Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/b0a0ef62e1d06a04597241d56082775e6d72bf9f.roa
File:                     b0a0ef62e1d06a04597241d56082775e6d72bf9f.roa (raw, json)
Hash identifier:          f6plA1hYd/i2jAbQ6o2rVMZZ1m0J3Ho58EurV4uuIPc=
Subject key identifier:   3E:0E:6E:D4:34:B5:48:50:C6:A0:59:CA:BD:AF:42:29:54:59:9A:71
Certificate issuer:       /CN=38b29341362af70cee57f236bd01d638b2845ee4
Certificate serial:       1AA8CD
Authority key identifier: A6:30:D2:7A:2A:C9:20:A7:F1:E0:20:0C:B1:49:E4:83:39:77:D6:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/38b29341362af70cee57f236bd01d638b2845ee4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/b0a0ef62e1d06a04597241d56082775e6d72bf9f.roa
Signing time:             Mon 18 Jul 2022 21:57:59 +0000
ROA not before:           Mon 18 Jul 2022 03:00:00 +0000
ROA not after:            Tue 31 Dec 2030 03:00:00 +0000
asID:                     262171
IP address blocks:        190.93.167.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1747149 (0x1aa8cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38b29341362af70cee57f236bd01d638b2845ee4
        Validity
            Not Before: Jul 18 03:00:00 2022 GMT
            Not After : Dec 31 03:00:00 2030 GMT
        Subject: CN=b0a0ef62e1d06a04597241d56082775e6d72bf9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f5:46:a9:00:dd:3d:66:92:ad:34:11:9a:64:
                    19:8a:c7:f8:d9:37:1b:cb:af:1f:84:6d:a4:08:0c:
                    20:b2:dd:b6:ba:2b:99:6e:94:36:4d:69:cf:91:6e:
                    2c:d3:e1:58:7c:1f:75:36:f4:5f:47:cb:19:86:ab:
                    3a:5c:5f:6c:05:49:b8:df:f3:6c:ce:bb:f1:79:62:
                    f6:14:6b:87:23:e0:66:72:6c:44:9b:10:b7:77:8a:
                    d3:4c:a6:e0:2c:96:1b:75:1c:ec:43:c9:81:6d:68:
                    41:a2:07:d2:fd:a1:aa:08:5d:28:66:c4:c4:6a:8f:
                    ea:00:a3:de:6c:62:f1:6f:0c:a2:38:02:f5:6a:da:
                    a9:fc:4d:4b:37:8e:c1:cf:25:86:9c:ca:ed:9d:ea:
                    1e:55:13:fc:6c:16:b7:10:ce:81:87:7e:60:b0:53:
                    ce:f9:d9:ea:2c:fd:b9:9c:57:e0:91:9d:64:5c:70:
                    6b:a9:6e:52:fa:bb:b2:9d:c4:e6:2b:64:2a:bb:33:
                    db:4d:da:ec:d8:e1:e7:00:09:ac:fc:0d:17:74:92:
                    71:af:52:42:cb:9a:30:22:6a:a2:97:0c:74:01:e9:
                    cc:25:7a:e4:33:8b:02:f9:e6:a6:b2:d5:36:60:82:
                    9b:16:8d:ed:d7:34:e2:c7:b9:01:8c:ca:e2:21:71:
                    c9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:0E:6E:D4:34:B5:48:50:C6:A0:59:CA:BD:AF:42:29:54:59:9A:71
            X509v3 Authority Key Identifier:
                keyid:A6:30:D2:7A:2A:C9:20:A7:F1:E0:20:0C:B1:49:E4:83:39:77:D6:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/38b29341362af70cee57f236bd01d638b2845ee4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/b0a0ef62e1d06a04597241d56082775e6d72bf9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/38b29341362af70cee57f236bd01d638b2845ee4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:19:f4:70:9b:62:6b:bf:f1:07:b1:e0:43:a4:56:3b:f2:34:
         79:a2:e7:cf:37:ec:9d:8e:ea:1b:38:fb:ec:f1:0d:f0:e0:c8:
         06:12:36:d0:39:b9:9b:04:59:21:4b:e9:aa:20:ae:1c:96:0e:
         b6:b2:aa:95:bb:75:c5:f4:a9:42:41:56:5a:14:2d:1b:87:16:
         1d:36:99:a0:dd:b2:aa:6b:e0:37:27:64:32:3a:8c:5d:15:6f:
         11:6e:ae:ad:21:dc:8a:57:f9:c4:a5:cf:d8:13:13:31:38:97:
         a6:0f:b1:b5:95:3d:7b:87:3f:ac:dd:62:a2:7c:33:ce:9e:bf:
         aa:c7:69:af:56:0a:ea:68:cf:78:8d:82:54:09:71:d4:f7:f9:
         6f:46:9b:c6:fd:49:7a:e6:5e:3a:fc:b9:a4:c2:d6:4c:82:32:
         a9:1a:6c:cc:c8:22:ed:7e:bb:65:0c:fa:ee:58:2e:8f:00:27:
         51:33:dd:fc:71:e4:5c:78:3e:aa:39:85:68:bc:4a:f2:62:84:
         10:54:65:86:e1:eb:14:20:fa:14:1a:e5:25:4e:50:1f:b0:e5:
         24:b8:e8:98:ad:ea:75:48:7a:d4:1c:5a:b2:62:d9:a2:35:25:
         56:fc:0b:f1:fa:db:b5:35:aa:10:12:b5:ff:bd:6a:62:e0:51:
         39:68:8a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----