Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/1f62e36677603fcbcb486d44e9113f72250760c4.roa
File:                     1f62e36677603fcbcb486d44e9113f72250760c4.roa (raw, json)
Hash identifier:          fOUZtxlNM6KuE+7T9Yfcs5TuqA1Q0oua2Xp7HVKuqc8=
Subject key identifier:   B4:E2:D0:AF:EE:34:01:29:90:00:59:D4:13:22:D2:42:AB:AC:98:7F
Certificate issuer:       /CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
Certificate serial:       2279D1
Authority key identifier: 7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/1f62e36677603fcbcb486d44e9113f72250760c4.roa
Signing time:             Thu 03 Aug 2023 13:49:12 +0000
ROA not before:           Wed 02 Aug 2023 13:49:12 +0000
ROA not after:            Sun 03 Aug 2025 13:49:12 +0000
asID:                     5065
IP address blocks:        190.93.65.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2259409 (0x2279d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
        Validity
            Not Before: Aug  2 13:49:12 2023 GMT
            Not After : Aug  3 13:49:12 2025 GMT
        Subject: CN=1f62e36677603fcbcb486d44e9113f72250760c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:68:7d:c2:e7:0f:02:2a:8f:a9:4b:17:59:cf:
                    f4:81:56:87:be:da:21:48:d4:f7:49:b9:a4:25:f7:
                    5b:7c:e9:44:30:37:b8:a5:78:33:88:e3:8c:a2:12:
                    a1:ac:1e:1e:1d:b5:a4:96:9c:2e:9c:78:b2:4e:ac:
                    24:5b:51:24:bc:d5:89:3d:a3:1d:13:aa:c9:ba:ea:
                    26:6f:0b:db:8e:99:02:d9:86:25:10:b5:2b:b6:1c:
                    30:e1:10:04:b2:a3:97:94:24:aa:bf:11:b0:a9:9f:
                    a6:27:0f:df:3f:db:0f:f9:74:ee:29:bf:60:40:41:
                    c4:d0:1a:86:10:1d:e4:da:6e:14:b0:11:fd:54:92:
                    04:9e:5e:9c:17:20:1f:c5:77:28:d1:1e:3c:9e:21:
                    1a:12:9a:38:53:18:81:ba:ad:62:60:8c:60:2c:9d:
                    eb:36:fa:bc:ca:57:88:28:85:a5:e6:2c:1d:9a:d3:
                    05:2d:0c:d0:90:a0:5b:55:29:02:23:4e:a2:68:e7:
                    0b:b4:ed:f8:63:eb:c1:66:1a:38:ea:28:5a:2d:bc:
                    6c:eb:9c:98:bf:aa:f4:f5:4f:31:9d:cb:a5:49:4f:
                    85:4e:9f:52:44:71:f1:22:90:4c:72:64:cb:69:2a:
                    8d:fc:b1:9c:4c:92:9f:de:8f:66:ae:d9:ed:c2:a1:
                    a4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E2:D0:AF:EE:34:01:29:90:00:59:D4:13:22:D2:42:AB:AC:98:7F
            X509v3 Authority Key Identifier:
                keyid:7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/1f62e36677603fcbcb486d44e9113f72250760c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:8c:15:fa:9b:a6:2b:51:be:f8:de:5d:00:81:15:c2:3c:b6:
