Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/2d471c19f67056cbfd5f488c098d9284cb999492.roa
File:                     2d471c19f67056cbfd5f488c098d9284cb999492.roa (raw, json)
Hash identifier:          zR3in4o0RCnjObcW203usxK6MdP4+2pEdy3VbvZu8S4=
Subject key identifier:   48:0D:97:8E:F8:BD:95:01:7E:7A:80:82:EC:62:D8:8A:8D:8A:AB:CA
Certificate issuer:       /CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
Certificate serial:       22A44E
Authority key identifier: 7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/2d471c19f67056cbfd5f488c098d9284cb999492.roa
Signing time:             Fri 04 Aug 2023 16:09:32 +0000
ROA not before:           Thu 03 Aug 2023 16:09:32 +0000
ROA not after:            Mon 04 Aug 2025 16:09:32 +0000
asID:                     14445
IP address blocks:        190.93.89.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2270286 (0x22a44e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
        Validity
            Not Before: Aug  3 16:09:32 2023 GMT
            Not After : Aug  4 16:09:32 2025 GMT
        Subject: CN=2d471c19f67056cbfd5f488c098d9284cb999492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:95:7d:62:50:0b:28:89:57:29:cb:87:9d:dd:
                    dd:cb:2d:1c:99:f4:19:b1:39:85:00:db:14:c4:03:
                    6f:75:f2:f5:d6:a9:79:87:2d:14:e6:d3:c7:ba:d5:
                    bc:c0:95:b7:98:36:e0:04:8b:aa:c4:5b:f3:8a:81:
                    f9:a2:1a:e5:72:23:eb:ce:c2:f3:d6:76:a1:2f:b8:
                    ba:61:fc:5e:6d:57:16:20:4a:9f:af:2a:5b:75:c5:
                    ba:32:46:80:6e:e4:28:46:fe:ab:86:30:be:59:4b:
                    29:85:b9:4a:f6:e4:5f:8b:2a:84:61:0d:05:3c:8f:
                    cc:f7:d8:65:44:dd:1d:e0:fa:3a:fb:c3:91:15:51:
                    38:a6:d1:df:33:66:78:68:44:b4:90:e3:76:c8:1e:
                    8b:e4:95:23:30:d3:1c:8c:f2:f1:10:ef:57:6c:99:
                    f3:61:0b:4f:6e:a9:09:8d:aa:28:5f:3f:67:9b:ec:
                    72:76:d2:90:d2:0e:8a:89:18:75:e2:14:a3:1c:20:
                    d9:ec:7e:d0:4e:ee:ec:f1:37:a2:64:1c:b5:46:7c:
                    af:8b:52:ce:f8:9e:be:d0:8f:a5:20:62:f2:b6:2e:
                    07:46:2b:63:de:cb:2e:59:a4:1f:b4:1c:10:c3:29:
                    97:bc:0c:a5:e0:dd:0f:c9:c6:da:8a:95:d4:be:1a:
                    1e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:0D:97:8E:F8:BD:95:01:7E:7A:80:82:EC:62:D8:8A:8D:8A:AB:CA
            X509v3 Authority Key Identifier:
                keyid:7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/2d471c19f67056cbfd5f488c098d9284cb999492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:71:87:12:c0:40:38:28:7f:b0:ab:47:5e:29:bc:dc:89:70:
         07:4c:e4:e3:51:ba:64:d2:72:29:ee:55:60:86:79:23:91:b9:
         30:09:6b:7f:32:bd:e9:3a:59:ea:2a:02:1f:d1:43:29:1c:60:
         db:8d:45:60:c6:5d:b7:99:e1:92:3a:4c:67:94:f4:40:44:5e:
         d3:41:a6:32:dc:30:ae:57:0b:61:63:32:e8:73:75:94:31:fa:
         c4:a1:37:61:c2:10:25:d2:69:d1:03:95:a0:de:e5:e6:7f:81:
         72:e7:cc:b0:4a:74:8c:0d:d2:ea:32:73:a4:ab:9b:1a:a7:ce:
         28:ee:06:2c:bb:b2:61:89:d5:d3:a1:79:57:58:e9:cf:94:19:
         b6:ac:85:7a:e2:76:76:62:1b:3b:2c:07:26:8c:39:d8:d3:80:
         a5:03:13:6e:28:8b:34:50:30:9f:da:8a:84:f6:7b:77:46:ad:
         f4:47:f2:60:f7:0f:fc:b9:58:9d:b4:8a:a1:e1:77:21:58:68:
         3d:de:64:0b:49:33:49:fa:c0:42:84:74:1e:82:ba:67:45:ed:
         3a:e9:d6:c6:53:70:e2:3c:36:ac:1c:54:06:2d:e8:91:6c:63:
         76:2e:b5:37:b3:14:79:eb:14:f4:15:99:7d:bc:40:89:17:b2:
         79:55:e9:8a
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIqROMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZi
MmMzM2ZhMDE5MDFmNzAzZTM3MzBlMjhlOTllYjhiYzRjYmE2MmEwHhcNMjMwODAz
MTYwOTMyWhcNMjUwODA0MTYwOTMyWjAzMTEwLwYDVQQDEygyZDQ3MWMxOWY2NzA1
NmNiZmQ1ZjQ4OGMwOThkOTI4NGNiOTk5NDkyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmZV9YlALKIlXKcuHnd3dyy0cmfQZsTmFANsUxANvdfL11ql5
hy0U5tPHutW8wJW3mDbgBIuqxFvzioH5ohrlciPrzsLz1nahL7i6YfxebVcWIEqf
rypbdcW6MkaAbuQoRv6rhjC+WUsphblK9uRfiyqEYQ0FPI/M99hlRN0d4Po6+8OR
FVE4ptHfM2Z4aES0kON2yB6L5JUjMNMcjPLxEO9XbJnzYQtPbqkJjaooXz9nm+xy
dtKQ0g6KiRh14hSjHCDZ7H7QTu7s8TeiZBy1Rnyvi1LO+J6+0I+lIGLyti4HRitj
3ssuWaQftBwQwymXvAyl4N0PycbaipXUvhoeRwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFEgNl474vZUBfnqAguxi2IqNiqvKMB8GA1UdIwQYMBaAFH4HMs9XSoQiKTbT
qOxlLvM30lKkMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmIyYzMz
ZmEwMTkwMWY3MDNlMzczMGUyOGU5OWViOGJjNGNiYTYyYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzcwZGE1MWEtYzFjNC00NjQ4LTg4ODctMzhkYTRm
MTdiZjg2LzJkNDcxYzE5ZjY3MDU2Y2JmZDVmNDg4YzA5OGQ5Mjg0Y2I5OTk0OTIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jNzBkYTUxYS1jMWM0LTQ2NDgtODg4Ny0zOGRh
NGYxN2JmODYvNmIyYzMzZmEwMTkwMWY3MDNlMzczMGUyOGU5OWViOGJjNGNiYTYy
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL5dWTANBgkqhkiG9w0BAQsFAAOCAQEAMnGHEsBAOCh/sKtH
Xim83IlwB0zk41G6ZNJyKe5VYIZ5I5G5MAlrfzK96TpZ6ioCH9FDKRxg241FYMZd
t5nhkjpMZ5T0QERe00GmMtwwrlcLYWMy6HN1lDH6xKE3YcIQJdJp0QOVoN7l5n+B
cufMsEp0jA3S6jJzpKubGqfOKO4GLLuyYYnV06F5V1jpz5QZtqyFeuJ2dmIbOywH
Jow52NOApQMTbiiLNFAwn9qKhPZ7d0at9EfyYPcP/LlYnbSKoeF3IVhoPd5kC0kz
SfrAQoR0HoK6Z0XtOunWxlNw4jw2rBxUBi3okWxjdi61N7MUeesU9BWZfbxAiRey
eVXpig==
-----END CERTIFICATE-----
Generated at Fri Sep 1 19:55:48 2023 by rpki-client on console-fra.rpki-client.org