Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/a6fcfab33f4ab89bb2c90437392078a38e2daea5.roa
File:                     a6fcfab33f4ab89bb2c90437392078a38e2daea5.roa (raw, json)
Hash identifier:          CtF1RppTTacKTmzPCll2O7zr2NjI92NDqJhHTZ/kXd0=
Subject key identifier:   15:F4:45:49:D6:E6:86:B4:47:F9:2C:D3:04:F1:9F:E8:52:A4:15:D6
Certificate issuer:       /CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
Certificate serial:       239ADB
Authority key identifier: CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/a6fcfab33f4ab89bb2c90437392078a38e2daea5.roa
Signing time:             Thu 24 Aug 2023 21:20:30 +0000
ROA not before:           Wed 23 Aug 2023 21:20:30 +0000
ROA not after:            Sun 24 Aug 2025 21:20:30 +0000
asID:                     262191
IP address blocks:        190.242.0.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2333403 (0x239adb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
        Validity
            Not Before: Aug 23 21:20:30 2023 GMT
            Not After : Aug 24 21:20:30 2025 GMT
        Subject: CN=a6fcfab33f4ab89bb2c90437392078a38e2daea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:86:42:ae:f8:5c:f4:7f:99:a7:4b:55:26:65:
                    72:b6:49:1c:84:1b:54:9b:db:93:ec:42:dd:c0:63:
                    b9:00:fa:a6:99:46:a8:bb:e7:94:19:e5:ed:43:82:
                    f8:eb:32:6c:b1:b9:d5:26:ac:f5:81:00:e6:e4:6c:
                    af:0c:a1:8c:45:6e:f0:a8:c6:17:2b:cd:41:01:41:
                    0a:3d:1f:73:26:9c:0e:f6:8b:30:5a:9b:cf:a2:8e:
                    fb:76:4c:29:88:39:6a:1f:5d:e7:fd:ae:31:c1:03:
                    4f:d1:e2:ac:08:71:55:6c:c3:2d:3f:22:58:4d:5e:
                    ce:8c:38:9d:37:f0:c0:ae:f6:e9:15:7f:d1:77:68:
                    ae:22:1b:3e:aa:2a:e5:4a:4a:53:2e:32:47:0c:ab:
                    5d:77:66:6b:26:15:de:bc:ff:d9:10:59:4b:e3:d6:
                    0e:c7:46:84:54:93:ae:e2:d4:a1:65:76:3b:a3:cc:
                    f7:57:50:8a:98:22:e0:5b:5f:e4:ad:fb:59:2a:eb:
                    be:55:83:5a:8d:8f:e3:a0:25:ae:e3:49:b4:20:4e:
                    cf:e5:e5:6f:f3:6e:0b:cd:30:03:da:bb:5c:37:fc:
                    81:92:8e:90:34:bd:2b:5c:df:4d:57:d2:5b:83:99:
                    8f:f2:80:11:85:99:c6:e8:59:7a:f7:e7:bb:fa:bf:
                    13:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F4:45:49:D6:E6:86:B4:47:F9:2C:D3:04:F1:9F:E8:52:A4:15:D6
            X509v3 Authority Key Identifier:
                keyid:CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/a6fcfab33f4ab89bb2c90437392078a38e2daea5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/61dee5b94933b1c10377fd86ec970d3b4117ae3d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:c6:57:54:d3:d4:56:4d:24:8b:24:5b:00:40:e8:bd:6a:5c:
