Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/03944f6f1c17e5c8824eafc92cfbb9132305d059.roa
File:                     03944f6f1c17e5c8824eafc92cfbb9132305d059.roa (raw, json)
Hash identifier:          iZSQyPsFe5rvGkGQhJfc2FdcBz5OTx3rUzAMPB/5psU=
Subject key identifier:   35:93:77:CB:CD:21:44:AB:B1:88:CB:95:D3:12:9C:F0:7B:9D:7D:4F
Certificate issuer:       /CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
Certificate serial:       2A8C23
Authority key identifier: FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/03944f6f1c17e5c8824eafc92cfbb9132305d059.roa
Signing time:             Wed 14 Feb 2024 13:40:11 +0000
ROA not before:           Wed 14 Feb 2024 13:39:34 +0000
ROA not after:            Wed 14 Feb 2029 13:39:34 +0000
asID:                     7018
IP address blocks:        190.93.81.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2788387 (0x2a8c23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
        Validity
            Not Before: Feb 14 13:39:34 2024 GMT
            Not After : Feb 14 13:39:34 2029 GMT
        Subject: CN=03944f6f1c17e5c8824eafc92cfbb9132305d059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e8:3c:60:c3:17:93:98:6e:5a:e1:09:8c:7b:
                    69:7c:16:85:8a:a0:6a:e6:83:1e:49:56:34:6f:b8:
                    be:89:ce:d7:1b:f7:61:82:02:bd:9b:31:5c:2b:30:
                    f9:28:4d:e6:38:ca:16:00:ff:45:57:1a:9c:c3:73:
                    4d:1c:ab:1a:28:b7:b5:65:7c:dd:a0:e2:8f:d6:a9:
                    65:cc:24:26:2d:e6:d5:be:0a:75:1d:e1:5e:fb:a4:
                    36:47:05:57:72:53:00:02:f4:68:1e:40:70:f8:08:
                    ac:08:cf:0e:e5:bd:b1:31:89:a8:07:2d:ff:a5:c8:
                    9f:84:a6:72:37:53:a1:b0:b2:78:04:62:fd:e2:31:
                    97:41:18:ed:ce:a6:63:8e:e0:af:b2:70:25:ed:21:
                    9d:1b:aa:8c:2f:95:69:f0:84:80:07:03:58:8c:44:
                    a1:79:44:83:2c:22:da:aa:47:a4:c9:4e:ed:c8:ec:
                    2f:0e:fe:36:97:ba:d8:ad:ed:47:d3:07:e8:9d:3f:
                    6c:13:8b:ca:ee:8f:c9:b0:69:f3:df:87:41:cf:4f:
                    01:97:cf:dd:e5:2b:3a:0a:ca:5f:1f:45:cb:ee:f2:
                    71:82:4f:7e:94:85:11:f9:f9:8a:42:e2:09:0d:32:
                    ca:b1:1f:66:50:2a:f1:40:d1:b2:d0:2e:7f:70:5e:
                    6b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:93:77:CB:CD:21:44:AB:B1:88:CB:95:D3:12:9C:F0:7B:9D:7D:4F
            X509v3 Authority Key Identifier:
                keyid:FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/03944f6f1c17e5c8824eafc92cfbb9132305d059.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:5f:12:eb:26:12:bb:ae:cb:78:b8:f1:c9:d5:b4:2f:22:c8:
