Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/b4993f416bfb6c1596f5c27fc22b5e2e4e206f03.roa
File:                     b4993f416bfb6c1596f5c27fc22b5e2e4e206f03.roa (raw, json)
Hash identifier:          agiiNZ5dFmiZALVhvVdAj195DowvMUpA3AERyvWa6Zo=
Subject key identifier:   55:2A:39:33:B4:F0:E0:45:91:EA:B9:88:A0:F7:2C:D0:4E:72:18:0E
Certificate issuer:       /CN=38b29341362af70cee57f236bd01d638b2845ee4
Certificate serial:       1994F1
Authority key identifier: A6:30:D2:7A:2A:C9:20:A7:F1:E0:20:0C:B1:49:E4:83:39:77:D6:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/38b29341362af70cee57f236bd01d638b2845ee4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/b4993f416bfb6c1596f5c27fc22b5e2e4e206f03.roa
Signing time:             Thu 09 Jun 2022 01:13:48 +0000
ROA not before:           Wed 08 Jun 2022 03:00:00 +0000
ROA not after:            Tue 31 Dec 2030 03:00:00 +0000
asID:                     262171
IP address blocks:        190.93.173.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1676529 (0x1994f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38b29341362af70cee57f236bd01d638b2845ee4
        Validity
            Not Before: Jun  8 03:00:00 2022 GMT
            Not After : Dec 31 03:00:00 2030 GMT
        Subject: CN=b4993f416bfb6c1596f5c27fc22b5e2e4e206f03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e0:8b:52:f6:d4:8d:95:e4:0c:bc:d8:b7:7b:
                    85:9e:44:f6:d2:1f:96:8c:36:56:59:b2:25:51:be:
                    36:c5:31:9f:d3:f7:47:20:2f:12:7b:c9:81:63:56:
                    b7:0b:28:91:24:0a:d0:f8:da:6c:79:41:38:12:61:
                    46:6d:54:0f:ef:8c:e9:c5:ac:dd:b1:1c:73:b2:4f:
                    a3:9f:9c:16:41:bb:bb:b4:12:d9:bd:a5:f7:76:40:
                    87:12:a3:be:66:72:05:8f:9b:25:83:23:18:b7:b4:
                    7a:3e:61:30:1a:cd:52:8b:ab:74:5f:fd:df:e7:74:
                    ff:50:c0:0b:cf:aa:d4:44:02:2d:ed:7a:8b:db:e6:
                    a7:ae:a1:d1:a8:6b:af:3c:8c:2d:a5:18:7f:7b:f1:
                    34:47:31:a8:9e:ff:2f:18:0a:39:5c:3d:1e:95:2a:
                    89:4a:30:21:0b:e7:80:fc:de:5c:2b:fb:90:10:03:
                    a1:e9:57:e4:6e:9e:30:52:ba:59:85:2f:73:0a:97:
                    e7:59:60:55:85:32:0d:83:de:ff:6b:17:ce:3d:07:
                    ae:1c:00:ac:81:4b:a0:91:ca:0e:87:58:4c:6c:e6:
                    49:21:26:e9:cb:ba:ac:73:09:15:97:8c:f6:6d:8a:
                    5e:66:ac:b3:26:a5:4c:aa:68:03:fd:0b:60:e8:98:
                    c5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:2A:39:33:B4:F0:E0:45:91:EA:B9:88:A0:F7:2C:D0:4E:72:18:0E
            X509v3 Authority Key Identifier:
                keyid:A6:30:D2:7A:2A:C9:20:A7:F1:E0:20:0C:B1:49:E4:83:39:77:D6:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/38b29341362af70cee57f236bd01d638b2845ee4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/b4993f416bfb6c1596f5c27fc22b5e2e4e206f03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/38b29341362af70cee57f236bd01d638b2845ee4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:d3:78:68:96:91:84:4d:dd:55:73:52:b9:a0:d5:1c:ab:c2:
         6d:e2:b8:c8:b0:30:e2:ff:69:68:a2:15:49:87:f6:5c:fe:6a:
         07:29:e5:61:fd:6c:f9:ce:c8:d2:cb:bf:4f:23:87:b1:2a:43:
         d9:b1:68:03:3c:41:3b:24:15:88:2f:0a:e9:a9:98:b7:26:98:
         c0:2d:16:ac:bb:16:34:7f:7a:9a:fd:60:83:9b:31:12:4e:83:
         bd:72:46:4e:30:01:66:b0:af:a4:93:74:6d:0d:0e:9c:f6:dd:
         d1:02:84:54:8d:17:b1:e0:3c:4c:d3:50:54:a3:1a:3b:29:4f:
         de:32:7b:33:30:b1:a2:91:bc:14:f1:0b:e5:9d:fe:a2:a5:0b:
         19:e7:c0:70:60:e7:34:47:a3:21:8e:1a:90:43:66:d1:4b:38:
         11:29:42:d6:6a:ee:dd:a2:8c:60:6b:05:02:7e:54:e8:61:6c:
         0d:e0:01:61:ff:04:7b:0e:be:6b:1a:f4:1e:22:84:a3:54:c3:
         b7:4b:1d:c3:0a:57:13:55:a3:8d:1a:50:ba:83:c4:b1:ef:be:
         73:a1:4f:5a:96:2a:af:b5:33:7a:cd:62:cf:91:e3:ab:a2:76:
         27:85:36:f0:53:c7:f0:38:9e:3b:c6:fe:7e:89:56:03:b0:d2:
         1e:00:ce:e0
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGZTxMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDM4
YjI5MzQxMzYyYWY3MGNlZTU3ZjIzNmJkMDFkNjM4YjI4NDVlZTQwHhcNMjIwNjA4
MDMwMDAwWhcNMzAxMjMxMDMwMDAwWjAzMTEwLwYDVQQDEyhiNDk5M2Y0MTZiZmI2
YzE1OTZmNWMyN2ZjMjJiNWUyZTRlMjA2ZjAzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAi+CLUvbUjZXkDLzYt3uFnkT20h+WjDZWWbIlUb42xTGf0/dH
IC8Se8mBY1a3CyiRJArQ+NpseUE4EmFGbVQP74zpxazdsRxzsk+jn5wWQbu7tBLZ
vaX3dkCHEqO+ZnIFj5slgyMYt7R6PmEwGs1Si6t0X/3f53T/UMALz6rURAIt7XqL
2+anrqHRqGuvPIwtpRh/e/E0RzGonv8vGAo5XD0elSqJSjAhC+eA/N5cK/uQEAOh
6Vfkbp4wUrpZhS9zCpfnWWBVhTINg97/axfOPQeuHACsgUugkcoOh1hMbOZJISbp
y7qscwkVl4z2bYpeZqyzJqVMqmgD/Qtg6JjF4wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFUqOTO08OBFkeq5iKD3LNBOchgOMB8GA1UdIwQYMBaAFKYw0noqySCn8eAg
DLFJ5IM5d9bVMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzhiMjkz
NDEzNjJhZjcwY2VlNTdmMjM2YmQwMWQ2MzhiMjg0NWVlNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTg2NWEwNzQtYWMzMS00Y2Y3LTlhOTItNWZhOTM0
ZGJkNmVkL2I0OTkzZjQxNmJmYjZjMTU5NmY1YzI3ZmMyMmI1ZTJlNGUyMDZmMDMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xODY1YTA3NC1hYzMxLTRjZjctOWE5Mi01ZmE5
MzRkYmQ2ZWQvMzhiMjkzNDEzNjJhZjcwY2VlNTdmMjM2YmQwMWQ2MzhiMjg0NWVl
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL5drTANBgkqhkiG9w0BAQsFAAOCAQEAA9N4aJaRhE3dVXNS
uaDVHKvCbeK4yLAw4v9paKIVSYf2XP5qBynlYf1s+c7I0su/TyOHsSpD2bFoAzxB
OyQViC8K6amYtyaYwC0WrLsWNH96mv1gg5sxEk6DvXJGTjABZrCvpJN0bQ0OnPbd
0QKEVI0XseA8TNNQVKMaOylP3jJ7MzCxopG8FPEL5Z3+oqULGefAcGDnNEejIY4a
kENm0Us4ESlC1mru3aKMYGsFAn5U6GFsDeABYf8Eew6+axr0HiKEo1TDt0sdwwpX
E1WjjRpQuoPEse++c6FPWpYqr7Uzes1iz5Hjq6J2J4U28FPH8DieO8b+folWA7DS
HgDO4A==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:25 2023 by rpki-client on console-ams.rpki-client.org