Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/fe072e718abfae547f9314842e1aa89e38da307e.roa
File:                     fe072e718abfae547f9314842e1aa89e38da307e.roa (raw, json)
Hash identifier:          TejigLla/C5x5Z3+Uq9AWdE7eayYxg1YQpop3l1Fn4s=
Subject key identifier:   AA:A0:BA:98:A2:58:92:D9:30:B0:A1:91:39:16:5D:5B:AF:D2:E4:82
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1C3FF4
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/fe072e718abfae547f9314842e1aa89e38da307e.roa
Signing time:             Wed 28 Sep 2022 16:04:00 +0000
ROA not before:           Wed 28 Sep 2022 16:03:02 +0000
ROA not after:            Sat 28 Sep 2024 16:03:02 +0000
asID:                     11830
IP address blocks:        190.10.126.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1851380 (0x1c3ff4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 28 16:03:02 2022 GMT
            Not After : Sep 28 16:03:02 2024 GMT
        Subject: CN=fe072e718abfae547f9314842e1aa89e38da307e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a9:80:78:93:75:b1:3e:5d:5c:9f:6d:a4:65:
                    98:86:10:8f:dc:fb:b9:87:83:90:9d:35:cf:f6:59:
                    c7:a0:d8:c6:47:d9:33:22:1d:1d:09:36:cc:6c:b5:
                    71:06:08:29:fa:65:de:39:e4:7f:b0:4d:95:e0:27:
                    6a:23:7e:61:f9:01:0a:40:b2:df:19:fb:35:c7:bf:
                    7f:ca:84:9a:2d:5a:38:07:49:62:a3:fa:29:f6:72:
                    0d:be:7f:2e:57:80:5d:b4:66:7a:73:24:96:91:30:
                    86:7c:2b:07:09:1f:b2:4b:dd:a0:ef:90:f4:67:13:
                    b6:e0:7c:ef:86:30:45:8f:38:27:8d:ea:2d:7b:66:
                    2c:7e:bd:c4:cc:4d:0d:a1:c2:0a:a7:bf:fb:db:4e:
                    07:31:ac:16:1d:80:21:54:9b:80:4c:33:af:93:2d:
                    42:95:ff:1e:6d:0c:ee:09:b2:31:7d:74:66:f8:bf:
                    d7:44:b2:58:d4:49:df:73:79:c5:86:be:e4:c6:53:
                    87:5e:89:c4:26:e6:b6:22:31:d1:19:bf:3f:aa:90:
                    c8:77:d5:95:56:f3:ac:ae:c7:ea:1c:da:65:46:25:
                    50:12:57:36:57:ad:6e:b5:58:34:7e:54:84:9a:92:
                    f4:9b:b7:de:e2:8a:1d:df:17:22:af:b0:81:ae:3b:
                    d0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A0:BA:98:A2:58:92:D9:30:B0:A1:91:39:16:5D:5B:AF:D2:E4:82
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/fe072e718abfae547f9314842e1aa89e38da307e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:77:f0:03:58:42:33:42:de:5c:92:59:76:65:8a:9c:42:b5:
         53:27:09:a4:08:d9:85:48:fe:c3:12:ad:00:88:9d:ed:62:3f:
         0e:96:17:b3:27:33:1a:b9:25:e3:86:46:c4:ef:23:cd:e8:3e:
         e6:5a:00:38:66:b4:ea:6f:76:0e:c4:64:88:b5:5f:b6:56:44:
         22:a9:8b:ba:a4:4b:9d:0b:e0:00:a6:00:cd:b2:c8:59:9f:4e:
         72:06:02:7a:b3:14:56:60:5f:58:e5:d9:83:61:16:e5:dc:8b:
         9a:b1:1b:ac:83:9f:b3:cb:bf:2b:d2:30:bd:72:55:53:b9:0c:
         10:46:ca:24:41:aa:56:fa:8c:3c:10:5f:b0:63:5e:94:29:1d:
         6c:f7:44:6f:3c:8c:e0:41:0c:7e:c5:41:cd:12:95:18:67:4a:
         bf:4f:02:93:8c:df:76:ca:c7:6e:0d:85:0f:82:07:75:a7:70:
         8f:36:bf:c5:2d:f4:27:fc:7d:15:b5:e1:c7:4d:77:3f:c0:2c:
         25:91:81:e7:72:5e:f6:c9:f9:68:10:c0:b4:b3:56:c1:64:ba:
         20:0e:7d:b5:07:11:61:9f:da:dc:c2:1d:fc:14:96:c7:03:49:
         5b:16:fe:26:f4:2c:d0:56:90:94:44:7b:2a:c5:a3:b7:2c:e5:
         61:32:ff:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-fra.rpki-client.org