Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/545686595bd032d5fcd97c0f7cf9aee9de1966b9.roa
File:                     545686595bd032d5fcd97c0f7cf9aee9de1966b9.roa (raw, json)
Hash identifier:          puBdJENPnomjUDXxVhayQ4c5WxqjDXmg5SK67OKcC1w=
Subject key identifier:   2F:8D:56:90:E3:0A:B5:5D:4C:03:D0:63:2D:45:A1:75:11:1B:14:A7
Certificate issuer:       /CN=38b29341362af70cee57f236bd01d638b2845ee4
Certificate serial:       1F9F8A
Authority key identifier: A6:30:D2:7A:2A:C9:20:A7:F1:E0:20:0C:B1:49:E4:83:39:77:D6:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/38b29341362af70cee57f236bd01d638b2845ee4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/545686595bd032d5fcd97c0f7cf9aee9de1966b9.roa
Signing time:             Tue 31 Jan 2023 16:04:17 +0000
ROA not before:           Mon 30 Jan 2023 16:03:07 +0000
ROA not after:            Fri 31 Jan 2025 16:03:07 +0000
asID:                     262171
IP address blocks:        190.93.165.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2072458 (0x1f9f8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38b29341362af70cee57f236bd01d638b2845ee4
        Validity
            Not Before: Jan 30 16:03:07 2023 GMT
            Not After : Jan 31 16:03:07 2025 GMT
        Subject: CN=545686595bd032d5fcd97c0f7cf9aee9de1966b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:52:35:82:26:22:5c:7c:25:e4:8c:c1:91:d6:
                    ee:42:9c:8e:bf:9a:0e:6d:27:b5:76:e0:57:da:39:
                    29:88:13:3d:d2:ff:70:a5:81:e4:f4:8d:67:89:0e:
                    74:fc:dd:ab:65:6b:48:83:b8:50:6f:94:77:d0:11:
                    96:d1:d7:c3:0a:7a:64:8c:5e:33:68:96:ca:40:ae:
                    10:87:74:2d:91:4e:74:dc:8f:c6:82:d8:82:d0:f6:
                    43:85:36:a9:99:2c:d1:dd:04:58:29:93:47:21:6f:
                    1d:6b:ef:b0:3f:0d:fc:3d:e3:a0:e7:47:c8:fd:ff:
                    1a:92:66:79:27:72:47:1a:24:52:a3:95:a6:5b:6f:
                    26:32:ce:28:49:a3:b7:82:51:04:44:23:f5:69:43:
                    15:26:07:64:e9:ce:f9:a8:b7:b7:01:58:da:65:33:
                    de:ac:d0:50:7f:96:ad:7d:be:0a:12:a5:c3:d5:cc:
                    c6:6e:31:a4:f9:30:17:72:54:f0:d2:f2:19:0e:9f:
                    05:41:0d:9c:14:a7:ca:ae:dc:74:b7:ce:ae:02:db:
                    45:d9:42:c1:dd:7e:25:74:86:d1:9f:77:ac:07:89:
                    31:36:4b:73:c4:0e:b5:88:09:f6:9e:15:ce:e8:87:
                    8d:cf:19:30:46:98:f1:46:2e:80:45:6f:8e:c6:2a:
                    b7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:8D:56:90:E3:0A:B5:5D:4C:03:D0:63:2D:45:A1:75:11:1B:14:A7
            X509v3 Authority Key Identifier:
                keyid:A6:30:D2:7A:2A:C9:20:A7:F1:E0:20:0C:B1:49:E4:83:39:77:D6:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/38b29341362af70cee57f236bd01d638b2845ee4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/545686595bd032d5fcd97c0f7cf9aee9de1966b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/38b29341362af70cee57f236bd01d638b2845ee4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:79:77:89:ea:15:3f:bb:da:a6:0b:73:52:78:f5:ca:97:bf:
         39:7b:b5:fa:f9:dc:20:04:ef:cc:46:96:fd:69:6f:f7:7c:d7:
         ca:45:e6:e5:44:6d:f7:dc:11:41:cf:1d:54:55:6d:08:f1:8b:
         52:bb:73:12:d3:fc:0f:70:ad:07:0c:c6:64:7b:44:6e:3e:c0:
         2f:f9:0b:94:bc:75:6e:cb:58:d5:67:ac:76:59:d0:17:92:73:
         c8:a6:5d:3f:2f:5b:46:5a:0f:fc:a2:ac:ed:30:c8:ab:be:25:
         a7:7e:8f:fd:8b:c8:cc:94:32:5c:7d:62:8a:83:5f:55:62:92:
         9f:59:00:fc:d2:a0:ca:0b:15:d2:c9:d1:90:8f:90:09:b2:40:
         0b:1d:80:c7:38:64:cb:07:5a:24:08:c8:6f:9f:42:6e:02:b0:
         0e:2a:5c:7d:0d:93:19:12:dd:d2:0e:81:dc:2b:d5:92:64:8b:
         1c:1c:99:0e:c4:2d:9e:b2:79:20:62:e2:d5:f0:7f:e6:f2:a0:
         45:98:7b:1f:17:5b:2d:3e:9d:03:27:51:95:a3:ba:9f:40:f1:
         d6:d8:a4:44:b3:90:5b:9e:1b:ef:ef:b6:5e:cc:43:42:ad:66:
         4d:08:f0:d4:d1:2a:f8:bd:dc:63:b4:61:4b:bb:c9:81:8e:d1:
         fe:2a:d3:f8
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDH5+KMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDM4
YjI5MzQxMzYyYWY3MGNlZTU3ZjIzNmJkMDFkNjM4YjI4NDVlZTQwHhcNMjMwMTMw
MTYwMzA3WhcNMjUwMTMxMTYwMzA3WjAzMTEwLwYDVQQDEyg1NDU2ODY1OTViZDAz
MmQ1ZmNkOTdjMGY3Y2Y5YWVlOWRlMTk2NmI5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoFI1giYiXHwl5IzBkdbuQpyOv5oObSe1duBX2jkpiBM90v9w
pYHk9I1niQ50/N2rZWtIg7hQb5R30BGW0dfDCnpkjF4zaJbKQK4Qh3QtkU503I/G
gtiC0PZDhTapmSzR3QRYKZNHIW8da++wPw38PeOg50fI/f8akmZ5J3JHGiRSo5Wm
W28mMs4oSaO3glEERCP1aUMVJgdk6c75qLe3AVjaZTPerNBQf5atfb4KEqXD1czG
bjGk+TAXclTw0vIZDp8FQQ2cFKfKrtx0t86uAttF2ULB3X4ldIbRn3esB4kxNktz
xA61iAn2nhXO6IeNzxkwRpjxRi6ARW+Oxiq3SwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFC+NVpDjCrVdTAPQYy1FoXURGxSnMB8GA1UdIwQYMBaAFKYw0noqySCn8eAg
DLFJ5IM5d9bVMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzhiMjkz
NDEzNjJhZjcwY2VlNTdmMjM2YmQwMWQ2MzhiMjg0NWVlNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTg2NWEwNzQtYWMzMS00Y2Y3LTlhOTItNWZhOTM0
ZGJkNmVkLzU0NTY4NjU5NWJkMDMyZDVmY2Q5N2MwZjdjZjlhZWU5ZGUxOTY2Yjku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xODY1YTA3NC1hYzMxLTRjZjctOWE5Mi01ZmE5
MzRkYmQ2ZWQvMzhiMjkzNDEzNjJhZjcwY2VlNTdmMjM2YmQwMWQ2MzhiMjg0NWVl
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL5dpTANBgkqhkiG9w0BAQsFAAOCAQEAg3l3ieoVP7vapgtz
Unj1ype/OXu1+vncIATvzEaW/Wlv93zXykXm5URt99wRQc8dVFVtCPGLUrtzEtP8
D3CtBwzGZHtEbj7AL/kLlLx1bstY1WesdlnQF5JzyKZdPy9bRloP/KKs7TDIq74l
p36P/YvIzJQyXH1iioNfVWKSn1kA/NKgygsV0snRkI+QCbJACx2AxzhkywdaJAjI
b59CbgKwDipcfQ2TGRLd0g6B3CvVkmSLHByZDsQtnrJ5IGLi1fB/5vKgRZh7Hxdb
LT6dAydRlaO6n0Dx1tikRLOQW54b7++2XsxDQq1mTQjw1NEq+L3cY7RhS7vJgY7R
/irT+A==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:25 2023 by rpki-client on console-ams.rpki-client.org