Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/b69da19814bc33bb02c6663a2a14e07a2e3b874d.roa
File:                     b69da19814bc33bb02c6663a2a14e07a2e3b874d.roa (raw, json)
Hash identifier:          FCe3G4MD2XytcZPX27CjSrCx2Y16w7c9TR/IIt3ehHo=
Subject key identifier:   0F:70:AA:19:36:F5:DB:E4:A7:D6:BC:EF:7D:6B:67:54:00:2A:35:C5
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       273795
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/b69da19814bc33bb02c6663a2a14e07a2e3b874d.roa
Signing time:             Mon 17 Apr 2023 13:00:40 +0000
ROA not before:           Sun 16 Apr 2023 13:00:28 +0000
ROA not after:            Thu 17 Apr 2025 13:00:28 +0000
asID:                     265686
IP address blocks:        181.105.233.0/24 maxlen: 24
                          181.94.252.0/22 maxlen: 24
                          181.105.234.0/23 maxlen: 24
                          190.228.177.0/24 maxlen: 24
                          200.43.0.0/22 maxlen: 22
                          181.105.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2570133 (0x273795)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Apr 16 13:00:28 2023 GMT
            Not After : Apr 17 13:00:28 2025 GMT
        Subject: CN=b69da19814bc33bb02c6663a2a14e07a2e3b874d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b6:e1:d6:5a:15:8c:f1:df:1b:20:cc:3c:0a:
                    77:13:1c:98:46:b7:ea:53:2f:32:44:46:bd:81:41:
                    2f:20:e4:c2:25:24:ad:18:d9:8c:8a:d1:c6:06:e2:
                    3e:21:e0:c5:66:51:92:16:93:28:b5:4c:40:db:8a:
                    57:cd:71:21:5a:cb:14:42:8e:c6:3c:50:32:fe:2a:
                    57:71:a0:7f:16:4a:08:db:d2:b8:31:d5:5e:54:5d:
                    a6:60:7f:0c:47:d9:88:d3:ba:54:52:1f:11:82:46:
                    ea:cb:b4:6f:ca:e9:b7:fb:d1:eb:dd:28:d5:52:95:
                    3b:53:e2:3b:ae:5b:db:67:f5:93:7e:fb:78:23:2d:
                    61:75:3c:ba:b1:39:1a:74:74:52:8d:c5:d8:8b:17:
                    b9:11:2d:b6:db:ab:c1:68:4f:8d:39:35:50:a1:c0:
                    f3:12:f2:51:76:a2:5b:ad:53:bd:39:fd:5a:21:20:
                    9e:e8:8e:ce:1d:37:21:95:09:36:cd:42:fc:3e:da:
                    c3:a5:28:56:78:fa:9a:ef:8b:24:ca:04:7f:5b:59:
                    a4:60:4b:be:49:66:38:18:00:12:44:3b:78:4e:9f:
                    96:d1:95:f7:7a:66:71:6d:29:75:e2:fe:82:f0:db:
                    7c:d0:f9:93:96:1d:46:3c:4a:c5:db:54:f2:5a:7c:
                    ca:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:70:AA:19:36:F5:DB:E4:A7:D6:BC:EF:7D:6B:67:54:00:2A:35:C5
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/b69da19814bc33bb02c6663a2a14e07a2e3b874d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.94.252.0/22
                  181.105.221.0/24
                  181.105.233.0-181.105.235.255
                  190.228.177.0/24
