Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/6ce92f075c6598b794050ef8ef0f46b8da2a6274.roa
File:                     6ce92f075c6598b794050ef8ef0f46b8da2a6274.roa (raw, json)
Hash identifier:          H+Z8s//iMxo63JfpYCwBL2bjMfAS6EZOEFn4acRVmec=
Subject key identifier:   E8:13:93:50:27:8B:C4:AE:F4:2A:9E:5A:CB:2A:1D:B0:9F:71:C4:2A
Certificate issuer:       /CN=38b29341362af70cee57f236bd01d638b2845ee4
Certificate serial:       1F98EC
Authority key identifier: A6:30:D2:7A:2A:C9:20:A7:F1:E0:20:0C:B1:49:E4:83:39:77:D6:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/38b29341362af70cee57f236bd01d638b2845ee4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/6ce92f075c6598b794050ef8ef0f46b8da2a6274.roa
Signing time:             Tue 31 Jan 2023 16:02:10 +0000
ROA not before:           Mon 30 Jan 2023 16:01:22 +0000
ROA not after:            Fri 31 Jan 2025 16:01:22 +0000
asID:                     262171
IP address blocks:        190.93.162.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2070764 (0x1f98ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38b29341362af70cee57f236bd01d638b2845ee4
        Validity
            Not Before: Jan 30 16:01:22 2023 GMT
            Not After : Jan 31 16:01:22 2025 GMT
        Subject: CN=6ce92f075c6598b794050ef8ef0f46b8da2a6274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:24:1b:9c:02:f6:1c:0a:65:b1:8d:2d:88:15:
                    87:27:fe:a0:9c:e4:32:07:a4:53:6b:83:9b:55:22:
                    99:48:c6:95:b1:17:11:80:49:7c:95:56:08:94:54:
                    44:0f:86:4b:a5:92:69:4d:c4:61:9e:80:7c:28:75:
                    27:40:71:a4:f7:56:89:00:f7:40:21:f4:d2:b3:c5:
                    f9:03:88:f6:aa:26:3a:bf:a5:a1:ac:98:c3:1b:dd:
                    11:ad:b4:7c:68:78:ef:99:a6:54:4a:cd:b6:4a:bc:
                    2c:71:d7:6c:26:5a:34:f8:02:27:15:8b:e1:f9:32:
                    52:d7:57:4e:de:25:7d:4d:e7:4a:0f:e2:d6:73:5e:
                    ef:3c:40:58:71:80:8a:e6:be:3f:b8:09:80:f9:8f:
                    55:cf:0a:3a:69:af:9f:9a:b6:9c:45:e6:c1:8d:78:
                    cf:ba:76:06:b5:85:ac:86:fd:c1:61:3d:3b:03:23:
                    f7:19:72:b1:4f:62:b0:0d:ee:fa:48:08:d3:5d:b6:
                    5b:61:e6:4a:68:f1:ca:31:28:17:b4:90:43:83:b3:
                    cf:a8:27:a0:38:24:f1:58:c6:2b:6e:71:fb:a1:83:
                    5d:d4:ae:3f:14:cf:7a:a7:56:77:55:08:59:6d:85:
                    e2:b4:4e:4f:74:25:c7:e5:c4:e3:b4:10:5c:f6:4b:
                    1c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:13:93:50:27:8B:C4:AE:F4:2A:9E:5A:CB:2A:1D:B0:9F:71:C4:2A
            X509v3 Authority Key Identifier:
                keyid:A6:30:D2:7A:2A:C9:20:A7:F1:E0:20:0C:B1:49:E4:83:39:77:D6:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/38b29341362af70cee57f236bd01d638b2845ee4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/6ce92f075c6598b794050ef8ef0f46b8da2a6274.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/38b29341362af70cee57f236bd01d638b2845ee4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:3e:af:27:3b:18:20:b3:55:6b:5b:11:ae:80:23:a3:20:d9:
         77:29:49:c7:d8:c2:de:4e:af:c3:2f:16:c1:28:04:7f:52:c7:
         16:5d:0b:6b:78:5e:e5:01:fc:16:54:35:1d:01:47:17:19:db:
         fd:5b:9c:48:f6:9a:4f:db:fd:cc:5e:eb:a2:54:9d:93:b4:a8:
         83:8d:57:3e:ef:e6:2f:f5:46:9b:27:75:6c:a6:f0:57:6c:5f:
         7e:bb:02:51:90:42:f7:bd:d2:45:d0:b4:44:6e:85:3e:ed:23:
         8d:bd:9b:53:53:b4:65:58:05:e4:ca:a2:56:51:30:e3:68:33:
         f1:8b:35:74:13:5b:22:f3:86:7b:ea:50:b8:f0:9e:e6:69:64:
         e1:06:d3:b7:72:fb:b9:5a:bc:11:33:a5:38:97:8f:34:d5:cf:
         2e:4f:f6:7f:17:f9:05:43:46:f4:79:7f:53:df:a7:01:8c:44:
         e1:f2:ca:5a:4e:32:7c:06:68:1e:94:78:99:17:d4:d6:67:64:
         ff:f3:d5:84:25:b7:5b:f4:9c:28:8d:72:a9:7c:ae:aa:54:35:
         3f:ac:8d:c2:54:a1:46:ec:1c:e6:9b:ad:52:cd:aa:e5:b8:bc:
         1f:cb:0f:fe:50:b3:26:3a:4f:45:18:d1:fa:39:6b:4d:37:36:
         17:8c:5e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----