Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/fd8b6f6100016f43b2c6d3639bbc5174cdd9f4b7.roa
File:                     fd8b6f6100016f43b2c6d3639bbc5174cdd9f4b7.roa (raw, json)
Hash identifier:          tKCapf0kYrcB2rSmXZvVsuPkfF5vZ8KFot7rtD6p1gU=
Subject key identifier:   E3:47:39:69:5A:94:C1:34:4A:A9:4B:54:2F:4C:7D:D0:96:CA:7D:30
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1CE8AE
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/fd8b6f6100016f43b2c6d3639bbc5174cdd9f4b7.roa
Signing time:             Wed 28 Sep 2022 17:06:47 +0000
ROA not before:           Wed 28 Sep 2022 17:05:49 +0000
ROA not after:            Sat 28 Sep 2024 17:05:49 +0000
asID:                     11830
IP address blocks:        190.241.207.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1894574 (0x1ce8ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 28 17:05:49 2022 GMT
            Not After : Sep 28 17:05:49 2024 GMT
        Subject: CN=fd8b6f6100016f43b2c6d3639bbc5174cdd9f4b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c9:0e:f3:64:43:4e:83:90:f1:a1:94:cd:00:
                    ed:01:33:b2:00:1b:47:b6:c6:52:8c:c9:b6:9a:d7:
                    b3:0c:ec:15:fc:59:10:21:dd:87:f5:50:fc:37:68:
                    e8:b8:ff:b1:2a:ee:8e:bc:fc:21:90:4e:63:c7:8b:
                    93:a3:45:29:3f:cc:b5:de:a2:40:3c:3a:a6:b9:ba:
                    0f:cf:b3:d8:d3:b6:4d:47:38:dc:1d:76:f1:fd:db:
                    0e:2a:b7:5a:a2:0d:39:26:bf:d4:7e:64:a1:f9:f2:
                    e3:76:71:87:58:7e:5b:18:0e:3d:51:32:0a:17:be:
                    53:c3:5a:5c:e8:cc:20:bd:22:6f:59:45:4c:35:34:
                    72:f3:b0:88:0b:a8:ec:01:b3:0d:39:fb:e5:8d:dc:
                    40:39:23:c5:fd:e8:09:1c:ac:9d:9b:9a:43:e2:3c:
                    5c:e1:68:c0:79:9a:36:5a:df:74:e1:c6:ac:b7:7d:
                    c1:a3:36:9b:98:9a:51:0c:99:b1:a8:e3:7b:ee:c1:
                    34:f1:b0:d8:43:99:81:c7:cc:60:5c:25:fd:de:7f:
                    ed:a6:24:cd:b2:3e:94:7d:53:79:4e:b0:06:45:e5:
                    30:aa:1f:da:99:22:be:73:19:9d:55:fe:cd:5c:72:
                    f0:83:ab:6a:de:d1:b6:4b:f2:e0:f0:26:ec:c2:f6:
                    9d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:47:39:69:5A:94:C1:34:4A:A9:4B:54:2F:4C:7D:D0:96:CA:7D:30
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/fd8b6f6100016f43b2c6d3639bbc5174cdd9f4b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.241.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:40:b7:c1:bc:70:65:c4:4c:76:74:e4:32:c6:d6:e6:c3:40:
         e9:c6:76:2c:a9:03:82:d6:95:9b:03:60:5a:5d:41:ad:e7:d5:
         b7:02:59:c0:d9:c5:b2:37:c8:ff:55:9b:9c:80:a9:91:0b:dc:
         b9:1d:fb:de:a9:cf:6b:53:33:5f:0c:4f:72:d7:8b:e0:59:36:
         f9:db:4e:a3:72:01:65:90:b0:8a:8a:74:5b:a8:5b:98:da:2c:
         5a:bf:36:07:b6:e5:e3:47:fb:6b:a0:9b:74:35:a7:d6:9d:5a:
         3c:49:05:11:fc:4a:ab:ef:39:05:02:40:fd:46:a1:1c:57:d9:
         06:38:fb:80:7d:da:92:d9:c2:56:3d:ef:7b:de:db:45:0a:bc:
         67:0d:56:1a:04:55:c8:a1:12:34:e5:63:1f:8c:f5:59:b4:76:
         d5:57:1c:74:68:54:69:d2:cc:af:10:11:cd:f3:d9:90:95:ec:
         04:82:99:61:45:23:eb:58:be:67:1b:6d:2f:2d:96:bb:ab:26:
         cd:e8:10:e9:20:61:ac:a9:ce:78:be:7b:13:29:bf:15:71:8d:
         a6:7b:a3:87:37:30:d4:e6:e5:cd:2d:7a:f6:42:34:a6:5d:8d:
         4c:ac:c4:ec:22:e5:fb:02:de:d7:35:57:f8:f3:c6:3a:24:55:
         84:08:a5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-fra.rpki-client.org