         5e:3a:31:c2:c3:a4:7a:97:41:fc:b2:de:db:2c:45:d4:ab:df:
         08:d0:b8:ec:bf:1d:b4:25:d6:67:73:df:72:89:47:ba:3f:9d:
         f0:1b:cb:8c:ca:46:f5:6c:b8:4f:67:30:49:f3:02:46:34:1e:
         2c:e7:9c:25:ea:e6:2c:a4:9d:9f:2d:96:54:7e:bc:f8:dd:3c:
         ad:a4:69:6b:47:8b:84:f5:13:ad:d0:b7:18:d1:13:73:1e:63:
         b9:b3:21:75:54:b2:0b:7f:a8:ea:fc:10:0e:8c:8a:25:a8:98:
         85:aa:53:65:10:1c:89:51:e1:b5:1d:c1:e0:04:b3:6b:f4:e2:
         42:ba:f0:4b:21:c8:1d:bc:dc:35:db:ab:33:34:01:1b:ef:3a:
         15:9e:be:2c:50:0e:18:15:7b:06:31:90:d8:23:d3:7f:29:d5:
         35:8b:e4:63:58:66:f7:e3:2d:8b:02:91:52:44:b4:a2:c1:10:
         e1:df:00:e1:0b:b2:5c:6c:05:31:83:db:9e:a0:51:d1:fd:2f:
         07:a8:fe:1c:0e:c3:03:08:6d:6c:1c:37:b9:94:74:3f:6d:46:
         4c:37:61:3e:cf:c5:72:7f:0d:55:62:81:66:df:2f:f2:b6:5d:
         7d:66:5e:b9
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDInnRMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZi
MmMzM2ZhMDE5MDFmNzAzZTM3MzBlMjhlOTllYjhiYzRjYmE2MmEwHhcNMjMwODAy
MTM0OTEyWhcNMjUwODAzMTM0OTEyWjAzMTEwLwYDVQQDEygxZjYyZTM2Njc3NjAz
ZmNiY2I0ODZkNDRlOTExM2Y3MjI1MDc2MGM0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAzmh9wucPAiqPqUsXWc/0gVaHvtohSNT3SbmkJfdbfOlEMDe4
pXgziOOMohKhrB4eHbWklpwunHiyTqwkW1EkvNWJPaMdE6rJuuombwvbjpkC2YYl
ELUrthww4RAEsqOXlCSqvxGwqZ+mJw/fP9sP+XTuKb9gQEHE0BqGEB3k2m4UsBH9
VJIEnl6cFyAfxXco0R48niEaEpo4UxiBuq1iYIxgLJ3rNvq8yleIKIWl5iwdmtMF
LQzQkKBbVSkCI06iaOcLtO34Y+vBZho46ihaLbxs65yYv6r09U8xnculSU+FTp9S
RHHxIpBMcmTLaSqN/LGcTJKf3o9mrtntwqGkJQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLTi0K/uNAEpkABZ1BMi0kKrrJh/MB8GA1UdIwQYMBaAFH4HMs9XSoQiKTbT
qOxlLvM30lKkMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmIyYzMz
ZmEwMTkwMWY3MDNlMzczMGUyOGU5OWViOGJjNGNiYTYyYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzcwZGE1MWEtYzFjNC00NjQ4LTg4ODctMzhkYTRm
MTdiZjg2LzFmNjJlMzY2Nzc2MDNmY2JjYjQ4NmQ0NGU5MTEzZjcyMjUwNzYwYzQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jNzBkYTUxYS1jMWM0LTQ2NDgtODg4Ny0zOGRh
NGYxN2JmODYvNmIyYzMzZmEwMTkwMWY3MDNlMzczMGUyOGU5OWViOGJjNGNiYTYy
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL5dQTANBgkqhkiG9w0BAQsFAAOCAQEAUowV+pumK1G++N5d
AIEVwjy2XjoxwsOkepdB/LLe2yxF1KvfCNC47L8dtCXWZ3PfcolHuj+d8BvLjMpG
9Wy4T2cwSfMCRjQeLOecJermLKSdny2WVH68+N08raRpa0eLhPUTrdC3GNETcx5j
ubMhdVSyC3+o6vwQDoyKJaiYhapTZRAciVHhtR3B4ASza/TiQrrwSyHIHbzcNdur
MzQBG+86FZ6+LFAOGBV7BjGQ2CPTfynVNYvkY1hm9+MtiwKRUkS0osEQ4d8A4Quy
XGwFMYPbnqBR0f0vB6j+HA7DAwhtbBw3uZR0P21GTDdhPs/Fcn8NVWKBZt8v8rZd
fWZeuQ==
-----END CERTIFICATE-----
Generated at Fri Sep 1 19:56:13 2023 by rpki-client on console-ams.rpki-client.org