Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/20f8b23a578bd445b1e91e276c7069976473262b.roa
File:                     20f8b23a578bd445b1e91e276c7069976473262b.roa (raw, json)
Hash identifier:          pBaVpX0XOzGnJPEc0aKIVA6fRvFd/zyx0IMNH7MpnbQ=
Subject key identifier:   82:B2:7D:7D:73:88:6F:E5:4E:B9:7B:EB:D2:A0:34:AF:FD:B1:40:68
Certificate issuer:       /CN=38b29341362af70cee57f236bd01d638b2845ee4
Certificate serial:       19A17E
Authority key identifier: A6:30:D2:7A:2A:C9:20:A7:F1:E0:20:0C:B1:49:E4:83:39:77:D6:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/38b29341362af70cee57f236bd01d638b2845ee4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/20f8b23a578bd445b1e91e276c7069976473262b.roa
Signing time:             Thu 09 Jun 2022 01:20:01 +0000
ROA not before:           Wed 08 Jun 2022 03:00:00 +0000
ROA not after:            Tue 31 Dec 2030 03:00:00 +0000
asID:                     395880
IP address blocks:        190.93.169.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1679742 (0x19a17e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38b29341362af70cee57f236bd01d638b2845ee4
        Validity
            Not Before: Jun  8 03:00:00 2022 GMT
            Not After : Dec 31 03:00:00 2030 GMT
        Subject: CN=20f8b23a578bd445b1e91e276c7069976473262b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:06:a3:f1:bd:28:3c:79:ce:2e:25:82:52:9b:
                    d2:cf:4c:c7:c9:ad:e8:9d:ed:18:1c:e7:bf:ba:53:
                    f4:ec:82:75:1b:92:5c:4b:ef:14:e7:ce:38:3a:2f:
                    ec:80:76:33:38:57:e7:cf:4a:eb:a7:31:2b:6f:6d:
                    b1:57:91:0b:1b:8b:01:18:f7:fa:47:8f:ba:d8:a4:
                    a0:c0:c5:a6:69:a3:54:26:75:a4:b5:4c:f2:ae:4c:
                    ca:b3:3b:3f:97:a3:78:3b:44:af:4f:7b:c2:a1:3f:
                    d4:bc:da:6a:64:8d:ad:70:6b:a7:40:78:61:11:94:
                    3c:9e:85:58:1b:2c:da:7e:b3:aa:16:58:8f:51:42:
                    79:f3:62:fb:e7:c9:95:01:17:58:42:b4:4a:58:98:
                    c1:c5:0e:33:51:ff:e4:82:37:5a:e6:41:e0:38:66:
                    1f:43:b7:4e:0b:7a:16:4d:c7:5f:4b:64:97:98:30:
                    c9:09:ae:07:16:e9:fc:4f:77:16:11:d7:ad:8f:be:
                    bd:ca:27:0d:22:61:b1:07:58:51:5c:78:28:eb:35:
                    c7:ad:16:36:0b:31:d8:c8:0f:48:d7:e5:20:14:79:
                    34:cc:d4:ac:42:b7:52:92:ac:39:c5:cc:61:ef:f6:
                    11:da:db:11:8f:00:3f:5a:e4:9e:5a:f9:4e:e6:4d:
                    38:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B2:7D:7D:73:88:6F:E5:4E:B9:7B:EB:D2:A0:34:AF:FD:B1:40:68
            X509v3 Authority Key Identifier:
                keyid:A6:30:D2:7A:2A:C9:20:A7:F1:E0:20:0C:B1:49:E4:83:39:77:D6:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/38b29341362af70cee57f236bd01d638b2845ee4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/20f8b23a578bd445b1e91e276c7069976473262b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/38b29341362af70cee57f236bd01d638b2845ee4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:e1:62:a0:95:7c:10:a1:e1:ba:37:b9:59:10:67:ca:c4:13:
         f7:e7:55:14:80:66:b2:92:92:13:e9:fb:20:c4:2c:ac:10:07:
         37:db:99:15:02:22:e2:7e:df:a1:e1:80:99:ee:b1:52:15:e1:
         20:c7:26:56:1c:47:88:9f:4f:d4:48:a0:8f:e5:73:4b:5a:3a:
         2f:8f:fa:40:f6:85:02:a6:d4:3b:12:ff:6a:6b:48:ed:f1:9c:
         7b:0d:64:f1:16:52:3e:31:07:89:5e:e7:f0:bb:f7:d0:80:c2:
         54:59:8f:6b:5b:61:5f:f1:51:63:df:4a:0a:de:69:07:49:7b:
         96:6e:6f:7b:b5:92:1d:0a:8e:c4:6b:dc:56:3c:c2:63:e9:2c:
         27:74:5f:c0:54:0d:73:fd:7a:0d:9f:cb:7c:2b:94:6c:88:e5:
         13:b0:6b:4c:a2:8d:a4:1f:fa:ee:f2:65:11:0c:73:05:5a:31:
         51:af:af:70:f3:c4:02:fc:67:1b:1a:38:3a:06:f1:e8:2b:9e:
         d7:e7:f8:dd:9c:15:95:e9:3c:36:4d:f0:38:96:56:59:83:74:
         e7:82:ec:25:4f:52:8b:f7:d9:65:b7:96:80:88:f0:b4:07:5a:
         01:40:c7:28:5d:00:42:67:b2:f6:51:bc:9f:20:9d:ad:cf:58:
         b9:6e:8a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:25 2023 by rpki-client on console-ams.rpki-client.org