Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/02248b738a95ea6c5fda1014acc457811b3db5b2.roa
File:                     02248b738a95ea6c5fda1014acc457811b3db5b2.roa (raw, json)
Hash identifier:          BNmUNCSPfCXVQgxVV7saE1LuhRL0W68Tlru9De94Vs8=
Subject key identifier:   58:1E:A4:54:69:C1:7E:3C:FC:CD:07:57:EA:3C:11:8E:74:A8:92:06
Certificate issuer:       /CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
Certificate serial:       22E593
Authority key identifier: 7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/02248b738a95ea6c5fda1014acc457811b3db5b2.roa
Signing time:             Mon 07 Aug 2023 15:21:59 +0000
ROA not before:           Sun 06 Aug 2023 15:21:59 +0000
ROA not after:            Thu 07 Aug 2025 15:21:59 +0000
asID:                     147186
IP address blocks:        190.93.77.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2286995 (0x22e593)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
        Validity
            Not Before: Aug  6 15:21:59 2023 GMT
            Not After : Aug  7 15:21:59 2025 GMT
        Subject: CN=02248b738a95ea6c5fda1014acc457811b3db5b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3a:74:e8:56:a8:1c:27:32:dd:dc:31:0d:05:
                    a8:17:fb:c7:13:b3:6b:ba:2e:0e:20:31:0a:61:0b:
                    79:3f:62:fa:05:1f:04:40:a0:e5:b3:29:ad:e2:08:
                    94:e0:96:ce:c1:50:3e:8e:d9:ae:68:29:f8:b5:6e:
                    0f:57:b3:d9:8d:42:0a:10:2c:df:84:db:1c:67:93:
                    f1:2a:1f:c9:ef:30:4a:a1:c5:d7:ec:d5:45:bf:5f:
                    2e:f1:d7:9a:5b:d3:a0:94:26:d9:fb:1d:f9:95:3e:
                    42:d0:34:7d:2f:99:1f:aa:fc:15:3d:d5:5a:1c:ba:
                    77:79:fb:93:81:4e:7f:6e:f5:ec:72:cb:47:5d:b6:
                    b3:25:1c:e1:f1:02:4a:bc:6e:2f:fa:b1:39:84:29:
                    fd:9f:3a:fa:48:16:1c:1d:96:11:48:ed:0c:e4:f4:
                    80:bc:a4:13:9d:01:23:3a:2b:f7:45:8f:a9:2b:c0:
                    75:7e:6e:bd:97:23:ab:cb:23:19:4e:62:49:d3:66:
                    79:cd:42:7b:32:85:c8:d9:62:fa:c7:0f:fe:63:3d:
                    8c:5b:f9:03:80:14:be:e2:68:8b:e6:73:02:1d:ec:
                    38:53:d4:91:dc:86:31:3f:00:b7:b0:87:30:60:ff:
                    60:58:be:ec:a9:b3:69:2c:11:46:4e:2b:e5:3a:3c:
                    b7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:1E:A4:54:69:C1:7E:3C:FC:CD:07:57:EA:3C:11:8E:74:A8:92:06
            X509v3 Authority Key Identifier:
                keyid:7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/02248b738a95ea6c5fda1014acc457811b3db5b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:ed:dd:3d:4a:41:94:42:9c:a8:d9:15:bc:df:a6:e1:4e:10:
