Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc6512f7-9e97-40a0-8604-7dd5b175874e/940d127f9d0fdf9cdf091cfc2a428b9b1d1ea1fb.roa
File:                     940d127f9d0fdf9cdf091cfc2a428b9b1d1ea1fb.roa (raw, json)
Hash identifier:          79TNuQc/PaB5dDyl+MUZiSwczo1Micyjp8DjRr/93m8=
Subject key identifier:   26:3B:B5:EF:D0:89:0D:7B:AF:E6:84:26:59:99:B1:2D:34:99:9E:0E
Certificate issuer:       /CN=958ec93745c200e2ec4523ba6b1c5792ea0735d9
Certificate serial:       06D2D0
Authority key identifier: 3A:18:1D:59:C9:ED:5B:A9:47:0C:2D:F4:E2:23:21:5B:18:B1:71:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/958ec93745c200e2ec4523ba6b1c5792ea0735d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc6512f7-9e97-40a0-8604-7dd5b175874e/940d127f9d0fdf9cdf091cfc2a428b9b1d1ea1fb.roa
Signing time:             Wed 21 Feb 2024 14:01:57 +0000
ROA not before:           Wed 21 Feb 2024 14:01:57 +0000
ROA not after:            Sat 21 Feb 2026 14:01:57 +0000
asID:                     272996
IP address blocks:        177.93.140.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 447184 (0x6d2d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=958ec93745c200e2ec4523ba6b1c5792ea0735d9
        Validity
            Not Before: Feb 21 14:01:57 2024 GMT
            Not After : Feb 21 14:01:57 2026 GMT
        Subject: CN=940d127f9d0fdf9cdf091cfc2a428b9b1d1ea1fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:97:ca:5c:f7:d7:d4:da:30:85:cd:e3:8c:86:
                    ee:c3:ad:d6:0a:b5:9d:2d:a5:af:d6:e2:d4:d9:e6:
                    e8:74:9d:7c:17:9e:5a:f2:94:af:68:31:ac:6a:0e:
                    49:8e:80:b0:91:7e:25:5e:e1:0c:52:fa:86:7e:4d:
                    1c:d4:ee:2d:e3:7a:c5:5b:84:f8:a6:8f:3d:f6:f6:
                    20:cb:fd:d4:e3:e6:f7:90:d3:b9:64:c7:ae:93:5a:
                    05:ec:22:e0:ba:16:8c:1c:4e:02:24:bb:09:4d:14:
                    e2:39:15:16:30:55:52:25:f6:36:fa:18:0d:d1:6f:
                    16:2d:f0:1f:07:e2:92:25:23:f7:6f:95:0c:99:d0:
                    7d:74:8e:c9:ec:a9:51:ce:24:56:22:4e:d4:63:88:
                    2a:d9:12:81:c5:2c:7e:80:d9:48:48:11:ad:a4:f5:
                    c5:c9:19:1d:68:43:83:c8:6a:0a:aa:e9:32:ed:1d:
                    71:59:12:65:6f:aa:c5:b9:2c:e3:32:b9:ab:03:48:
                    c2:ae:04:ce:2d:8f:8c:80:75:a9:d2:7f:32:eb:ea:
                    fb:7d:84:ad:60:ea:31:55:18:7f:f1:31:a3:68:1c:
                    de:9d:3b:37:9d:ed:19:a8:80:15:a8:0c:bb:a9:7d:
                    60:c8:43:b8:93:3c:53:14:6f:e3:a4:99:4f:85:15:
                    63:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:3B:B5:EF:D0:89:0D:7B:AF:E6:84:26:59:99:B1:2D:34:99:9E:0E
            X509v3 Authority Key Identifier:
