Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/6b84ebbe7d23c2311586dfd998b4caa93e7f6c97.roa
File:                     6b84ebbe7d23c2311586dfd998b4caa93e7f6c97.roa (raw, json)
Hash identifier:          Ph1OGeShqNy9HAsx+TTzl0WyOrQ3XtG2PdHbJ+TLk/g=
Subject key identifier:   34:CB:FE:EF:3A:B8:C0:B9:A1:E1:1C:AC:7F:B1:72:0D:16:2B:20:E5
Certificate issuer:       /CN=8a3db4f69b92441a5930cef4f542ae0c43e4d8cf
Certificate serial:       19701A
Authority key identifier: 76:22:29:71:B2:99:56:63:7D:97:D4:01:0C:C5:C5:1C:9B:1B:84:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/6b84ebbe7d23c2311586dfd998b4caa93e7f6c97.roa
Signing time:             Tue 07 Jun 2022 20:31:07 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     28110
IP address blocks:        190.93.169.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1667098 (0x19701a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a3db4f69b92441a5930cef4f542ae0c43e4d8cf
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=6b84ebbe7d23c2311586dfd998b4caa93e7f6c97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7f:77:84:13:48:f1:b7:2b:4f:fc:2f:fd:c3:
                    9e:62:44:20:da:8f:a0:a7:6e:98:27:6c:a2:cd:90:
                    8a:2f:f2:7c:80:a9:f9:7c:1e:9e:a5:ff:7d:37:8c:
                    38:ef:d6:30:05:bc:8f:1b:02:b2:4d:e1:de:c5:57:
                    13:72:8c:24:e3:23:59:6a:c5:f4:5c:3c:1f:97:3c:
                    33:ff:3a:03:78:b1:d5:6e:a1:2f:c4:79:a0:79:34:
                    24:c6:58:ed:bc:d7:0a:af:7b:80:f7:f2:04:65:44:
                    4b:0b:97:e6:8c:3b:46:b6:bf:48:68:6a:b0:e6:cc:
                    42:ac:18:bd:70:b1:bf:94:b4:ef:48:47:3f:c1:86:
                    bb:eb:d2:41:b6:12:c7:8d:43:10:06:9e:f2:f1:92:
                    a5:e0:f2:d6:29:08:e1:5c:fe:f0:05:a5:38:60:84:
                    4a:9d:0c:32:89:86:18:2e:80:e2:18:88:b4:25:85:
                    bb:fe:ad:fa:89:94:86:88:e2:b3:5f:cb:3c:b2:9a:
                    6c:b6:9d:7a:89:77:e9:79:ef:7f:74:df:93:5b:18:
                    d4:82:f6:1e:ee:ea:b1:89:bd:85:41:08:5c:7b:9c:
                    1b:0f:56:d2:0e:55:92:c6:5f:26:0c:e6:e3:3e:17:
                    09:1e:d4:a9:36:19:80:c4:1d:45:fb:a3:55:d1:ce:
                    1d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:CB:FE:EF:3A:B8:C0:B9:A1:E1:1C:AC:7F:B1:72:0D:16:2B:20:E5
            X509v3 Authority Key Identifier:
                keyid:76:22:29:71:B2:99:56:63:7D:97:D4:01:0C:C5:C5:1C:9B:1B:84:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/6b84ebbe7d23c2311586dfd998b4caa93e7f6c97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:94:56:39:20:28:5f:a8:08:89:c4:79:1d:37:f6:51:4d:72:
         9a:3b:3c:65:c3:4d:ac:68:c0:63:37:87:05:90:c4:57:e1:44:
         04:c8:0a:55:83:3f:f6:bf:41:b3:0f:2f:33:30:37:00:ea:31:
         df:20:7b:e3:f9:d6:d8:74:0d:28:06:c7:0c:4c:a8:d5:89:2a:
         61:24:8b:0a:7a:a5:d4:e1:bf:fb:6f:63:8c:1d:13:19:b7:7c:
         7e:4d:a4:92:96:19:6b:6b:43:1e:a6:ac:d2:e6:6a:c3:e7:fd:
         8a:59:4e:75:17:07:f0:e7:73:6a:8a:a9:13:5b:3e:e4:76:0e:
         38:e4:7c:5a:f1:5f:20:68:01:70:42:6b:b8:f3:19:35:78:6e:
         5a:0a:3c:d9:12:29:8c:8c:93:dd:cb:41:91:f4:9d:29:40:bc:
         ac:66:53:70:cd:a8:05:2a:51:65:56:bb:50:20:e2:0b:da:bd:
         04:b8:9f:cb:73:e1:44:1d:a7:c2:ac:20:9b:65:1a:f0:f0:3b:
         f8:f4:36:ca:c7:87:8b:52:2c:54:08:b5:cb:85:50:e8:ec:45:
         ba:d7:24:e5:21:8a:5a:85:b7:c0:e0:5c:35:04:73:fb:e7:c2:
         f9:8c:f8:ac:1a:b5:05:19:17:a0:10:29:c0:02:46:bb:4f:6b:
         7b:a1:c5:ce
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGXAaMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhh
M2RiNGY2OWI5MjQ0MWE1OTMwY2VmNGY1NDJhZTBjNDNlNGQ4Y2YwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyg2Yjg0ZWJiZTdkMjNj
MjMxMTU4NmRmZDk5OGI0Y2FhOTNlN2Y2Yzk3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAh393hBNI8bcrT/wv/cOeYkQg2o+gp26YJ2yizZCKL/J8gKn5
fB6epf99N4w479YwBbyPGwKyTeHexVcTcowk4yNZasX0XDwflzwz/zoDeLHVbqEv
xHmgeTQkxljtvNcKr3uA9/IEZURLC5fmjDtGtr9IaGqw5sxCrBi9cLG/lLTvSEc/
wYa769JBthLHjUMQBp7y8ZKl4PLWKQjhXP7wBaU4YIRKnQwyiYYYLoDiGIi0JYW7
/q36iZSGiOKzX8s8sppstp16iXfpee9/dN+TWxjUgvYe7uqxib2FQQhce5wbD1bS
DlWSxl8mDObjPhcJHtSpNhmAxB1F+6NV0c4dPQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFDTL/u86uMC5oeEcrH+xcg0WKyDlMB8GA1UdIwQYMBaAFHYiKXGymVZjfZfU
AQzFxRybG4SeMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOGEzZGI0
ZjY5YjkyNDQxYTU5MzBjZWY0ZjU0MmFlMGM0M2U0ZDhjZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTg2NWEwNzQtYWMzMS00Y2Y3LTlhOTItNWZhOTM0
ZGJkNmVkLzZiODRlYmJlN2QyM2MyMzExNTg2ZGZkOTk4YjRjYWE5M2U3ZjZjOTcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xODY1YTA3NC1hYzMxLTRjZjctOWE5Mi01ZmE5
MzRkYmQ2ZWQvOGEzZGI0ZjY5YjkyNDQxYTU5MzBjZWY0ZjU0MmFlMGM0M2U0ZDhj
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL5dqTANBgkqhkiG9w0BAQsFAAOCAQEAcZRWOSAoX6gIicR5
HTf2UU1ymjs8ZcNNrGjAYzeHBZDEV+FEBMgKVYM/9r9Bsw8vMzA3AOox3yB74/nW
2HQNKAbHDEyo1YkqYSSLCnql1OG/+29jjB0TGbd8fk2kkpYZa2tDHqas0uZqw+f9
illOdRcH8OdzaoqpE1s+5HYOOOR8WvFfIGgBcEJruPMZNXhuWgo82RIpjIyT3ctB
kfSdKUC8rGZTcM2oBSpRZVa7UCDiC9q9BLify3PhRB2nwqwgm2Ua8PA7+PQ2yseH
i1IsVAi1y4VQ6OxFutck5SGKWoW3wOBcNQRz++fC+Yz4rBq1BRkXoBApwAJGu09r
e6HFzg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:25 2023 by rpki-client on console-ams.rpki-client.org