Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/94ec9d3a3f732629a8b09906bc3a08eb8fc99c38.roa
File:                     94ec9d3a3f732629a8b09906bc3a08eb8fc99c38.roa (raw, json)
Hash identifier:          LMHBXyjrL/nVCcBXWBY3WU9KbTJF9ga85VGQ/FUQpLU=
Subject key identifier:   EC:91:30:01:70:71:A1:F9:69:0B:1E:5A:DA:59:67:BD:7D:F3:8D:CC
Certificate issuer:       /CN=b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce
Certificate serial:       27A317
Authority key identifier: 81:2B:26:72:FD:7E:1F:C6:DD:07:A5:C3:F7:2C:0A:C0:C8:EB:AC:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/94ec9d3a3f732629a8b09906bc3a08eb8fc99c38.roa
Signing time:             Tue 07 Nov 2023 16:01:05 +0000
ROA not before:           Tue 07 Nov 2023 16:00:38 +0000
ROA not after:            Tue 07 Nov 2028 16:00:38 +0000
asID:                     263834
IP address blocks:        190.110.229.0/24 maxlen: 24
                          190.110.230.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2597655 (0x27a317)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce
        Validity
            Not Before: Nov  7 16:00:38 2023 GMT
            Not After : Nov  7 16:00:38 2028 GMT
        Subject: CN=94ec9d3a3f732629a8b09906bc3a08eb8fc99c38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:21:85:fe:27:18:76:3b:97:c6:4b:55:c9:61:
                    77:3e:e0:73:ea:39:6f:fc:da:9a:ff:3e:6c:1e:ea:
                    e8:f3:b5:e0:a6:45:9e:de:f6:c8:0d:9f:02:b4:f5:
                    b7:66:d3:49:7a:bd:8d:57:e5:cf:2e:27:46:90:db:
                    9a:87:c2:91:62:a9:44:d2:14:d7:8e:57:b4:8f:5b:
                    19:80:3f:5b:49:a7:da:54:ba:39:10:0a:14:88:0c:
                    8b:55:0e:b3:c3:5a:fb:4c:37:62:da:ce:59:70:69:
                    d2:7e:a1:ce:82:f7:62:71:f2:b6:f8:6c:59:ae:0e:
                    ef:84:b7:c1:14:56:12:b6:88:11:23:29:78:14:da:
                    80:0d:e1:10:e8:1e:12:dd:7d:bc:c0:f1:f2:0e:43:
                    55:41:09:db:5d:e8:f4:b9:05:bc:f0:90:4a:27:e3:
                    0a:4d:0b:62:81:8c:ac:86:61:1a:5a:f2:4d:69:15:
                    69:69:43:25:52:ea:f3:fb:db:2b:72:09:f1:82:47:
                    52:16:e6:ec:ec:e6:a3:33:40:9a:40:dd:a5:7a:18:
                    25:27:7a:28:15:e9:84:8b:e1:84:07:46:22:7d:49:
                    c0:73:83:94:c3:78:ce:55:8f:09:de:3d:b8:8a:39:
                    fd:a2:91:3e:30:08:48:24:82:c5:d2:ce:33:03:d5:
                    ff:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:91:30:01:70:71:A1:F9:69:0B:1E:5A:DA:59:67:BD:7D:F3:8D:CC
            X509v3 Authority Key Identifier:
                keyid:81:2B:26:72:FD:7E:1F:C6:DD:07:A5:C3:F7:2C:0A:C0:C8:EB:AC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/94ec9d3a3f732629a8b09906bc3a08eb8fc99c38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.229.0-190.110.231.255

