Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/333aca13bd5c24ed20bce4d646f19ad756e440b5.roa
File:                     333aca13bd5c24ed20bce4d646f19ad756e440b5.roa (raw, json)
Hash identifier:          q1uzwyauKnApBt4tz/lH0ymYFPmhE8ATGL2jhjwXC6c=
Subject key identifier:   29:79:FE:F4:7C:F1:CB:D9:FD:77:69:B9:80:15:9F:AD:85:01:B9:86
Certificate issuer:       /CN=38b29341362af70cee57f236bd01d638b2845ee4
Certificate serial:       1FAF6E
Authority key identifier: A6:30:D2:7A:2A:C9:20:A7:F1:E0:20:0C:B1:49:E4:83:39:77:D6:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/38b29341362af70cee57f236bd01d638b2845ee4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/333aca13bd5c24ed20bce4d646f19ad756e440b5.roa
Signing time:             Tue 31 Jan 2023 16:10:24 +0000
ROA not before:           Mon 30 Jan 2023 16:08:13 +0000
ROA not after:            Fri 31 Jan 2025 16:08:13 +0000
asID:                     262171
IP address blocks:        190.93.174.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2076526 (0x1faf6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38b29341362af70cee57f236bd01d638b2845ee4
        Validity
            Not Before: Jan 30 16:08:13 2023 GMT
            Not After : Jan 31 16:08:13 2025 GMT
        Subject: CN=333aca13bd5c24ed20bce4d646f19ad756e440b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0d:41:ce:c8:1f:75:7f:6f:02:9b:90:d1:b6:
                    8d:c5:e4:29:27:bf:2f:c0:29:52:2d:7d:9e:54:c5:
                    4d:41:6d:4c:51:87:17:8b:bc:dc:88:bf:ed:48:aa:
                    ff:f1:89:e6:7e:df:c8:05:91:48:5f:49:9a:95:eb:
                    e8:4c:8d:a5:a0:ea:b6:c2:d6:17:1a:7d:fd:6f:dc:
                    de:06:77:3c:dd:28:60:a4:bb:64:58:9e:94:62:b3:
                    11:14:77:d4:72:c2:e2:03:23:4f:20:44:63:dd:5f:
                    93:b4:2f:fb:b0:79:74:2d:da:ae:75:ac:77:e7:46:
                    92:2d:f1:20:8d:96:da:08:36:01:94:43:87:fa:53:
                    a4:dd:bb:ff:39:bf:2a:b9:d6:7f:e7:d9:da:2d:70:
                    bc:8b:a5:d5:31:a1:52:d0:11:ba:f0:d4:4b:df:12:
                    cb:b6:d3:d8:b7:47:ec:ef:39:58:96:3e:1d:a7:f4:
                    03:dc:c8:eb:ae:93:23:49:a6:e7:fc:e1:c4:30:7c:
                    86:0f:c5:79:81:3a:1e:c2:4d:e3:6e:0b:77:b4:3b:
                    76:85:46:c9:5d:a6:ff:70:4c:64:c3:71:7d:34:cf:
                    16:6f:b8:36:a0:0a:dc:70:06:9f:15:38:d9:9b:16:
                    4f:d9:19:b3:4b:0d:d0:66:63:15:85:59:bd:1d:3d:
                    a1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:79:FE:F4:7C:F1:CB:D9:FD:77:69:B9:80:15:9F:AD:85:01:B9:86
            X509v3 Authority Key Identifier:
                keyid:A6:30:D2:7A:2A:C9:20:A7:F1:E0:20:0C:B1:49:E4:83:39:77:D6:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/38b29341362af70cee57f236bd01d638b2845ee4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/333aca13bd5c24ed20bce4d646f19ad756e440b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/38b29341362af70cee57f236bd01d638b2845ee4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:96:1c:cd:19:e6:29:ac:67:7c:d4:42:f7:85:0e:02:ee:ac:
         49:e5:1f:26:6a:46:3c:af:88:d9:c9:71:fb:d2:85:95:59:42:
         0f:e5:8b:21:8c:79:b8:ce:b0:40:c6:42:58:36:ad:e0:4a:74:
         30:64:12:cc:5b:48:39:dd:34:3b:81:84:19:fe:99:68:51:56:
         e1:2a:d5:dc:7d:5b:9b:e2:70:32:51:45:7e:f9:5e:5f:5b:dc:
         54:47:68:c5:2c:f3:70:66:e0:5a:f4:93:a0:1c:d1:3a:9a:df:
         a9:9f:43:91:73:b9:c1:3f:6a:a4:1d:c0:49:bf:44:c2:ea:65:
         a9:29:f9:05:99:d4:e6:8d:8e:c5:4d:7c:ba:ad:57:5c:39:d2:
         ea:e4:90:4e:00:e8:e4:4a:fd:80:0b:77:58:ba:70:91:e5:c1:
         dd:e9:97:47:78:29:17:e3:03:71:45:58:96:4d:5f:82:d9:d9:
         d2:72:e4:fc:1d:32:87:ea:b4:13:7e:d0:26:42:3d:22:de:46:
         e3:54:bd:ee:1d:df:59:23:eb:f9:97:0f:b7:87:ac:63:12:8f:
         de:3a:da:f8:b8:7f:ec:f8:af:50:c5:14:b4:16:5d:83:b5:c6:
         dc:19:ae:fe:0b:02:53:e5:eb:ce:5b:87:3e:47:c6:3f:75:80:
         e1:94:0d:8b
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDH69uMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDM4
YjI5MzQxMzYyYWY3MGNlZTU3ZjIzNmJkMDFkNjM4YjI4NDVlZTQwHhcNMjMwMTMw
MTYwODEzWhcNMjUwMTMxMTYwODEzWjAzMTEwLwYDVQQDEygzMzNhY2ExM2JkNWMy
NGVkMjBiY2U0ZDY0NmYxOWFkNzU2ZTQ0MGI1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwg1BzsgfdX9vApuQ0baNxeQpJ78vwClSLX2eVMVNQW1MUYcX
i7zciL/tSKr/8Ynmft/IBZFIX0malevoTI2loOq2wtYXGn39b9zeBnc83ShgpLtk
WJ6UYrMRFHfUcsLiAyNPIERj3V+TtC/7sHl0Ldqudax350aSLfEgjZbaCDYBlEOH
+lOk3bv/Ob8qudZ/59naLXC8i6XVMaFS0BG68NRL3xLLttPYt0fs7zlYlj4dp/QD
3MjrrpMjSabn/OHEMHyGD8V5gToewk3jbgt3tDt2hUbJXab/cExkw3F9NM8Wb7g2
oArccAafFTjZmxZP2RmzSw3QZmMVhVm9HT2h9QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFCl5/vR88cvZ/XdpuYAVn62FAbmGMB8GA1UdIwQYMBaAFKYw0noqySCn8eAg
DLFJ5IM5d9bVMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzhiMjkz
NDEzNjJhZjcwY2VlNTdmMjM2YmQwMWQ2MzhiMjg0NWVlNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTg2NWEwNzQtYWMzMS00Y2Y3LTlhOTItNWZhOTM0
ZGJkNmVkLzMzM2FjYTEzYmQ1YzI0ZWQyMGJjZTRkNjQ2ZjE5YWQ3NTZlNDQwYjUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xODY1YTA3NC1hYzMxLTRjZjctOWE5Mi01ZmE5
MzRkYmQ2ZWQvMzhiMjkzNDEzNjJhZjcwY2VlNTdmMjM2YmQwMWQ2MzhiMjg0NWVl
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL5drjANBgkqhkiG9w0BAQsFAAOCAQEAIZYczRnmKaxnfNRC
94UOAu6sSeUfJmpGPK+I2clx+9KFlVlCD+WLIYx5uM6wQMZCWDat4Ep0MGQSzFtI
Od00O4GEGf6ZaFFW4SrV3H1bm+JwMlFFfvleX1vcVEdoxSzzcGbgWvSToBzROprf
qZ9DkXO5wT9qpB3ASb9EwuplqSn5BZnU5o2OxU18uq1XXDnS6uSQTgDo5Er9gAt3
WLpwkeXB3emXR3gpF+MDcUVYlk1fgtnZ0nLk/B0yh+q0E37QJkI9It5G41S97h3f
WSPr+ZcPt4esYxKP3jra+Lh/7PivUMUUtBZdg7XG3Bmu/gsCU+XrzluHPkfGP3WA
4ZQNiw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:25 2023 by rpki-client on console-ams.rpki-client.org