Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/9459473bda09eea71a7d90b8c67ca23ec3a4c4f4.roa
File:                     9459473bda09eea71a7d90b8c67ca23ec3a4c4f4.roa (raw, json)
Hash identifier:          mWVF4Tx+/Phu15UFDXxmG4Bj4f8tc6VGe1oMHSoEqjA=
Subject key identifier:   E9:59:FC:35:F7:6D:30:0B:B6:DF:FC:CD:FC:4D:55:57:CD:55:D0:07
Certificate issuer:       /CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Certificate serial:       206B44
Authority key identifier: A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/9459473bda09eea71a7d90b8c67ca23ec3a4c4f4.roa
Signing time:             Mon 10 Apr 2023 17:19:19 +0000
ROA not before:           Sun 09 Apr 2023 17:19:18 +0000
ROA not after:            Thu 10 Apr 2025 17:19:18 +0000
asID:                     262216
IP address blocks:        190.210.106.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2124612 (0x206b44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
        Validity
            Not Before: Apr  9 17:19:18 2023 GMT
            Not After : Apr 10 17:19:18 2025 GMT
        Subject: CN=9459473bda09eea71a7d90b8c67ca23ec3a4c4f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:13:d2:bd:4a:b6:75:26:28:56:50:05:d2:9a:
                    29:c6:a5:25:f6:3c:b0:a8:39:f1:34:65:c1:49:01:
                    2a:ed:da:5c:4c:6e:4f:59:12:db:03:6b:03:49:64:
                    08:f1:af:c0:02:4b:72:3a:44:60:80:e7:1b:60:f3:
                    f2:e2:7f:b8:8b:52:b1:ff:17:93:cf:fd:9f:e4:53:
                    5f:26:f5:91:d0:07:fb:14:bd:5e:cf:ad:20:6f:da:
                    9a:0e:91:3a:1b:90:ed:ca:53:da:ab:fc:6c:fb:f9:
                    4a:22:ec:d4:69:a0:54:55:21:d1:ce:c7:1e:bf:00:
                    79:6a:80:87:a2:06:b7:59:5b:6b:c0:8b:59:0a:ae:
                    3f:77:18:5e:e7:a0:30:08:5a:3e:e3:b2:01:95:64:
                    6a:1b:d8:b8:40:9f:93:d3:a8:9e:a8:9b:95:55:76:
                    c9:5b:60:95:ed:5e:34:91:01:b7:cd:ba:64:a3:cf:
                    8e:42:08:f8:eb:8f:0a:b3:f9:cb:79:8b:ea:f1:5f:
                    81:ba:12:5c:f4:76:9e:4f:2d:21:5a:de:aa:74:96:
                    e1:5e:24:41:f0:24:c8:4c:f7:9a:3a:b1:1a:f7:f5:
                    82:a0:47:51:95:dd:97:b7:88:2e:ed:72:ea:03:6b:
                    2a:e6:a3:56:03:ec:2a:cc:8e:43:4c:44:c9:5a:1c:
                    14:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:59:FC:35:F7:6D:30:0B:B6:DF:FC:CD:FC:4D:55:57:CD:55:D0:07
            X509v3 Authority Key Identifier:
                keyid:A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/9459473bda09eea71a7d90b8c67ca23ec3a4c4f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/29bfc63c4d2e222df3a099e222567deb9e88bb27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.210.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:b0:11:c2:39:9b:24:4f:65:9b:1f:41:c3:d8:c0:9f:db:ac:
         37:b9:5b:58:cb:1a:8e:8e:cb:e4:e6:e0:83:4e:a5:9c:97:fe:
         28:6a:66:06:65:cd:92:e7:c5:0f:11:93:c7:c9:07:d0:0c:80:
         c1:6f:df:f6:da:64:83:c5:0e:39:9b:7b:3d:85:71:bf:59:9f:
         d5:11:43:29:eb:04:2b:8c:f4:86:47:6f:99:c4:43:21:ed:ca:
         bf:65:47:e0:88:65:f6:3b:54:2c:7e:9b:61:52:01:1d:4f:7c:
         89:7d:6c:3c:de:98:b4:19:9e:99:fd:9a:31:c4:a2:07:f8:88:
         a9:0a:d8:11:54:b0:25:bc:7a:a4:c5:ea:22:28:6b:e7:db:55:
         3a:86:e9:62:9d:df:00:ec:ad:25:ad:27:a8:ab:40:5f:5d:e2:
         26:9d:f6:c3:96:cb:5e:85:42:ab:35:0b:1d:4c:43:9f:5f:a9:
         92:dc:fd:3f:69:0f:4b:70:cf:0b:a5:6d:20:9c:fe:c0:71:46:
         11:78:12:f7:01:15:32:ce:51:78:3d:b1:ad:c3:5b:a1:b6:63:
         12:c6:69:d0:81:2d:4a:59:51:04:98:07:cc:e5:c7:be:29:3c:
         c0:a3:78:ef:b2:d5:eb:ed:46:2d:d2:bb:93:e6:03:ce:71:22:
         0b:22:c4:f1
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIGtEMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI5
YmZjNjNjNGQyZTIyMmRmM2EwOTllMjIyNTY3ZGViOWU4OGJiMjcwHhcNMjMwNDA5
MTcxOTE4WhcNMjUwNDEwMTcxOTE4WjAzMTEwLwYDVQQDEyg5NDU5NDczYmRhMDll
ZWE3MWE3ZDkwYjhjNjdjYTIzZWMzYTRjNGY0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwhPSvUq2dSYoVlAF0popxqUl9jywqDnxNGXBSQEq7dpcTG5P
WRLbA2sDSWQI8a/AAktyOkRggOcbYPPy4n+4i1Kx/xeTz/2f5FNfJvWR0Af7FL1e
z60gb9qaDpE6G5DtylPaq/xs+/lKIuzUaaBUVSHRzscevwB5aoCHoga3WVtrwItZ
Cq4/dxhe56AwCFo+47IBlWRqG9i4QJ+T06ieqJuVVXbJW2CV7V40kQG3zbpko8+O
Qgj4648Ks/nLeYvq8V+BuhJc9HaeTy0hWt6qdJbhXiRB8CTITPeaOrEa9/WCoEdR
ld2Xt4gu7XLqA2sq5qNWA+wqzI5DTETJWhwUGwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOlZ/DX3bTALtt/8zfxNVVfNVdAHMB8GA1UdIwQYMBaAFKbB/2GNliK3iQ+g
mDamXNI878RiMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjliZmM2
M2M0ZDJlMjIyZGYzYTA5OWUyMjI1NjdkZWI5ZTg4YmIyNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjI2ZjRmMjgtODgwYy00YmI1LTk0NDItOWVlZjkz
MjVkN2ViLzk0NTk0NzNiZGEwOWVlYTcxYTdkOTBiOGM2N2NhMjNlYzNhNGM0ZjQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MjZmNGYyOC04ODBjLTRiYjUtOTQ0Mi05ZWVm
OTMyNWQ3ZWIvMjliZmM2M2M0ZDJlMjIyZGYzYTA5OWUyMjI1NjdkZWI5ZTg4YmIy
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL7SajANBgkqhkiG9w0BAQsFAAOCAQEAGrARwjmbJE9lmx9B
w9jAn9usN7lbWMsajo7L5Obgg06lnJf+KGpmBmXNkufFDxGTx8kH0AyAwW/f9tpk
g8UOOZt7PYVxv1mf1RFDKesEK4z0hkdvmcRDIe3Kv2VH4Ihl9jtULH6bYVIBHU98
iX1sPN6YtBmemf2aMcSiB/iIqQrYEVSwJbx6pMXqIihr59tVOobpYp3fAOytJa0n
qKtAX13iJp32w5bLXoVCqzULHUxDn1+pktz9P2kPS3DPC6VtIJz+wHFGEXgS9wEV
Ms5ReD2xrcNbobZjEsZp0IEtSllRBJgHzOXHvik8wKN477LV6+1GLdK7k+YDznEi
CyLE8Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-ams.rpki-client.org