Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/9545f4c9bd56c0173f45c02af1da6f3b437b6bc1.roa
File:                     9545f4c9bd56c0173f45c02af1da6f3b437b6bc1.roa (raw, json)
Hash identifier:          FL9/t4baF4kBkBKy5/BUW83AwUV42rrpu4oQCZNkB68=
Subject key identifier:   BA:39:B3:16:16:0F:21:7C:2D:9E:FD:9D:19:D0:EE:40:7C:18:17:F0
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1A255E
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/9545f4c9bd56c0173f45c02af1da6f3b437b6bc1.roa
Signing time:             Thu 22 Sep 2022 20:24:00 +0000
ROA not before:           Thu 22 Sep 2022 20:23:34 +0000
ROA not after:            Sun 22 Sep 2024 20:23:34 +0000
asID:                     3790
IP address blocks:        190.241.88.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1713502 (0x1a255e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 22 20:23:34 2022 GMT
            Not After : Sep 22 20:23:34 2024 GMT
        Subject: CN=9545f4c9bd56c0173f45c02af1da6f3b437b6bc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ed:5e:0f:fd:f3:52:33:b7:d8:73:fb:6e:95:
                    fd:b2:23:fd:b6:ce:5b:7c:3e:6b:73:a9:09:10:d5:
                    8f:33:44:88:64:c2:df:23:55:49:0b:bf:8b:41:50:
                    0b:31:41:6e:a9:b5:6a:52:f0:b5:66:3c:0d:7e:94:
                    ff:10:ad:3c:f7:2a:d8:e6:b9:e5:08:f8:47:b5:3c:
                    51:be:f7:73:95:8e:c0:2f:18:04:b0:d6:12:55:9d:
                    8a:cc:93:a0:1f:36:99:63:09:fb:7f:a5:33:5f:56:
                    55:8c:a7:46:43:cd:e4:77:18:33:e9:b5:a1:1d:aa:
                    58:ee:5e:da:54:12:f7:38:b8:39:bc:3a:43:95:c3:
                    6a:33:08:22:46:38:23:c6:6a:db:a2:6c:37:4f:0e:
                    3a:b5:38:3d:77:23:ef:34:ed:e8:20:9f:98:4b:3b:
                    be:40:ee:ba:86:c4:d0:df:38:ad:9b:c1:64:e7:66:
                    33:b0:d8:56:1c:7b:8b:7d:b8:24:15:7b:f0:29:92:
                    80:a4:a8:3a:81:c0:bc:20:76:88:d3:d2:b7:b8:bb:
                    ae:80:55:05:30:a3:83:dd:5d:98:33:40:ac:9d:69:
                    a8:79:88:57:18:b7:a9:e3:da:8b:fa:3a:2d:bf:1e:
                    c3:55:b5:24:da:d2:fe:01:6b:b0:ce:f4:1e:91:29:
                    76:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:39:B3:16:16:0F:21:7C:2D:9E:FD:9D:19:D0:EE:40:7C:18:17:F0
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/9545f4c9bd56c0173f45c02af1da6f3b437b6bc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.241.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         78:65:5c:71:4f:ca:bb:a1:5d:c3:60:cf:c0:10:36:70:89:10:
