Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/af1533bcf10736cfe3c00e08774efd036907787f.roa
File:                     af1533bcf10736cfe3c00e08774efd036907787f.roa (raw, json)
Hash identifier:          cyZJMLSZfChl0OiRBwG6vnadDv8B9WMyJCeLHf46FgE=
Subject key identifier:   0B:CA:62:55:28:02:F6:3C:DB:7F:55:3C:0D:2E:DD:93:13:F8:F1:40
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       2754CE
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/af1533bcf10736cfe3c00e08774efd036907787f.roa
Signing time:             Mon 17 Apr 2023 13:00:51 +0000
ROA not before:           Sun 16 Apr 2023 13:00:28 +0000
ROA not after:            Thu 17 Apr 2025 13:00:28 +0000
asID:                     263198
IP address blocks:        190.225.160.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2577614 (0x2754ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Apr 16 13:00:28 2023 GMT
            Not After : Apr 17 13:00:28 2025 GMT
        Subject: CN=af1533bcf10736cfe3c00e08774efd036907787f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f8:64:4b:25:bf:90:78:77:86:20:5b:63:ea:
                    6a:7a:d0:bc:a7:51:5e:e9:a4:8d:3a:b0:01:0d:03:
                    76:58:c8:f2:41:c8:3b:a4:41:4a:11:12:92:aa:cd:
                    c8:c9:c6:87:aa:47:39:52:56:5b:e4:8c:7d:c9:82:
                    01:e5:31:16:19:d0:d5:18:55:cc:c4:9f:11:ae:80:
                    a4:7c:97:c7:5d:61:23:29:f6:de:fd:16:d6:6f:16:
                    00:f2:d6:be:0a:3d:60:8f:a8:9d:dc:14:f5:dd:d0:
                    10:00:91:ee:1d:57:ed:3c:ee:a9:5b:3a:7a:1b:28:
                    ec:00:04:a9:db:ac:2e:9d:84:b5:6f:bc:ac:f5:44:
                    86:1d:4e:14:a2:6b:23:8b:61:1b:cd:dd:99:d8:48:
                    d9:c2:59:8d:99:be:0a:05:b4:31:94:85:ac:d6:90:
                    7e:1f:89:cd:5a:6b:d6:1c:1e:68:a9:11:6e:ee:c3:
                    0e:6a:c5:9a:0a:cb:de:76:87:40:3d:c8:be:79:48:
                    95:0c:4e:69:33:2b:71:f1:29:e1:0b:24:fc:60:24:
                    23:94:2c:de:a5:fa:1a:91:d5:48:47:e2:8f:24:36:
                    c4:06:6c:9a:0d:54:5d:9f:59:6e:6f:b6:1e:d2:85:
                    fe:dc:5b:d0:09:f9:7b:06:3d:f4:74:bf:d5:86:34:
                    58:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:CA:62:55:28:02:F6:3C:DB:7F:55:3C:0D:2E:DD:93:13:F8:F1:40
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/af1533bcf10736cfe3c00e08774efd036907787f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.225.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:f4:03:f3:99:a3:64:8e:1f:81:01:69:d5:cc:93:e3:b5:78:
         bd:e6:b7:e3:52:2a:7e:47:70:e8:f3:cf:a1:34:a7:21:86:99:
         4b:88:ce:bc:8d:b0:93:31:e3:ce:9c:8b:64:54:77:ad:ed:84:
         6a:61:90:cf:7a:9d:9e:3f:52:d4:b1:0c:1d:3e:88:c3:db:db:
         47:aa:69:59:0c:1b:1a:f1:78:3f:72:70:f0:8c:22:2a:52:0f:
         98:a8:86:8d:be:cb:3e:dc:dc:7a:08:a2:66:b8:69:09:2b:35:
         ec:b8:3d:3d:b1:bf:be:45:dc:88:45:ec:38:90:33:e2:6c:15:
         d7:ed:86:d3:35:f9:bb:8c:df:90:09:71:b7:cb:f9:20:ce:0a:
         47:75:69:10:a0:47:2d:ea:48:37:d0:67:dd:16:00:d2:d5:bc:
         80:66:b2:6b:2f:29:76:04:11:79:2c:79:29:b2:eb:af:69:02:
         96:6b:6f:85:d6:31:48:e5:6a:ab:3b:d7:fc:b7:26:54:24:2d:
         93:1d:3a:1c:9b:82:2a:c2:4e:ae:a3:bc:fa:13:6d:04:a9:b9:
         59:57:82:c5:24:84:da:dd:4b:b0:2e:d2:25:29:66:c8:8e:78:
         78:af:f4:83:a0:7c:df:00:02:50:03:2a:48:7e:6d:69:bf:ec:
         0d:be:f1:cd
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJ1TOMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ5
M2E0NDRkMDYxZmM0ZDkxNGRjNTZkODAzMWE5YzQ1NzRjYTU3YWQwHhcNMjMwNDE2
MTMwMDI4WhcNMjUwNDE3MTMwMDI4WjAzMTEwLwYDVQQDEyhhZjE1MzNiY2YxMDcz
NmNmZTNjMDBlMDg3NzRlZmQwMzY5MDc3ODdmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqvhkSyW/kHh3hiBbY+pqetC8p1Fe6aSNOrABDQN2WMjyQcg7
pEFKERKSqs3IycaHqkc5UlZb5Ix9yYIB5TEWGdDVGFXMxJ8RroCkfJfHXWEjKfbe
/RbWbxYA8ta+Cj1gj6id3BT13dAQAJHuHVftPO6pWzp6GyjsAASp26wunYS1b7ys
9USGHU4Uomsji2Ebzd2Z2EjZwlmNmb4KBbQxlIWs1pB+H4nNWmvWHB5oqRFu7sMO
asWaCsvedodAPci+eUiVDE5pMytx8SnhCyT8YCQjlCzepfoakdVIR+KPJDbEBmya
DVRdn1lub7Ye0oX+3FvQCfl7Bj30dL/VhjRYDwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFAvKYlUoAvY8239VPA0u3ZMT+PFAMB8GA1UdIwQYMBaAFMmcjKrH/3v04XrK
8I/d1uVu/M2tMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDkzYTQ0
NGQwNjFmYzRkOTE0ZGM1NmQ4MDMxYTljNDU3NGNhNTdhZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTMyYjIwOTctZWEwOC00NzgwLWI5NGYtMDNjMzM4
YjVhYTU3L2FmMTUzM2JjZjEwNzM2Y2ZlM2MwMGUwODc3NGVmZDAzNjkwNzc4N2Yu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MzJiMjA5Ny1lYTA4LTQ3ODAtYjk0Zi0wM2Mz
MzhiNWFhNTcvZDkzYTQ0NGQwNjFmYzRkOTE0ZGM1NmQ4MDMxYTljNDU3NGNhNTdh
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL7hoDANBgkqhkiG9w0BAQsFAAOCAQEAYvQD85mjZI4fgQFp
1cyT47V4vea341Iqfkdw6PPPoTSnIYaZS4jOvI2wkzHjzpyLZFR3re2EamGQz3qd
nj9S1LEMHT6Iw9vbR6ppWQwbGvF4P3Jw8IwiKlIPmKiGjb7LPtzcegiiZrhpCSs1
7Lg9PbG/vkXciEXsOJAz4mwV1+2G0zX5u4zfkAlxt8v5IM4KR3VpEKBHLepIN9Bn
3RYA0tW8gGayay8pdgQReSx5KbLrr2kClmtvhdYxSOVqqzvX/LcmVCQtkx06HJuC
KsJOrqO8+hNtBKm5WVeCxSSE2t1LsC7SJSlmyI54eK/0g6B83wACUAMqSH5tab/s
Db7xzQ==
-----END CERTIFICATE-----
Generated at Thu Dec 7 13:10:27 2023 by rpki-client on console-fra.rpki-client.org