:8a:22:7e:da:
                    88:d9:5a:19:b8:d4:80:d7:c9:f6:59:80:a6:15:5d:
                    05:65:90:79:a6:77:a3:98:ba:22:7f:9f:bb:67:28:
                    49:16:00:9b:0d:2a:2a:4e:d8:8a:80:dd:cb:47:c3:
                    83:28:3f:13:3c:fe:05:2a:ed:67:fd:0d:a8:5b:a6:
                    48:8f:ca:a0:21:f3:32:50:52:5a:8a:13:11:cd:c5:
                    42:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:7C:B7:62:AB:3D:C0:A8:B9:49:B2:A9:56:CD:35:01:C5:FC:94:9C
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/fd170d3d70cc3ae0a3fd0a5d9f62ea004fa13df9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:90:70:4c:88:03:a3:39:17:8f:15:10:9f:5a:59:cf:a6:80:
         bd:c7:50:2a:2e:21:7c:2b:bc:36:34:54:2c:35:92:bc:32:dd:
         4b:a6:47:bf:01:45:1f:52:12:01:66:b5:40:81:4e:b8:ca:89:
         42:d4:9a:3e:90:21:34:1d:57:35:59:94:72:4b:3c:cb:57:61:
         68:ff:94:db:1a:49:17:c1:70:6f:e2:66:2d:d7:7d:f9:b8:b4:
         86:cd:a0:fd:0e:22:98:2d:dd:3b:02:d7:99:c8:9a:b3:6a:bf:
         87:7a:1b:2d:7d:c6:c5:65:32:a5:a9:a3:ed:30:c7:0f:e7:46:
         b8:98:c9:da:39:99:a9:46:c4:87:0b:41:70:a2:68:71:31:34:
         92:43:c9:b2:47:8e:aa:ce:14:19:aa:b2:ea:e8:db:cf:92:f4:
         6d:79:6a:06:cb:1f:60:39:7d:d4:68:81:88:0f:5b:cc:a7:88:
         a8:4e:c7:81:bb:95:a3:d9:8a:3d:e5:a0:cd:42:ac:ec:03:b4:
         e9:05:b9:be:76:b3:41:53:3b:2c:f3:42:d8:60:d2:7f:cc:c1:
         7b:27:ff:f6:21:f0:c4:2d:db:bd:b7:fd:bf:7c:51:cc:78:53:
         65:d0:a8:71:4f:1f:d4:c8:fb:34:24:55:5c:26:e1:7c:67:fc:
         e1:aa:0a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-ams.rpki-client.org