Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c030b508-677b-48e1-b2cf-6dbe0ea9b26f/ba5d506eba7ed1ca7e858abe58fb56895dfcc099.roa
File:                     ba5d506eba7ed1ca7e858abe58fb56895dfcc099.roa (raw, json)
Hash identifier:          lPtKJACTKeqFSk9t/DqOFoVyIYJ3QWMc5qWPvuL7vqM=
Subject key identifier:   B6:91:84:1C:F4:02:D0:B8:1A:1C:51:7A:F1:A1:A9:D0:D4:01:95:05
Certificate issuer:       /CN=120d3f1dd0412637d6cfe87a0a26d34c0665388a
Certificate serial:       21BA5F
Authority key identifier: B7:61:B5:F2:74:4F:DB:FF:C7:B9:E6:F9:E6:02:F4:76:CD:77:30:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/120d3f1dd0412637d6cfe87a0a26d34c0665388a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c030b508-677b-48e1-b2cf-6dbe0ea9b26f/ba5d506eba7ed1ca7e858abe58fb56895dfcc099.roa
Signing time:             Fri 18 Aug 2023 18:28:39 +0000
ROA not before:           Thu 17 Aug 2023 18:28:39 +0000
ROA not after:            Mon 18 Aug 2025 18:28:39 +0000
asID:                     52232
IP address blocks:        190.14.160.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2210399 (0x21ba5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=120d3f1dd0412637d6cfe87a0a26d34c0665388a
        Validity
            Not Before: Aug 17 18:28:39 2023 GMT
            Not After : Aug 18 18:28:39 2025 GMT
        Subject: CN=ba5d506eba7ed1ca7e858abe58fb56895dfcc099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ac:50:99:b7:fb:b8:ef:c1:fa:9a:49:ad:4d:
                    09:be:c5:4d:bf:74:80:9e:01:9e:73:03:da:e6:18:
                    b2:53:1c:68:0c:5e:e7:bc:3d:71:d0:7e:c5:5f:e7:
                    cf:b1:18:e7:f3:c5:a0:e8:6f:16:b3:dc:ab:d0:20:
                    f6:9b:68:a9:9a:81:41:fd:de:c7:58:07:b2:a0:98:
                    f5:40:25:45:90:16:e0:af:63:51:6d:2c:85:5f:04:
                    c5:08:06:3a:3f:53:7c:2f:df:8e:eb:f5:00:67:7e:
                    f4:a9:b4:66:f1:df:7b:12:d0:ea:84:f3:9e:33:96:
                    ec:b8:f3:bd:1f:c3:22:34:86:b2:b7:16:c6:34:2b:
                    82:3d:77:5f:1b:ec:d2:a6:2b:21:e5:83:df:e2:f7:
                    5d:b1:48:22:b9:99:be:4c:f0:02:93:82:dd:b9:e0:
                    3d:28:01:d4:58:12:9a:2a:8d:49:4d:4c:8f:fe:dd:
                    d2:61:c3:e2:8e:80:75:ad:f0:ae:35:44:e9:66:d9:
                    5f:e2:33:60:68:4b:a9:3a:3c:a5:f9:d1:da:1a:5e:
                    5c:f8:b8:1b:fa:82:8d:dc:f5:5a:28:7a:60:c7:0d:
                    63:7b:f4:01:59:04:88:26:b7:1d:88:ec:87:b2:15:
                    05:07:93:b3:68:78:3c:b7:56:70:22:3c:33:ae:00:
                    7d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:91:84:1C:F4:02:D0:B8:1A:1C:51:7A:F1:A1:A9:D0:D4:01:95:05
            X509v3 Authority Key Identifier:
                keyid:B7:61:B5:F2:74:4F:DB:FF:C7:B9:E6:F9:E6:02:F4:76:CD:77:30:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/120d3f1dd0412637d6cfe87a0a26d34c0665388a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c030b508-677b-48e1-b2cf-6dbe0ea9b26f/ba5d506eba7ed1ca7e858abe58fb56895dfcc099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c030b508-677b-48e1-b2cf-6dbe0ea9b26f/120d3f1dd0412637d6cfe87a0a26d34c0665388a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6a:3c:c4:40:88:ce:d4:43:1c:e0:46:91:29:cc:35:ef:81:0b:
         cd:21:cd:21:bb:38:52:fc:69:71:cb:2e:dc:02:43:d3:72:b9:
         ef:8f:72:68:61:05:0b:6b:10:e6:fd:02:89:25:bd:6e:d0:5e:
         76:66:c3:38:b7:5e:e5:7a:3c:21:fd:90:ab:a2:dd:3d:7a:d9:
         36:42:a0:23:45:00:68:8a:34:bd:91:59:6f:5c:9f:55:45:be:
         3c:a0:5a:e4:37:91:96:74:f6:95:6e:6a:5f:26:df:06:5f:7c:
         f9:e6:bc:5d:0d:9f:04:fe:ff:cf:50:dc:40:d9:3f:5d:ae:70:
         cf:5c:59:f7:c2:2b:18:8b:fc:43:d6:93:55:35:a8:dc:bf:2f:
         e5:8b:1d:2b:a2:26:ae:d3:05:41:ed:d6:dc:ba:b7:7e:3f:45:
         54:6d:81:36:4e:91:58:78:39:35:17:87:0c:f6:79:66:59:db:
         36:02:24:ad:c0:34:be:31:1c:74:1b:95:c1:7f:45:04:c6:16:
         04:78:05:ee:26:ae:41:db:91:46:b7:ca:01:3c:7a:72:c2:68:
         ef:92:f3:d6:b5:15:b6:a3:5f:66:39:4c:39:34:55:0b:60:7c:
         6a:77:f9:09:6b:fd:f3:18:d1:57:7b:05:1f:2e:98:d7:46:b3:
         b1:c2:28:ee
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIbpfMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEy
MGQzZjFkZDA0MTI2MzdkNmNmZTg3YTBhMjZkMzRjMDY2NTM4OGEwHhcNMjMwODE3
MTgyODM5WhcNMjUwODE4MTgyODM5WjAzMTEwLwYDVQQDEyhiYTVkNTA2ZWJhN2Vk
MWNhN2U4NThhYmU1OGZiNTY4OTVkZmNjMDk5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsKxQmbf7uO/B+ppJrU0JvsVNv3SAngGecwPa5hiyUxxoDF7n
vD1x0H7FX+fPsRjn88Wg6G8Ws9yr0CD2m2ipmoFB/d7HWAeyoJj1QCVFkBbgr2NR
bSyFXwTFCAY6P1N8L9+O6/UAZ370qbRm8d97EtDqhPOeM5bsuPO9H8MiNIaytxbG
NCuCPXdfG+zSpish5YPf4vddsUgiuZm+TPACk4LdueA9KAHUWBKaKo1JTUyP/t3S
YcPijoB1rfCuNUTpZtlf4jNgaEupOjyl+dHaGl5c+Lgb+oKN3PVaKHpgxw1je/QB
WQSIJrcdiOyHshUFB5OzaHg8t1ZwIjwzrgB9nwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLaRhBz0AtC4GhxRevGhqdDUAZUFMB8GA1UdIwQYMBaAFLdhtfJ0T9v/x7nm
+eYC9HbNdzDKMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTIwZDNm
MWRkMDQxMjYzN2Q2Y2ZlODdhMGEyNmQzNGMwNjY1Mzg4YS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzAzMGI1MDgtNjc3Yi00OGUxLWIyY2YtNmRiZTBl
YTliMjZmL2JhNWQ1MDZlYmE3ZWQxY2E3ZTg1OGFiZTU4ZmI1Njg5NWRmY2MwOTku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jMDMwYjUwOC02NzdiLTQ4ZTEtYjJjZi02ZGJl
MGVhOWIyNmYvMTIwZDNmMWRkMDQxMjYzN2Q2Y2ZlODdhMGEyNmQzNGMwNjY1Mzg4
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEBL4OoDANBgkqhkiG9w0BAQsFAAOCAQEAajzEQIjO1EMc4EaR
Kcw174ELzSHNIbs4Uvxpccsu3AJD03K5749yaGEFC2sQ5v0CiSW9btBedmbDOLde
5Xo8If2Qq6LdPXrZNkKgI0UAaIo0vZFZb1yfVUW+PKBa5DeRlnT2lW5qXybfBl98
+ea8XQ2fBP7/z1DcQNk/Xa5wz1xZ98IrGIv8Q9aTVTWo3L8v5YsdK6ImrtMFQe3W
3Lq3fj9FVG2BNk6RWHg5NReHDPZ5ZlnbNgIkrcA0vjEcdBuVwX9FBMYWBHgF7iau
QduRRrfKATx6csJo75Lz1rUVtqNfZjlMOTRVC2B8anf5CWv98xjRV3sFHy6Y10az
scIo7g==
-----END CERTIFICATE-----