Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d3887117a3394a6297c217d25654d5f5ba2ffa2d.roa
File:                     d3887117a3394a6297c217d25654d5f5ba2ffa2d.roa (raw, json)
Hash identifier:          oNsX9ywdN/U27O7VateOhkHiSxdFEz1ecTijrQ+UIEs=
Subject key identifier:   4F:B1:F8:BD:E9:B1:2D:64:AC:5C:73:3F:76:83:C2:3A:88:4C:71:4C
Certificate issuer:       /CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Certificate serial:       2D8ED8
Authority key identifier: C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d3887117a3394a6297c217d25654d5f5ba2ffa2d.roa
Signing time:             Thu 07 Dec 2023 12:42:08 +0000
ROA not before:           Thu 07 Dec 2023 12:41:57 +0000
ROA not after:            Thu 07 Dec 2028 12:41:57 +0000
asID:                     263808
IP address blocks:        190.228.23.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2985688 (0x2d8ed8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8263f0ea1b563289205ad0264530f8e6c30e569
        Validity
            Not Before: Dec  7 12:41:57 2023 GMT
            Not After : Dec  7 12:41:57 2028 GMT
        Subject: CN=d3887117a3394a6297c217d25654d5f5ba2ffa2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:32:6e:d8:00:5e:6d:cc:7e:ad:5e:da:b7:f4:
                    c4:5c:b7:05:84:c4:64:a9:ff:aa:2f:c5:6a:bb:f9:
                    d3:0c:b9:2a:b4:d3:8c:d3:c2:2c:72:a3:a8:0f:ea:
                    19:0e:7f:6b:b1:c2:98:65:41:aa:35:0a:fa:5b:35:
                    bb:e7:40:f9:81:15:70:1c:53:38:2a:65:2c:94:b0:
                    b3:16:f5:cd:24:0b:4a:d8:6a:60:05:a2:df:8d:45:
                    44:c3:6e:a8:6c:d4:39:09:b3:7a:61:df:69:99:d2:
                    d6:e9:1e:26:44:64:a7:14:45:4a:f2:45:b8:7e:3e:
                    c6:01:6f:ab:cc:44:96:b0:2c:24:d1:ba:9a:33:8c:
                    7c:1c:c5:af:b3:f4:c4:b1:9e:3b:71:27:ae:ef:a2:
                    b6:ba:ba:4e:f9:97:42:ff:a0:08:d8:ee:5b:74:ea:
                    06:0e:22:64:ea:f7:70:7a:b8:ed:31:15:68:f2:4c:
                    17:b6:c3:bf:66:11:cd:af:7a:41:bf:ac:9e:b5:2c:
                    99:58:e2:69:3c:b8:ef:87:d7:99:49:2d:89:5d:82:
                    0f:48:2d:ce:b9:f5:38:9d:93:40:33:af:d1:96:97:
                    60:85:97:99:cd:3a:f3:fa:cf:8a:c1:2a:a7:93:6d:
                    6d:ff:dc:92:6f:8a:e9:8b:cf:c1:b0:c5:36:fa:0e:
                    1a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B1:F8:BD:E9:B1:2D:64:AC:5C:73:3F:76:83:C2:3A:88:4C:71:4C
            X509v3 Authority Key Identifier:
                keyid:C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d3887117a3394a6297c217d25654d5f5ba2ffa2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f8263f0ea1b563289205ad0264530f8e6c30e569.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.228.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:d9:26:f2:f8:2a:3b:99:cb:a0:26:b3:53:b2:24:25:69:e6:
         1d:dc:c2:6e:dd:98:81:8c:52:6d:13:6c:12:0c:02:53:10:09:
         8a:c3:24:7e:31:d9:6f:65:60:b0:ec:5c:77:4d:6a:51:d4:44:
         82:7c:fd:a3:bb:49:e3:80:c0:71:1e:43:ff:f1:25:f8:af:28:
         8c:43:7b:3d:62:92:49:52:90:97:2a:00:aa:aa:6c:bd:09:31:
         fa:39:92:2b:ec:02:a5:99:ae:44:ce:b9:8b:a4:7a:56:be:9d:
         4b:24:f5:20:78:cd:7b:0d:8a:53:77:a3:f9:63:c9:6d:eb:16:
         87:b4:86:68:9c:b3:73:7a:a0:d0:f1:00:9b:7d:88:d2:39:b5:
         8e:32:7b:c8:81:73:31:60:94:68:6d:ab:61:3b:dd:10:5d:90:
         b1:87:40:95:6c:ba:c8:10:8f:5b:8e:8f:ab:87:5c:26:fc:28:
         ae:5f:0f:76:4c:30:fb:bd:01:63:19:9f:5b:ae:1e:de:21:b5:
         03:01:10:de:bc:54:d9:29:86:03:f6:00:01:5b:5a:bb:0b:f1:
         d4:e2:c3:b7:39:4f:56:9e:a0:3f:80:7c:59:76:d5:6c:81:fa:
         a8:70:5d:a1:06:ff:aa:27:c8:a8:ca:40:a1:70:70:4f:78:1e:
         a0:39:a3:24
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDLY7YMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY4
MjYzZjBlYTFiNTYzMjg5MjA1YWQwMjY0NTMwZjhlNmMzMGU1NjkwHhcNMjMxMjA3
MTI0MTU3WhcNMjgxMjA3MTI0MTU3WjAzMTEwLwYDVQQDEyhkMzg4NzExN2EzMzk0
YTYyOTdjMjE3ZDI1NjU0ZDVmNWJhMmZmYTJkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlTJu2ABebcx+rV7at/TEXLcFhMRkqf+qL8Vqu/nTDLkqtNOM
08IscqOoD+oZDn9rscKYZUGqNQr6WzW750D5gRVwHFM4KmUslLCzFvXNJAtK2Gpg
BaLfjUVEw26obNQ5CbN6Yd9pmdLW6R4mRGSnFEVK8kW4fj7GAW+rzESWsCwk0bqa
M4x8HMWvs/TEsZ47cSeu76K2urpO+ZdC/6AI2O5bdOoGDiJk6vdwerjtMRVo8kwX
tsO/ZhHNr3pBv6yetSyZWOJpPLjvh9eZSS2JXYIPSC3OufU4nZNAM6/RlpdghZeZ
zTrz+s+KwSqnk21t/9ySb4rpi8/BsMU2+g4aZQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFE+x+L3psS1krFxzP3aDwjqITHFMMB8GA1UdIwQYMBaAFMD3ES/X9uODqZpb
XBnhTav8A9wtMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjgyNjNm
MGVhMWI1NjMyODkyMDVhZDAyNjQ1MzBmOGU2YzMwZTU2OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTMyYjIwOTctZWEwOC00NzgwLWI5NGYtMDNjMzM4
YjVhYTU3L2QzODg3MTE3YTMzOTRhNjI5N2MyMTdkMjU2NTRkNWY1YmEyZmZhMmQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MzJiMjA5Ny1lYTA4LTQ3ODAtYjk0Zi0wM2Mz
MzhiNWFhNTcvZjgyNjNmMGVhMWI1NjMyODkyMDVhZDAyNjQ1MzBmOGU2YzMwZTU2
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL7kFzANBgkqhkiG9w0BAQsFAAOCAQEARdkm8vgqO5nLoCaz
U7IkJWnmHdzCbt2YgYxSbRNsEgwCUxAJisMkfjHZb2VgsOxcd01qUdREgnz9o7tJ
44DAcR5D//El+K8ojEN7PWKSSVKQlyoAqqpsvQkx+jmSK+wCpZmuRM65i6R6Vr6d
SyT1IHjNew2KU3ej+WPJbesWh7SGaJyzc3qg0PEAm32I0jm1jjJ7yIFzMWCUaG2r
YTvdEF2QsYdAlWy6yBCPW46Pq4dcJvworl8Pdkww+70BYxmfW64e3iG1AwEQ3rxU
2SmGA/YAAVtauwvx1OLDtzlPVp6gP4B8WXbVbIH6qHBdoQb/qifIqMpAoXBwT3ge
oDmjJA==
-----END CERTIFICATE-----
Generated at Thu Dec 7 13:46:15 2023 by rpki-client on console-fra.rpki-client.org