Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/b83255fcc9db0dec82b4a87a0fabfc06fa27111e.roa
File:                     b83255fcc9db0dec82b4a87a0fabfc06fa27111e.roa (raw, json)
Hash identifier:          7fo7+kmRZb/yMoFjX7sIGyZRBnfT4gR7lX50kevNrco=
Subject key identifier:   F7:99:DB:99:E0:E7:70:8F:02:DD:41:97:61:E4:2E:20:26:29:DD:B0
Certificate issuer:       /CN=38b29341362af70cee57f236bd01d638b2845ee4
Certificate serial:       1FA578
Authority key identifier: A6:30:D2:7A:2A:C9:20:A7:F1:E0:20:0C:B1:49:E4:83:39:77:D6:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/38b29341362af70cee57f236bd01d638b2845ee4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/b83255fcc9db0dec82b4a87a0fabfc06fa27111e.roa
Signing time:             Tue 31 Jan 2023 16:06:00 +0000
ROA not before:           Mon 30 Jan 2023 16:05:08 +0000
ROA not after:            Fri 31 Jan 2025 16:05:08 +0000
asID:                     262171
IP address blocks:        190.93.168.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2073976 (0x1fa578)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38b29341362af70cee57f236bd01d638b2845ee4
        Validity
            Not Before: Jan 30 16:05:08 2023 GMT
            Not After : Jan 31 16:05:08 2025 GMT
        Subject: CN=b83255fcc9db0dec82b4a87a0fabfc06fa27111e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:16:dc:1d:84:a1:bf:b7:cd:65:2f:fa:71:6a:
                    ff:e4:01:95:60:88:5e:a7:0c:4c:cb:c8:b8:38:98:
                    6a:23:3b:b7:3c:bb:4d:73:c6:77:d5:6f:7c:3a:84:
                    a5:44:03:9b:d8:2c:56:ee:fe:a9:37:9d:4f:7e:f8:
                    32:a6:c7:06:95:8c:20:22:02:d6:a7:bc:53:9b:b8:
                    a8:f8:d1:f8:e2:dd:60:24:15:40:81:fe:e5:fb:ce:
                    fb:67:6a:52:19:d7:be:a8:f7:9c:c7:2c:c1:24:68:
                    d1:79:12:20:72:ed:f7:ce:fa:38:43:b6:22:f7:e2:
                    75:30:95:8d:37:5b:f5:97:52:06:19:77:82:80:e0:
                    45:c9:11:79:83:27:70:e7:88:a7:e9:2f:95:ee:53:
                    33:4b:09:50:d5:9d:da:06:67:29:e3:fc:27:14:69:
                    37:de:8b:8c:a0:86:e0:09:51:a3:b3:e3:c3:3d:2a:
                    d2:32:9d:77:3d:95:c5:ff:ff:fc:92:7f:05:97:d7:
                    c7:b2:c1:45:82:0b:22:77:01:5e:02:b8:df:f0:d4:
                    7f:ff:c8:d6:9c:39:98:ac:fc:bf:b8:8a:91:ce:dc:
                    99:45:b8:6b:c8:4e:76:67:e1:aa:b0:15:44:cd:00:
                    98:be:38:27:8f:6a:25:af:b7:7c:c1:10:f3:eb:6f:
                    6f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:99:DB:99:E0:E7:70:8F:02:DD:41:97:61:E4:2E:20:26:29:DD:B0
            X509v3 Authority Key Identifier:
                keyid:A6:30:D2:7A:2A:C9:20:A7:F1:E0:20:0C:B1:49:E4:83:39:77:D6:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/38b29341362af70cee57f236bd01d638b2845ee4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/b83255fcc9db0dec82b4a87a0fabfc06fa27111e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/38b29341362af70cee57f236bd01d638b2845ee4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:50:49:f7:c6:98:2d:b2:b9:fd:50:4e:93:0d:52:b0:e9:4d:
         1a:80:86:2a:f0:c9:28:10:90:6d:0c:dc:f9:c4:98:04:b7:70:
         25:ac:74:61:d2:85:57:ee:61:e2:a5:71:38:44:ab:31:08:d8:
         d3:b0:89:2a:38:34:ac:7c:92:a8:c0:25:7d:44:67:72:02:1f:
         55:6f:50:15:1e:7a:98:21:c8:23:4e:d1:09:1a:47:27:47:b7:
         dd:8c:13:b6:48:d0:25:23:50:85:8e:4b:e4:78:e5:06:34:fe:
         a0:78:38:90:ed:1b:88:fa:ca:dd:40:64:48:a4:d1:30:09:8c:
         6d:d7:da:31:b9:6f:a2:2d:81:ae:c1:7f:65:07:b8:81:dd:95:
         69:63:67:63:2d:5b:5a:05:5d:54:70:24:13:de:d9:fe:b6:a6:
         62:01:32:57:06:af:bb:52:91:a6:95:dc:09:f2:86:e8:48:11:
         73:ae:a0:a8:f4:44:f3:aa:d5:4b:a5:25:ca:ec:ab:2c:8c:9f:
         42:93:ea:4a:d4:5b:85:74:80:dd:ab:d0:91:0d:50:23:02:7c:
         bd:02:d6:6c:53:a6:b7:44:f2:c1:d5:bc:b4:4c:a5:be:dd:37:
         5f:ac:8a:1c:12:4c:89:3f:5b:2d:80:08:43:da:03:f9:9a:83:
         32:ae:ae:5a
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDH6V4MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDM4
YjI5MzQxMzYyYWY3MGNlZTU3ZjIzNmJkMDFkNjM4YjI4NDVlZTQwHhcNMjMwMTMw
MTYwNTA4WhcNMjUwMTMxMTYwNTA4WjAzMTEwLwYDVQQDEyhiODMyNTVmY2M5ZGIw
ZGVjODJiNGE4N2EwZmFiZmMwNmZhMjcxMTFlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkBbcHYShv7fNZS/6cWr/5AGVYIhepwxMy8i4OJhqIzu3PLtN
c8Z31W98OoSlRAOb2CxW7v6pN51PfvgypscGlYwgIgLWp7xTm7io+NH44t1gJBVA
gf7l+877Z2pSGde+qPecxyzBJGjReRIgcu33zvo4Q7Yi9+J1MJWNN1v1l1IGGXeC
gOBFyRF5gydw54in6S+V7lMzSwlQ1Z3aBmcp4/wnFGk33ouMoIbgCVGjs+PDPSrS
Mp13PZXF///8kn8Fl9fHssFFggsidwFeArjf8NR//8jWnDmYrPy/uIqRztyZRbhr
yE52Z+GqsBVEzQCYvjgnj2olr7d8wRDz629vtwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPeZ25ng53CPAt1Bl2HkLiAmKd2wMB8GA1UdIwQYMBaAFKYw0noqySCn8eAg
DLFJ5IM5d9bVMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzhiMjkz
NDEzNjJhZjcwY2VlNTdmMjM2YmQwMWQ2MzhiMjg0NWVlNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTg2NWEwNzQtYWMzMS00Y2Y3LTlhOTItNWZhOTM0
ZGJkNmVkL2I4MzI1NWZjYzlkYjBkZWM4MmI0YTg3YTBmYWJmYzA2ZmEyNzExMWUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xODY1YTA3NC1hYzMxLTRjZjctOWE5Mi01ZmE5
MzRkYmQ2ZWQvMzhiMjkzNDEzNjJhZjcwY2VlNTdmMjM2YmQwMWQ2MzhiMjg0NWVl
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL5dqDANBgkqhkiG9w0BAQsFAAOCAQEAYVBJ98aYLbK5/VBO
kw1SsOlNGoCGKvDJKBCQbQzc+cSYBLdwJax0YdKFV+5h4qVxOESrMQjY07CJKjg0
rHySqMAlfURncgIfVW9QFR56mCHII07RCRpHJ0e33YwTtkjQJSNQhY5L5HjlBjT+
oHg4kO0biPrK3UBkSKTRMAmMbdfaMblvoi2BrsF/ZQe4gd2VaWNnYy1bWgVdVHAk
E97Z/ramYgEyVwavu1KRppXcCfKG6EgRc66gqPRE86rVS6UlyuyrLIyfQpPqStRb
hXSA3avQkQ1QIwJ8vQLWbFOmt0TywdW8tEylvt03X6yKHBJMiT9bLYAIQ9oD+ZqD
Mq6uWg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:10 2023 by rpki-client on console-fra.rpki-client.org