                keyid:3A:18:1D:59:C9:ED:5B:A9:47:0C:2D:F4:E2:23:21:5B:18:B1:71:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/958ec93745c200e2ec4523ba6b1c5792ea0735d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc6512f7-9e97-40a0-8604-7dd5b175874e/940d127f9d0fdf9cdf091cfc2a428b9b1d1ea1fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc6512f7-9e97-40a0-8604-7dd5b175874e/958ec93745c200e2ec4523ba6b1c5792ea0735d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:3c:b0:93:57:99:7e:40:ca:bb:28:cf:e6:b8:f9:85:a1:ce:
         01:3e:81:6c:72:78:8d:d4:89:bf:a6:9f:2f:8d:3b:10:bc:7a:
         3d:f8:d4:e5:81:c4:8e:f3:83:87:c0:c1:62:2c:89:29:62:17:
         6f:35:79:8b:65:18:da:98:60:60:7e:6d:c9:22:ba:f6:9d:38:
         85:f4:68:b4:ad:e4:2c:ed:92:4a:9a:39:7d:45:a7:d0:df:00:
         69:e8:04:bd:13:dc:a0:e1:0f:05:82:23:0a:a0:13:c2:89:e3:
         99:79:49:71:85:ef:4a:38:66:59:d0:e8:6b:e4:41:25:a2:5a:
         1a:1a:cc:10:77:4e:75:05:3c:13:bc:64:56:6f:00:fb:61:21:
         2a:57:ae:fc:f8:ee:c6:61:5f:11:89:da:85:a4:66:e5:63:2c:
         cc:7e:5e:d0:72:36:a2:b0:2f:bc:6c:9d:89:a8:92:1c:9d:da:
         1b:d5:ad:5e:88:76:fa:1d:57:c4:52:73:00:95:a8:a4:3e:34:
         7f:44:6c:f6:46:b0:82:9d:c5:e2:1b:9e:e3:9b:99:ba:7a:8f:
         7d:07:40:b3:a9:95:44:c6:34:de:46:c2:b7:1e:b0:0b:95:20:
         85:1c:ee:dc:e1:1a:cb:66:93:43:50:98:8d:8d:6e:af:74:f8:
         29:ae:e8:16
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBtLQMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk1
OGVjOTM3NDVjMjAwZTJlYzQ1MjNiYTZiMWM1NzkyZWEwNzM1ZDkwHhcNMjQwMjIx
MTQwMTU3WhcNMjYwMjIxMTQwMTU3WjAzMTEwLwYDVQQDEyg5NDBkMTI3ZjlkMGZk
ZjljZGYwOTFjZmMyYTQyOGI5YjFkMWVhMWZiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgZfKXPfX1Nowhc3jjIbuw63WCrWdLaWv1uLU2ebodJ18F55a
8pSvaDGsag5JjoCwkX4lXuEMUvqGfk0c1O4t43rFW4T4po899vYgy/3U4+b3kNO5
ZMeuk1oF7CLguhaMHE4CJLsJTRTiORUWMFVSJfY2+hgN0W8WLfAfB+KSJSP3b5UM
mdB9dI7J7KlRziRWIk7UY4gq2RKBxSx+gNlISBGtpPXFyRkdaEODyGoKquky7R1x
WRJlb6rFuSzjMrmrA0jCrgTOLY+MgHWp0n8y6+r7fYStYOoxVRh/8TGjaBzenTs3
ne0ZqIAVqAy7qX1gyEO4kzxTFG/jpJlPhRVjhQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFCY7te/QiQ17r+aEJlmZsS00mZ4OMB8GA1UdIwQYMBaAFDoYHVnJ7VupRwwt
9OIjIVsYsXF5MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTU4ZWM5
Mzc0NWMyMDBlMmVjNDUyM2JhNmIxYzU3OTJlYTA3MzVkOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZGM2NTEyZjctOWU5Ny00MGEwLTg2MDQtN2RkNWIx
NzU4NzRlLzk0MGQxMjdmOWQwZmRmOWNkZjA5MWNmYzJhNDI4YjliMWQxZWExZmIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kYzY1MTJmNy05ZTk3LTQwYTAtODYwNC03ZGQ1
YjE3NTg3NGUvOTU4ZWM5Mzc0NWMyMDBlMmVjNDUyM2JhNmIxYzU3OTJlYTA3MzVk
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAbFdjDANBgkqhkiG9w0BAQsFAAOCAQEAtDywk1eZfkDKuyjP
5rj5haHOAT6BbHJ4jdSJv6afL407ELx6PfjU5YHEjvODh8DBYiyJKWIXbzV5i2UY
2phgYH5tySK69p04hfRotK3kLO2SSpo5fUWn0N8AaegEvRPcoOEPBYIjCqATwonj
mXlJcYXvSjhmWdDoa+RBJaJaGhrMEHdOdQU8E7xkVm8A+2EhKleu/PjuxmFfEYna
haRm5WMszH5e0HI2orAvvGydiaiSHJ3aG9WtXoh2+h1XxFJzAJWopD40f0Rs9kaw
gp3F4hue45uZunqPfQdAs6mVRMY03kbCtx6wC5UghRzu3OEay2aTQ1CYjY1ur3T4
Ka7oFg==
-----END CERTIFICATE-----