         fc:24:00:65:52:36:bb:13:58:fa:eb:43:90:f3:64:1f:30:45:
         86:0e:7f:d5:95:97:43:e1:c5:db:a9:8c:f5:a2:69:bf:c0:fe:
         79:f2:ea:c3:6b:e8:b3:33:11:62:42:cd:f3:2c:0b:85:28:56:
         11:ec:0e:c5:0a:fb:1f:36:79:9a:d2:df:cb:25:01:22:cf:3c:
         a3:89:8a:9a:45:54:4a:86:3e:cb:df:de:0f:2f:ee:95:bd:47:
         b1:90:4e:af:aa:f5:93:4c:2c:ce:cf:92:1c:66:85:2d:68:01:
         20:38:c4:c4:fc:70:9b:bf:49:0e:d7:60:95:d5:4b:ea:0f:4f:
         37:b7:b7:33:83:1f:48:10:95:45:e4:b3:6e:fe:6d:e6:fd:b8:
         00:5b:4c:4d:e5:22:e2:c7:bb:69:6b:81:c1:ae:01:e5:db:2a:
         c9:1d:ec:94:07:4d:eb:8e:7c:88:33:4b:ac:c9:6e:b9:14:dd:
         0d:c0:40:8a:c8:c8:3f:49:b8:38:63:4f:ff:68:f3:24:fb:07:
         38:4f:c0:1c:7a:14:fe:7e:47:c2:32:17:76:59:1d:4d:a1:c7:
         cd:95:b0:ee:cf:75:bc:4a:9a:65:a7:c8:97:f0:83:87:83:0b:
         a0:8a:68:ca
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGiVeMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZj
M2YzY2JmOTcxYjMxZDRhMGZiNDhhMDYzZWQ4NmYwYjU5NGFjM2UwHhcNMjIwOTIy
MjAyMzM0WhcNMjQwOTIyMjAyMzM0WjAzMTEwLwYDVQQDEyg5NTQ1ZjRjOWJkNTZj
MDE3M2Y0NWMwMmFmMWRhNmYzYjQzN2I2YmMxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAm+1eD/3zUjO32HP7bpX9siP9ts5bfD5rc6kJENWPM0SIZMLf
I1VJC7+LQVALMUFuqbVqUvC1ZjwNfpT/EK089yrY5rnlCPhHtTxRvvdzlY7ALxgE
sNYSVZ2KzJOgHzaZYwn7f6UzX1ZVjKdGQ83kdxgz6bWhHapY7l7aVBL3OLg5vDpD
lcNqMwgiRjgjxmrbomw3Tw46tTg9dyPvNO3oIJ+YSzu+QO66hsTQ3zitm8Fk52Yz
sNhWHHuLfbgkFXvwKZKApKg6gcC8IHaI09K3uLuugFUFMKOD3V2YM0CsnWmoeYhX
GLep49qL+jotvx7DVbUk2tL+AWuwzvQekSl24wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLo5sxYWDyF8LZ79nRnQ7kB8GBfwMB8GA1UdIwQYMBaAFNgLQZU9gBToGKPM
I8FMT5TRqMEbMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmMzZjNj
YmY5NzFiMzFkNGEwZmI0OGEwNjNlZDg2ZjBiNTk0YWMzZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmE3ODYyZTgtZDJkYi00OGVhLWI4MDktZDRiOTcw
ZDFkODkyLzk1NDVmNGM5YmQ1NmMwMTczZjQ1YzAyYWYxZGE2ZjNiNDM3YjZiYzEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82YTc4NjJlOC1kMmRiLTQ4ZWEtYjgwOS1kNGI5
NzBkMWQ4OTIvNmMzZjNjYmY5NzFiMzFkNGEwZmI0OGEwNjNlZDg2ZjBiNTk0YWMz
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEA77xWDANBgkqhkiG9w0BAQsFAAOCAQEAeGVccU/Ku6Fdw2DP
wBA2cIkQ/CQAZVI2uxNY+utDkPNkHzBFhg5/1ZWXQ+HF26mM9aJpv8D+efLqw2vo
szMRYkLN8ywLhShWEewOxQr7HzZ5mtLfyyUBIs88o4mKmkVUSoY+y9/eDy/ulb1H
sZBOr6r1k0wszs+SHGaFLWgBIDjExPxwm79JDtdgldVL6g9PN7e3M4MfSBCVReSz
bv5t5v24AFtMTeUi4se7aWuBwa4B5dsqyR3slAdN6458iDNLrMluuRTdDcBAisjI
P0m4OGNP/2jzJPsHOE/AHHoU/n5HwjIXdlkdTaHHzZWw7s91vEqaZafIl/CDh4ML
oIpoyg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-ams.rpki-client.org