         f7:12:7d:0c:94:25:7d:9c:d0:39:63:5b:c9:2b:54:38:ed:78:
         c1:c8:4c:ff:b1:bb:50:91:42:b4:0d:85:8f:d7:e1:ca:c1:3a:
         7e:80:33:b2:6c:34:f4:bb:24:c8:3a:dc:e3:b8:6f:a8:b1:fb:
         26:ff:39:1b:6c:c9:99:f9:17:f4:c2:11:e7:bf:4e:ae:78:38:
         00:49:dc:24:56:dd:de:97:f7:58:b4:ba:c9:bb:f4:53:7e:ec:
         11:1d:d1:87:a0:8e:9d:fa:39:fa:70:5f:c4:b6:1a:78:ee:f2:
         58:a3:ea:26:eb:2c:c7:19:65:12:30:d6:f6:b9:69:ad:aa:a0:
         04:38:19:e4:11:98:f8:34:8f:f8:53:f6:d9:45:b4:7a:1d:16:
         02:ca:c1:00:71:d7:f7:1a:9b:90:3f:22:53:2f:ea:a1:4a:fe:
         82:dd:99:e9:8b:56:89:18:a3:93:ef:34:b6:89:a2:f4:73:fd:
         e5:1c:60:34:3e:c1:f9:81:6f:7b:d2:5c:9a:13:87:97:35:e7:
         d0:be:6c:29:2a:03:7d:a3:d3:18:53:68:e9:fb:bf:c3:1d:62:
         07:41:ae:67:37:3c:65:aa:8c:af:8a:d9:1c:25:12:ad:d6:70:
         a3:b3:65:4f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIuWTMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZi
MmMzM2ZhMDE5MDFmNzAzZTM3MzBlMjhlOTllYjhiYzRjYmE2MmEwHhcNMjMwODA2
MTUyMTU5WhcNMjUwODA3MTUyMTU5WjAzMTEwLwYDVQQDEygwMjI0OGI3MzhhOTVl
YTZjNWZkYTEwMTRhY2M0NTc4MTFiM2RiNWIyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnzp06FaoHCcy3dwxDQWoF/vHE7Nrui4OIDEKYQt5P2L6BR8E
QKDlsymt4giU4JbOwVA+jtmuaCn4tW4PV7PZjUIKECzfhNscZ5PxKh/J7zBKocXX
7NVFv18u8deaW9OglCbZ+x35lT5C0DR9L5kfqvwVPdVaHLp3efuTgU5/bvXscstH
XbazJRzh8QJKvG4v+rE5hCn9nzr6SBYcHZYRSO0M5PSAvKQTnQEjOiv3RY+pK8B1
fm69lyOryyMZTmJJ02Z5zUJ7MoXI2WL6xw/+Yz2MW/kDgBS+4miL5nMCHew4U9SR
3IYxPwC3sIcwYP9gWL7sqbNpLBFGTivlOjy3dwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFgepFRpwX48/M0HV+o8EY50qJIGMB8GA1UdIwQYMBaAFH4HMs9XSoQiKTbT
qOxlLvM30lKkMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmIyYzMz
ZmEwMTkwMWY3MDNlMzczMGUyOGU5OWViOGJjNGNiYTYyYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzcwZGE1MWEtYzFjNC00NjQ4LTg4ODctMzhkYTRm
MTdiZjg2LzAyMjQ4YjczOGE5NWVhNmM1ZmRhMTAxNGFjYzQ1NzgxMWIzZGI1YjIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jNzBkYTUxYS1jMWM0LTQ2NDgtODg4Ny0zOGRh
NGYxN2JmODYvNmIyYzMzZmEwMTkwMWY3MDNlMzczMGUyOGU5OWViOGJjNGNiYTYy
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL5dTTANBgkqhkiG9w0BAQsFAAOCAQEAJ+3dPUpBlEKcqNkV
vN+m4U4Q9xJ9DJQlfZzQOWNbyStUOO14wchM/7G7UJFCtA2Fj9fhysE6foAzsmw0
9LskyDrc47hvqLH7Jv85G2zJmfkX9MIR579Orng4AEncJFbd3pf3WLS6ybv0U37s
ER3Rh6COnfo5+nBfxLYaeO7yWKPqJussxxllEjDW9rlpraqgBDgZ5BGY+DSP+FP2
2UW0eh0WAsrBAHHX9xqbkD8iUy/qoUr+gt2Z6YtWiRijk+80tomi9HP95RxgND7B
+YFve9JcmhOHlzXn0L5sKSoDfaPTGFNo6fu/wx1iB0GuZzc8ZaqMr4rZHCUSrdZw
o7NlTw==
-----END CERTIFICATE-----
Generated at Fri Sep 1 19:55:48 2023 by rpki-client on console-fra.rpki-client.org