    Signature Algorithm: sha256WithRSAEncryption
         46:c2:29:17:5b:04:08:b4:d3:23:b1:29:0b:0d:1e:33:c7:e9:
         0d:84:24:d6:07:ef:f6:25:0b:67:aa:fc:c0:50:d8:47:58:5a:
         50:85:ec:5b:9d:4b:f9:11:11:b4:e3:05:20:ff:e6:b0:0e:20:
         08:9e:60:14:fe:e2:d1:20:b4:8c:27:22:0a:e5:a5:35:c5:6a:
         9c:a4:84:06:a7:a9:48:7e:f6:48:11:1a:7e:21:7b:19:be:df:
         c1:c7:fe:4b:f1:bf:0b:97:f2:d6:75:5f:5b:e3:4a:74:16:de:
         04:a3:3a:f3:4f:ef:d2:f1:08:92:49:5a:3c:44:5c:2f:0f:5d:
         b5:6f:52:6c:2d:21:85:47:0f:d8:ff:2f:17:a1:27:9d:73:c0:
         a9:ff:e7:27:e3:ce:77:fd:a2:c8:f5:43:e7:c6:0c:6e:85:f0:
         20:07:7f:6f:7e:45:f0:ad:16:c9:5a:3e:b7:7c:60:01:67:34:
         aa:42:43:68:3b:5e:dd:4e:b6:77:ed:99:a9:3c:d3:f6:d7:79:
         40:e6:4f:a0:50:fd:1e:75:c2:11:1e:04:a6:a7:92:57:8a:75:
         c7:81:03:15:10:6a:92:21:f3:9c:27:ec:42:e1:3d:8b:ac:a3:
         a4:c5:ef:ae:b2:34:da:ff:c2:f6:c0:75:8f:cf:e4:82:61:18:
         bf:08:6e:12
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDJ6MXMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGI0
ZTRlMjI1ZThiMTRlMmUxYzc0MjBmYjRjZDJmYWQxYTAwOWUyY2UwHhcNMjMxMTA3
MTYwMDM4WhcNMjgxMTA3MTYwMDM4WjAzMTEwLwYDVQQDEyg5NGVjOWQzYTNmNzMy
NjI5YThiMDk5MDZiYzNhMDhlYjhmYzk5YzM4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvyGF/icYdjuXxktVyWF3PuBz6jlv/Nqa/z5sHuro87XgpkWe
3vbIDZ8CtPW3ZtNJer2NV+XPLidGkNuah8KRYqlE0hTXjle0j1sZgD9bSafaVLo5
EAoUiAyLVQ6zw1r7TDdi2s5ZcGnSfqHOgvdicfK2+GxZrg7vhLfBFFYStogRIyl4
FNqADeEQ6B4S3X28wPHyDkNVQQnbXej0uQW88JBKJ+MKTQtigYyshmEaWvJNaRVp
aUMlUurz+9srcgnxgkdSFubs7OajM0CaQN2lehglJ3ooFemEi+GEB0YifUnAc4OU
w3jOVY8J3j24ijn9opE+MAhIJILF0s4zA9X/7wIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFOyRMAFwcaH5aQseWtpZZ719843MMB8GA1UdIwQYMBaAFIErJnL9fh/G3Qel
w/csCsDI66wdMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjRlNGUy
MjVlOGIxNGUyZTFjNzQyMGZiNGNkMmZhZDFhMDA5ZTJjZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzgyODMwNDctODgzNC00M2Q1LTgyZjctNGQ5Mzhl
NjA1NzFlLzk0ZWM5ZDNhM2Y3MzI2MjlhOGIwOTkwNmJjM2EwOGViOGZjOTljMzgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zODI4MzA0Ny04ODM0LTQzZDUtODJmNy00ZDkz
OGU2MDU3MWUvYjRlNGUyMjVlOGIxNGUyZTFjNzQyMGZiNGNkMmZhZDFhMDA5ZTJj
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQAvm7lAwQDvm7gMA0GCSqGSIb3DQEBCwUAA4IBAQBGwikX
WwQItNMjsSkLDR4zx+kNhCTWB+/2JQtnqvzAUNhHWFpQhexbnUv5ERG04wUg/+aw
DiAInmAU/uLRILSMJyIK5aU1xWqcpIQGp6lIfvZIERp+IXsZvt/Bx/5L8b8Ll/LW
dV9b40p0Ft4EozrzT+/S8QiSSVo8RFwvD121b1JsLSGFRw/Y/y8XoSedc8Cp/+cn
4853/aLI9UPnxgxuhfAgB39vfkXwrRbJWj63fGABZzSqQkNoO17dTrZ37ZmpPNP2
13lA5k+gUP0edcIRHgSmp5JXinXHgQMVEGqSIfOcJ+xC4T2LrKOkxe+usjTa/8L2
wHWPz+SCYRi/CG4S
-----END CERTIFICATE-----
Generated at Wed Nov 8 15:45:01 2023 by rpki-client on console-ams.rpki-client.org