         3d:6e:8d:46:13:12:c4:2f:2e:22:98:27:c1:91:49:0d:d6:36:
         b7:70:6c:50:04:a4:ea:20:84:a5:65:24:44:1a:a5:a1:aa:38:
         46:23:9d:69:02:37:e9:26:07:d3:3e:dc:12:f7:8c:97:e8:ee:
         87:87:e1:ee:8e:d3:49:8e:1b:2f:f8:56:03:55:7b:49:f1:3a:
         e3:f4:ab:fc:c2:80:0d:8d:78:3b:58:de:ae:1e:d3:22:c1:51:
         3f:c2:14:b4:98:e1:ba:ae:c1:67:63:3b:5a:fa:bf:62:fa:17:
         2f:cf:b4:81:fc:33:47:98:93:0e:dd:39:8f:e1:dd:13:b5:04:
         fc:94:af:6e:ef:08:9e:cb:9e:e5:d7:02:d9:5d:df:6a:a2:6a:
         f6:f1:c5:e5:e4:3e:50:98:9c:8c:21:05:56:b6:5c:51:5d:7d:
         de:ca:9f:c3:f2:91:ca:1f:49:de:a1:6c:5d:1f:46:34:89:82:
         21:33:66:1d:ce:a0:82:a4:52:c3:81:fe:4d:b7:9d:64:46:41:
         a1:13:5a:7f:fa:ea:ed:6b:dc:d7:3a:47:ba:24:be:19:9f:9a:
         e9:0a:b9:b8:3a:59:a3:e9:38:1c:8d:a0:a7:2e:72:4b:5b:e7:
         58:e8:9e:23
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDKowjMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE5
ZmI1Y2Q5OTNkMzQ4MjVkY2ExYWZjNGNhZGVhZjg0OTNkYmRiZGQwHhcNMjQwMjE0
MTMzOTM0WhcNMjkwMjE0MTMzOTM0WjAzMTEwLwYDVQQDEygwMzk0NGY2ZjFjMTdl
NWM4ODI0ZWFmYzkyY2ZiYjkxMzIzMDVkMDU5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAg+g8YMMXk5huWuEJjHtpfBaFiqBq5oMeSVY0b7i+ic7XG/dh
ggK9mzFcKzD5KE3mOMoWAP9FVxqcw3NNHKsaKLe1ZXzdoOKP1qllzCQmLebVvgp1
HeFe+6Q2RwVXclMAAvRoHkBw+AisCM8O5b2xMYmoBy3/pcifhKZyN1OhsLJ4BGL9
4jGXQRjtzqZjjuCvsnAl7SGdG6qML5Vp8ISABwNYjESheUSDLCLaqkekyU7tyOwv
Dv42l7rYre1H0wfonT9sE4vK7o/JsGnz34dBz08Bl8/d5Ss6CspfH0XL7vJxgk9+
lIUR+fmKQuIJDTLKsR9mUCrxQNGy0C5/cF5r7QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFDWTd8vNIUSrsYjLldMSnPB7nX1PMB8GA1UdIwQYMBaAFPt84Eo2/gXQEbvk
w1q2h+jw4qG8MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTlmYjVj
ZDk5M2QzNDgyNWRjYTFhZmM0Y2FkZWFmODQ5M2RiZGJkZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzcwZGE1MWEtYzFjNC00NjQ4LTg4ODctMzhkYTRm
MTdiZjg2LzAzOTQ0ZjZmMWMxN2U1Yzg4MjRlYWZjOTJjZmJiOTEzMjMwNWQwNTku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jNzBkYTUxYS1jMWM0LTQ2NDgtODg4Ny0zOGRh
NGYxN2JmODYvYTlmYjVjZDk5M2QzNDgyNWRjYTFhZmM0Y2FkZWFmODQ5M2RiZGJk
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL5dUTANBgkqhkiG9w0BAQsFAAOCAQEAYF8S6yYSu67LeLjx
ydW0LyLIPW6NRhMSxC8uIpgnwZFJDdY2t3BsUASk6iCEpWUkRBqloao4RiOdaQI3
6SYH0z7cEveMl+juh4fh7o7TSY4bL/hWA1V7SfE64/Sr/MKADY14O1jerh7TIsFR
P8IUtJjhuq7BZ2M7Wvq/YvoXL8+0gfwzR5iTDt05j+HdE7UE/JSvbu8Insue5dcC
2V3faqJq9vHF5eQ+UJicjCEFVrZcUV193sqfw/KRyh9J3qFsXR9GNImCITNmHc6g
gqRSw4H+TbedZEZBoRNaf/rq7Wvc1zpHuiS+GZ+a6Qq5uDpZo+k4HI2gpy5yS1vn
WOieIw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:47 2024 by rpki-client on console-ams.rpki-client.org