Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/fdbf32fb01524e6475534cb83cd054838f5d2dfb.roa
File:                     fdbf32fb01524e6475534cb83cd054838f5d2dfb.roa (raw, json)
Hash identifier:          mI65Qslk3YW5msE1qCXgn3zqAbr76fyiHy04PsdXzmE=
Subject key identifier:   00:22:76:E6:A3:20:9E:F1:0B:A1:B3:B3:C2:5F:31:9A:39:C6:19:0E
Certificate issuer:       /CN=38b29341362af70cee57f236bd01d638b2845ee4
Certificate serial:       199717
Authority key identifier: A6:30:D2:7A:2A:C9:20:A7:F1:E0:20:0C:B1:49:E4:83:39:77:D6:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/38b29341362af70cee57f236bd01d638b2845ee4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/fdbf32fb01524e6475534cb83cd054838f5d2dfb.roa
Signing time:             Thu 09 Jun 2022 01:15:05 +0000
ROA not before:           Wed 08 Jun 2022 03:00:00 +0000
ROA not after:            Sat 08 Jun 2024 03:00:00 +0000
asID:                     262171
IP address blocks:        190.93.175.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1677079 (0x199717)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38b29341362af70cee57f236bd01d638b2845ee4
        Validity
            Not Before: Jun  8 03:00:00 2022 GMT
            Not After : Jun  8 03:00:00 2024 GMT
        Subject: CN=fdbf32fb01524e6475534cb83cd054838f5d2dfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b6:5f:13:31:cd:ef:61:5a:ac:34:a8:4c:be:
                    ac:9c:e6:31:36:1f:86:80:52:de:73:ce:fc:9f:bc:
                    ce:97:2d:15:ec:26:30:39:8f:bf:af:4f:00:1a:10:
                    ed:55:fd:c4:ff:dc:49:f0:c6:1a:c0:fd:d0:e4:81:
                    65:ce:ee:25:05:a5:cc:cc:81:ae:17:1d:57:e4:13:
                    50:61:79:6d:59:ad:d9:67:a7:bb:55:da:96:6e:ee:
                    97:39:17:f6:63:e8:f4:f1:5d:2a:5a:41:9a:2f:2a:
                    89:e6:a7:da:54:7c:d9:3a:3b:ce:d6:83:27:0d:8b:
                    4b:b4:61:65:b8:76:58:27:e8:a5:82:64:ff:0a:99:
                    14:7d:65:3c:0e:da:66:d9:da:8a:6d:9b:01:ca:89:
                    7b:df:5f:d7:b5:a4:55:12:4f:59:79:32:bd:9f:b1:
                    2e:54:53:da:da:69:00:c9:97:14:38:02:85:82:1f:
                    30:02:eb:1b:b0:01:0d:84:7b:83:98:6f:65:b4:a8:
                    ab:ab:33:90:2d:d6:67:ee:3b:c7:07:2f:c2:70:7f:
                    04:c7:a1:d3:48:dc:4c:65:ea:d7:d7:03:74:36:b0:
                    cb:60:29:57:60:4b:8e:94:2b:7f:9e:d5:9a:16:19:
                    0e:fe:a6:3b:f7:76:f9:00:51:26:a9:5f:a7:65:77:
                    35:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:22:76:E6:A3:20:9E:F1:0B:A1:B3:B3:C2:5F:31:9A:39:C6:19:0E
            X509v3 Authority Key Identifier:
                keyid:A6:30:D2:7A:2A:C9:20:A7:F1:E0:20:0C:B1:49:E4:83:39:77:D6:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/38b29341362af70cee57f236bd01d638b2845ee4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/fdbf32fb01524e6475534cb83cd054838f5d2dfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/38b29341362af70cee57f236bd01d638b2845ee4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:f6:47:ea:6a:6c:0b:82:af:5a:99:95:c4:5c:22:2e:98:b1:
         ee:be:06:ba:73:0d:06:9b:21:65:20:00:6c:77:f7:d1:b0:ee:
         2b:d0:c2:3b:eb:88:48:0e:14:88:ca:9d:ea:2f:52:d2:8b:56:
         13:20:3c:bd:c4:54:4f:6f:bd:a5:d7:9d:25:71:22:a4:f6:71:
         aa:a6:8c:6b:e2:2b:13:97:9b:3a:61:69:c8:ea:9d:07:1e:b2:
         31:a3:46:e1:7e:77:3d:1d:a6:de:c1:4b:3f:bb:3a:db:c4:5c:
         14:db:57:b0:04:cf:ea:78:00:ce:07:a6:c0:df:b1:a0:4a:33:
         cb:78:14:8e:60:c7:25:fc:e3:60:dc:86:39:9e:45:82:42:06:
         03:85:ba:f0:a3:1f:8e:e8:4e:ff:ff:1d:fc:6e:07:25:7a:ab:
         24:ba:24:38:57:a7:94:36:58:9c:36:01:63:de:2b:85:b7:c2:
         b7:52:0a:fe:8d:f5:c3:bb:4f:f1:da:07:16:30:bd:01:c2:b7:
         eb:ae:e6:de:c0:63:bb:11:13:b9:dd:56:6b:6d:eb:cd:ed:05:
         1a:79:5d:07:a5:d8:d9:d0:b3:61:f8:73:c5:22:e0:b5:eb:3f:
         83:4c:da:81:a9:9b:b8:e6:9e:b4:d8:4a:19:0a:b3:19:ae:e3:
         8b:e2:b7:ca
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGZcXMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDM4
YjI5MzQxMzYyYWY3MGNlZTU3ZjIzNmJkMDFkNjM4YjI4NDVlZTQwHhcNMjIwNjA4
MDMwMDAwWhcNMjQwNjA4MDMwMDAwWjAzMTEwLwYDVQQDEyhmZGJmMzJmYjAxNTI0
ZTY0NzU1MzRjYjgzY2QwNTQ4MzhmNWQyZGZiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnLZfEzHN72FarDSoTL6snOYxNh+GgFLec878n7zOly0V7CYw
OY+/r08AGhDtVf3E/9xJ8MYawP3Q5IFlzu4lBaXMzIGuFx1X5BNQYXltWa3ZZ6e7
VdqWbu6XORf2Y+j08V0qWkGaLyqJ5qfaVHzZOjvO1oMnDYtLtGFluHZYJ+ilgmT/
CpkUfWU8Dtpm2dqKbZsByol731/XtaRVEk9ZeTK9n7EuVFPa2mkAyZcUOAKFgh8w
AusbsAENhHuDmG9ltKirqzOQLdZn7jvHBy/CcH8Ex6HTSNxMZerX1wN0NrDLYClX
YEuOlCt/ntWaFhkO/qY793b5AFEmqV+nZXc18QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFAAiduajIJ7xC6Gzs8JfMZo5xhkOMB8GA1UdIwQYMBaAFKYw0noqySCn8eAg
DLFJ5IM5d9bVMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzhiMjkz
NDEzNjJhZjcwY2VlNTdmMjM2YmQwMWQ2MzhiMjg0NWVlNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTg2NWEwNzQtYWMzMS00Y2Y3LTlhOTItNWZhOTM0
ZGJkNmVkL2ZkYmYzMmZiMDE1MjRlNjQ3NTUzNGNiODNjZDA1NDgzOGY1ZDJkZmIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xODY1YTA3NC1hYzMxLTRjZjctOWE5Mi01ZmE5
MzRkYmQ2ZWQvMzhiMjkzNDEzNjJhZjcwY2VlNTdmMjM2YmQwMWQ2MzhiMjg0NWVl
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL5drzANBgkqhkiG9w0BAQsFAAOCAQEAdfZH6mpsC4KvWpmV
xFwiLpix7r4GunMNBpshZSAAbHf30bDuK9DCO+uISA4UiMqd6i9S0otWEyA8vcRU
T2+9pdedJXEipPZxqqaMa+IrE5ebOmFpyOqdBx6yMaNG4X53PR2m3sFLP7s628Rc
FNtXsATP6ngAzgemwN+xoEozy3gUjmDHJfzjYNyGOZ5FgkIGA4W68KMfjuhO//8d
/G4HJXqrJLokOFenlDZYnDYBY94rhbfCt1IK/o31w7tP8doHFjC9AcK3667m3sBj
uxETud1Wa23rze0FGnldB6XY2dCzYfhzxSLgtes/g0zagambuOaetNhKGQqzGa7j
i+K3yg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:25 2023 by rpki-client on console-ams.rpki-client.org