                  200.43.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:20:d7:d9:27:a4:9c:8a:db:4c:93:e5:69:55:9b:63:54:6c:
         10:e7:aa:68:b4:2c:bb:92:4e:da:db:b8:23:23:2e:94:39:5d:
         c6:d5:cc:c2:f6:0d:fe:fc:72:ee:3f:70:39:83:ef:10:ad:8c:
         af:ae:a3:8b:4b:a0:2a:18:b6:16:2c:36:40:aa:fa:60:9e:19:
         17:9f:a7:af:7d:9a:c4:b1:bc:cc:a5:c2:a7:23:f8:35:c0:6b:
         e2:e2:ad:0c:46:af:a5:c6:c1:3d:af:1a:83:82:55:b1:17:2c:
         9c:d0:5d:b0:03:07:5c:9e:a2:6a:fe:04:d0:a0:fb:2b:c3:c9:
         28:ca:cf:ee:84:fa:be:89:08:0c:19:97:0f:6b:00:65:51:91:
         ce:86:09:c5:98:ce:f8:6c:8a:aa:46:f7:c2:d4:0d:6d:35:6f:
         57:e1:ee:93:5f:87:f8:6e:eb:8a:cb:2a:48:de:bd:3e:80:7f:
         22:25:d8:a2:a7:ac:bf:0d:42:a3:b2:d4:95:1b:00:08:34:83:
         d4:6a:a2:b8:d5:30:23:8d:32:9f:e8:f0:a6:71:cf:d8:37:54:
         ae:e8:d3:49:fa:af:8c:0d:85:52:d4:b6:48:4e:aa:ff:d8:17:
         0b:55:8b:6a:b7:6b:10:e0:eb:2b:ea:11:9d:7b:dd:8d:6f:f0:
         23:3b:5c:cb
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIDJzeVMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ5
M2E0NDRkMDYxZmM0ZDkxNGRjNTZkODAzMWE5YzQ1NzRjYTU3YWQwHhcNMjMwNDE2
MTMwMDI4WhcNMjUwNDE3MTMwMDI4WjAzMTEwLwYDVQQDEyhiNjlkYTE5ODE0YmMz
M2JiMDJjNjY2M2EyYTE0ZTA3YTJlM2I4NzRkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoLbh1loVjPHfGyDMPAp3ExyYRrfqUy8yREa9gUEvIOTCJSSt
GNmMitHGBuI+IeDFZlGSFpMotUxA24pXzXEhWssUQo7GPFAy/ipXcaB/FkoI29K4
MdVeVF2mYH8MR9mI07pUUh8Rgkbqy7Rvyum3+9Hr3SjVUpU7U+I7rlvbZ/WTfvt4
Iy1hdTy6sTkadHRSjcXYixe5ES2226vBaE+NOTVQocDzEvJRdqJbrVO9Of1aISCe
6I7OHTchlQk2zUL8PtrDpShWePqa74skygR/W1mkYEu+SWY4GAASRDt4Tp+W0ZX3
emZxbSl14v6C8Nt80PmTlh1GPErF21TyWnzKDwIDAQABo4ICezCCAncwHQYDVR0O
BBYEFA9wqhk29dvkp9a8731rZ1QAKjXFMB8GA1UdIwQYMBaAFMmcjKrH/3v04XrK
8I/d1uVu/M2tMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDkzYTQ0
NGQwNjFmYzRkOTE0ZGM1NmQ4MDMxYTljNDU3NGNhNTdhZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTMyYjIwOTctZWEwOC00NzgwLWI5NGYtMDNjMzM4
YjVhYTU3L2I2OWRhMTk4MTRiYzMzYmIwMmM2NjYzYTJhMTRlMDdhMmUzYjg3NGQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MzJiMjA5Ny1lYTA4LTQ3ODAtYjk0Zi0wM2Mz
MzhiNWFhNTcvZDkzYTQ0NGQwNjFmYzRkOTE0ZGM1NmQ4MDMxYTljNDU3NGNhNTdh
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA/BggrBgEFBQcBBwEB/wQw
MC4wLAQCAAEwJgMEArVe/AMEALVp3TAMAwQAtWnpAwQCtWnoAwQAvuSxAwQCyCsA
MA0GCSqGSIb3DQEBCwUAA4IBAQA4INfZJ6ScittMk+VpVZtjVGwQ56potCy7kk7a
27gjIy6UOV3G1czC9g3+/HLuP3A5g+8QrYyvrqOLS6AqGLYWLDZAqvpgnhkXn6ev
fZrEsbzMpcKnI/g1wGvi4q0MRq+lxsE9rxqDglWxFyyc0F2wAwdcnqJq/gTQoPsr
w8koys/uhPq+iQgMGZcPawBlUZHOhgnFmM74bIqqRvfC1A1tNW9X4e6TX4f4buuK
yypI3r0+gH8iJdiip6y/DUKjstSVGwAINIPUaqK41TAjjTKf6PCmcc/YN1Su6NNJ
+q+MDYVS1LZITqr/2BcLVYtqt2sQ4Osr6hGde92Nb/AjO1zL
-----END CERTIFICATE-----
Generated at Thu Dec 7 13:04:53 2023 by rpki-client on console-ams.rpki-client.org