         0f:ff:47:58:1f:b5:f2:c5:b0:0e:9d:41:f7:c1:6c:00:13:f1:
         a3:28:b7:76:85:b6:22:e0:e3:b4:9c:7c:30:1b:08:b0:cf:59:
         26:02:c3:74:db:6c:44:34:1e:2e:33:f4:f3:a7:93:50:49:81:
         c1:b8:ad:1b:50:4a:87:ff:c3:25:50:4d:ac:f3:dc:ca:81:cb:
         9f:21:97:0f:df:c1:d9:53:39:d5:c4:c9:cc:a2:78:11:7a:20:
         3c:ac:0c:a4:58:60:f5:52:95:d6:f6:39:e8:a7:56:ef:fe:80:
         35:84:96:38:50:23:3b:46:9c:c4:8d:e6:00:5e:a4:f3:0d:5e:
         a3:da:4e:1c:d4:33:da:2a:57:51:1a:71:91:b4:df:f1:95:bf:
         5a:40:e1:d0:f6:f0:ef:33:71:2f:77:e8:0c:a5:f3:16:be:8d:
         52:1d:9e:e8:42:1e:0c:83:f2:4a:ef:83:24:1c:82:bb:af:13:
         2e:4e:80:19:78:1d:c9:7e:7d:02:99:70:f5:a4:bc:87:c4:ab:
         b2:a2:e2:08:0a:cb:aa:77:a8:2f:19:49:56:76:32:1d:5a:e5:
         fb:ee:8f:76:27:cd:a3:d5:1f:c5:14:13:17:c8:84:e7:07:10:
         24:1b:7e:b9
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDI5rbMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDYx
ZGVlNWI5NDkzM2IxYzEwMzc3ZmQ4NmVjOTcwZDNiNDExN2FlM2QwHhcNMjMwODIz
MjEyMDMwWhcNMjUwODI0MjEyMDMwWjAzMTEwLwYDVQQDEyhhNmZjZmFiMzNmNGFi
ODliYjJjOTA0MzczOTIwNzhhMzhlMmRhZWE1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnIZCrvhc9H+Zp0tVJmVytkkchBtUm9uT7ELdwGO5APqmmUao
u+eUGeXtQ4L46zJssbnVJqz1gQDm5GyvDKGMRW7wqMYXK81BAUEKPR9zJpwO9osw
WpvPoo77dkwpiDlqH13n/a4xwQNP0eKsCHFVbMMtPyJYTV7OjDidN/DArvbpFX/R
d2iuIhs+qirlSkpTLjJHDKtdd2ZrJhXevP/ZEFlL49YOx0aEVJOu4tShZXY7o8z3
V1CKmCLgW1/krftZKuu+VYNajY/joCWu40m0IE7P5eVv824LzTAD2rtcN/yBko6Q
NL0rXN9NV9Jbg5mP8oARhZnG6Fl69+e7+r8TgQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBX0RUnW5oa0R/ks0wTxn+hSpBXWMB8GA1UdIwQYMBaAFMzp856PZQjUy+Hu
JaXLHHMFbWyTMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjFkZWU1
Yjk0OTMzYjFjMTAzNzdmZDg2ZWM5NzBkM2I0MTE3YWUzZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjdlZDkwMDgtYWUzNC00NGJlLTg4MmYtNTkzODEy
MDFiMWUxL2E2ZmNmYWIzM2Y0YWI4OWJiMmM5MDQzNzM5MjA3OGEzOGUyZGFlYTUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82N2VkOTAwOC1hZTM0LTQ0YmUtODgyZi01OTM4
MTIwMWIxZTEvNjFkZWU1Yjk0OTMzYjFjMTAzNzdmZDg2ZWM5NzBkM2I0MTE3YWUz
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL7yADANBgkqhkiG9w0BAQsFAAOCAQEARcZXVNPUVk0kiyRb
AEDovWpcD/9HWB+18sWwDp1B98FsABPxoyi3doW2IuDjtJx8MBsIsM9ZJgLDdNts
RDQeLjP086eTUEmBwbitG1BKh//DJVBNrPPcyoHLnyGXD9/B2VM51cTJzKJ4EXog
PKwMpFhg9VKV1vY56KdW7/6ANYSWOFAjO0acxI3mAF6k8w1eo9pOHNQz2ipXURpx
kbTf8ZW/WkDh0Pbw7zNxL3foDKXzFr6NUh2e6EIeDIPySu+DJByCu68TLk6AGXgd
yX59Aplw9aS8h8SrsqLiCArLqneoLxlJVnYyHVrl++6PdifNo9UfxRQTF8iE5wcQ
JBt+uQ==
-----END CERTIFICATE-----
Generated at Mon Feb 12 18:07:04 2024 by rpki-client on console-fra.rpki-client.org