Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3d630667-6830-4169-aafe-706427c85335/b73c06cf9951d16daa5b2ee1509cf3f481b8fd12.roa
File:                     b73c06cf9951d16daa5b2ee1509cf3f481b8fd12.roa (raw, json)
Hash identifier:          gJclQO+MKYssaHHHinLc1k1uAaw/8Ch7zVQeESCpHgA=
Subject key identifier:   69:B5:97:5D:15:A4:19:72:8C:12:1F:CC:2D:C2:D1:7D:52:07:94:25
Certificate issuer:       /CN=b522e22ef37f9604da03f445325cbd59d4a9a983
Certificate serial:       0E17
Authority key identifier: 06:7E:0E:8F:6F:B4:65:2B:47:A7:0F:30:35:2B:16:0F:21:11:33:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b522e22ef37f9604da03f445325cbd59d4a9a983.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3d630667-6830-4169-aafe-706427c85335/b73c06cf9951d16daa5b2ee1509cf3f481b8fd12.roa
Signing time:             Tue 18 Jan 2022 18:27:53 +0000
ROA not before:           Mon 17 Jan 2022 03:00:00 +0000
ROA not after:            Wed 17 Jan 2024 03:00:00 +0000
asID:                     271875
IP address blocks:        201.218.190.0/24 maxlen: 24
                          201.218.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3607 (0xe17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b522e22ef37f9604da03f445325cbd59d4a9a983
        Validity
            Not Before: Jan 17 03:00:00 2022 GMT
            Not After : Jan 17 03:00:00 2024 GMT
        Subject: CN=b73c06cf9951d16daa5b2ee1509cf3f481b8fd12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:07:08:b9:b0:31:81:b4:d1:11:58:54:25:96:
                    cd:e3:89:05:c5:0e:51:d6:52:dc:fa:76:49:a1:ea:
                    a1:4f:ef:7a:72:39:96:ed:e0:8a:4e:f4:39:63:35:
                    b7:7d:7f:e9:86:c5:78:b5:a1:64:d9:16:a1:c0:a8:
                    c4:3c:cb:2d:f2:21:d2:3a:3f:cd:21:ec:f3:a5:20:
                    1c:46:f6:ee:33:46:74:ef:b1:45:c2:85:61:ff:f1:
                    ff:6f:a7:2a:3a:52:44:fb:2a:dc:14:e1:e4:80:c7:
                    41:59:0d:68:5e:88:96:22:4c:2d:49:49:87:d8:b2:
                    1f:a3:36:8f:38:b5:bd:85:0d:c5:b2:ce:7f:db:5d:
                    e4:10:3b:e7:44:85:42:c9:dc:90:79:dc:1b:6a:8a:
                    55:67:8f:0e:12:c0:a4:72:61:87:ec:ec:6f:fc:35:
                    ba:f6:86:fa:4e:fb:13:e1:4e:da:b4:e2:45:2f:0c:
                    18:5c:bd:08:52:12:f4:23:0e:c3:b9:3c:2a:5b:51:
                    0c:29:d7:4b:bd:f6:ec:f7:7e:66:1c:92:8f:2f:b3:
                    b1:24:c2:05:f8:11:4d:2f:e5:5d:67:cb:15:0c:75:
                    cc:de:63:89:d2:04:32:0f:fc:2e:4d:e2:6f:59:b5:
                    9d:cc:ab:a4:c3:3f:af:1b:fa:45:49:81:a7:78:ee:
                    25:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B5:97:5D:15:A4:19:72:8C:12:1F:CC:2D:C2:D1:7D:52:07:94:25
            X509v3 Authority Key Identifier:
                keyid:06:7E:0E:8F:6F:B4:65:2B:47:A7:0F:30:35:2B:16:0F:21:11:33:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b522e22ef37f9604da03f445325cbd59d4a9a983.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3d630667-6830-4169-aafe-706427c85335/b73c06cf9951d16daa5b2ee1509cf3f481b8fd12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3d630667-6830-4169-aafe-706427c85335/b522e22ef37f9604da03f445325cbd59d4a9a983.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:91:0e:cc:82:68:e9:a1:88:9f:ad:9b:8a:12:62:f0:c9:39:
         ef:80:c0:e7:16:15:3e:5b:f5:3e:19:3e:1a:f4:a4:58:1f:1b:
         9b:6b:84:37:46:d1:9f:c5:1f:eb:b0:3d:81:bb:e5:7e:96:e6:
         4c:96:1c:ee:01:bb:0d:db:4b:6b:1c:6b:ae:f2:bd:4b:18:f5:
         a4:c0:35:20:24:be:0a:06:d7:77:5c:0d:c7:5d:45:57:81:37:
         82:42:9f:fd:d9:df:5e:d3:6c:15:06:d5:b3:a0:ad:92:b6:12:
         43:c1:91:a6:c9:92:fd:d4:03:54:e6:92:a1:5b:4c:1b:22:1b:
         d1:35:d4:bb:7f:f4:82:29:ff:dd:fd:be:8c:b0:2c:99:57:70:
         1b:8e:28:a0:57:78:6e:c0:31:f9:54:6a:6f:b5:b8:20:50:06:
         41:b3:5b:63:15:c5:d7:c1:96:36:2e:63:86:e7:73:30:05:49:
         c4:7b:d1:e9:77:ae:06:06:71:75:d6:7f:d1:83:5e:a8:4e:e6:
         8d:21:10:5e:29:0a:e7:ce:85:70:c4:66:ca:fa:d7:09:f1:df:
         d0:d3:31:5f:a0:d8:a7:6f:ee:4e:bd:2c:40:38:7e:1b:b2:47:
         c5:5e:ba:36:30:72:8b:4c:e4:5a:62:97:08:63:0a:de:06:80:
         56:e5:07:0c
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICDhcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoYjUy
MmUyMmVmMzdmOTYwNGRhMDNmNDQ1MzI1Y2JkNTlkNGE5YTk4MzAeFw0yMjAxMTcw
MzAwMDBaFw0yNDAxMTcwMzAwMDBaMDMxMTAvBgNVBAMTKGI3M2MwNmNmOTk1MWQx
NmRhYTViMmVlMTUwOWNmM2Y0ODFiOGZkMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+Bwi5sDGBtNERWFQlls3jiQXFDlHWUtz6dkmh6qFP73pyOZbt
4IpO9DljNbd9f+mGxXi1oWTZFqHAqMQ8yy3yIdI6P80h7POlIBxG9u4zRnTvsUXC
hWH/8f9vpyo6UkT7KtwU4eSAx0FZDWheiJYiTC1JSYfYsh+jNo84tb2FDcWyzn/b
XeQQO+dEhULJ3JB53BtqilVnjw4SwKRyYYfs7G/8Nbr2hvpO+xPhTtq04kUvDBhc
vQhSEvQjDsO5PCpbUQwp10u99uz3fmYcko8vs7EkwgX4EU0v5V1nyxUMdczeY4nS
BDIP/C5N4m9ZtZ3Mq6TDP68b+kVJgad47iU5AgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUabWXXRWkGXKMEh/MLcLRfVIHlCUwHwYDVR0jBBgwFoAUBn4Oj2+0ZStHpw8w
NSsWDyERM3swDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9iNTIyZTIy
ZWYzN2Y5NjA0ZGEwM2Y0NDUzMjVjYmQ1OWQ0YTlhOTgzLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy8zZDYzMDY2Ny02ODMwLTQxNjktYWFmZS03MDY0Mjdj
ODUzMzUvYjczYzA2Y2Y5OTUxZDE2ZGFhNWIyZWUxNTA5Y2YzZjQ4MWI4ZmQxMi5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzNkNjMwNjY3LTY4MzAtNDE2OS1hYWZlLTcwNjQy
N2M4NTMzNS9iNTIyZTIyZWYzN2Y5NjA0ZGEwM2Y0NDUzMjVjYmQ1OWQ0YTlhOTgz
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQBydq+MA0GCSqGSIb3DQEBCwUAA4IBAQBIkQ7MgmjpoYifrZuK
EmLwyTnvgMDnFhU+W/U+GT4a9KRYHxuba4Q3RtGfxR/rsD2Bu+V+luZMlhzuAbsN
20trHGuu8r1LGPWkwDUgJL4KBtd3XA3HXUVXgTeCQp/92d9e02wVBtWzoK2SthJD
wZGmyZL91ANU5pKhW0wbIhvRNdS7f/SCKf/d/b6MsCyZV3AbjiigV3huwDH5VGpv
tbggUAZBs1tjFcXXwZY2LmOG53MwBUnEe9Hpd64GBnF11n/Rg16oTuaNIRBeKQrn
zoVwxGbK+tcJ8d/Q0zFfoNinb+5OvSxAOH4bskfFXro2MHKLTORaYpcIYwreBoBW
5QcM
-----END CERTIFICATE-----
Generated at Tue Aug 15 20:31:07 2023 by rpki-client on console-fra.rpki-client.org