Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/0a87d368e88f9b6e5927ab3ab3c60b98ed3f709d.roa
File:                     0a87d368e88f9b6e5927ab3ab3c60b98ed3f709d.roa (raw, json)
Hash identifier:          kuj7rULNrxmXh6unxCl1Isr0WP1Z3TBYdHFZbMijoYc=
Subject key identifier:   A7:17:CD:EC:2F:A6:25:29:4A:93:04:A9:08:BF:58:38:42:5C:36:EB
Certificate issuer:       /CN=1866c45b21787e12af4deafc085303e786f50b2f
Certificate serial:       2E2106
Authority key identifier: C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/0a87d368e88f9b6e5927ab3ab3c60b98ed3f709d.roa
Signing time:             Sun 17 Mar 2024 18:46:42 +0000
ROA not before:           Sun 17 Mar 2024 18:42:19 +0000
ROA not after:            Sat 17 Mar 2029 18:42:19 +0000
asID:                     14080
IP address blocks:        190.156.4.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3023110 (0x2e2106)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1866c45b21787e12af4deafc085303e786f50b2f
        Validity
            Not Before: Mar 17 18:42:19 2024 GMT
            Not After : Mar 17 18:42:19 2029 GMT
        Subject: CN=0a87d368e88f9b6e5927ab3ab3c60b98ed3f709d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d7:ba:a5:33:78:83:f3:2f:ca:fe:6d:1c:9d:
                    e7:b7:bc:7e:d5:2b:3f:e6:46:0b:f6:a0:40:be:16:
                    ea:fe:59:d3:e7:bd:28:a1:3d:e8:98:a2:dc:bb:17:
                    4b:c9:5b:6d:d2:c9:e0:e9:e8:13:b9:03:d6:b5:23:
                    18:b5:f7:ef:a6:71:b3:43:f1:33:e8:5f:e9:e4:f1:
                    8e:cf:88:cd:c6:f7:b7:89:24:09:69:70:c4:d6:4d:
                    dd:86:ab:37:50:ec:50:15:7e:b2:40:6d:05:47:b5:
                    ff:93:4d:b2:a6:c3:51:3d:80:3e:5c:72:4e:bb:41:
                    60:71:1b:55:9e:9b:64:12:bd:0f:f2:82:6f:d1:3d:
                    c3:2a:76:d2:05:55:a2:e8:50:34:0c:f8:fe:cb:21:
                    f4:07:a7:8f:91:86:15:92:f0:70:f0:61:53:64:e0:
                    ca:87:63:dc:53:df:92:df:8b:db:50:0a:f2:f5:73:
                    e7:0c:97:c2:cc:8b:20:97:e8:eb:96:9f:de:a1:89:
                    d6:e8:c3:89:52:7c:dd:52:3f:20:82:04:34:1e:7c:
                    e8:79:1b:ec:07:ff:4b:99:2a:5d:f5:4d:91:e1:62:
                    36:0d:9e:84:84:05:d6:aa:4e:65:71:e5:b5:93:36:
                    65:9c:ab:60:5c:34:53:85:e4:cf:e3:3c:6b:20:25:
                    56:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:17:CD:EC:2F:A6:25:29:4A:93:04:A9:08:BF:58:38:42:5C:36:EB
            X509v3 Authority Key Identifier:
                keyid:C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/0a87d368e88f9b6e5927ab3ab3c60b98ed3f709d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/1866c45b21787e12af4deafc085303e786f50b2f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.156.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:7a:e9:b8:26:d1:69:96:e4:45:78:2b:0f:17:b6:ae:7a:30:
         92:a0:69:f8:d8:a0:cc:e7:0b:36:33:0f:31:2c:62:85:8d:2d:
         cd:0b:23:7e:53:1f:d2:49:79:2d:35:13:5d:23:34:f8:7b:ec:
         85:f8:d0:db:1a:d2:2f:4d:a3:35:16:e7:40:8b:8c:4b:46:bf:
         09:b8:0b:d3:e0:51:1a:88:a9:d7:dd:15:f6:a6:d4:e9:4e:03:
         da:7e:38:10:0f:2b:5a:fa:8c:bf:93:b1:99:1d:a3:11:0b:58:
         5f:6d:f0:08:da:09:21:c8:9f:12:34:82:3d:f1:37:7a:89:ce:
         2c:9d:74:43:ac:f9:66:fe:14:31:48:b8:f2:2c:30:13:c4:b7:
         bb:a8:58:30:4b:35:db:06:27:f1:be:50:ec:8a:26:2b:7b:cf:
         ac:53:99:1e:1b:44:1e:43:5e:17:7c:bc:1b:c2:95:47:21:8b:
         ee:78:1a:d0:d7:d7:2c:98:78:3b:42:96:6f:84:42:fb:98:0f:
         68:fc:12:74:56:fe:90:60:2b:38:47:34:bc:7c:63:aa:94:5c:
         20:b4:af:02:5d:f5:8e:29:9c:09:34:a5:82:d6:10:5a:53:3c:
         20:f1:5b:16:d5:d0:57:95:81:3f:9a:0f:1e:29:c7:68:46:82:
         fa:05:66:03
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDLiEGMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE4
NjZjNDViMjE3ODdlMTJhZjRkZWFmYzA4NTMwM2U3ODZmNTBiMmYwHhcNMjQwMzE3
MTg0MjE5WhcNMjkwMzE3MTg0MjE5WjAzMTEwLwYDVQQDEygwYTg3ZDM2OGU4OGY5
YjZlNTkyN2FiM2FiM2M2MGI5OGVkM2Y3MDlkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAode6pTN4g/Mvyv5tHJ3nt7x+1Ss/5kYL9qBAvhbq/lnT570o
oT3omKLcuxdLyVtt0sng6egTuQPWtSMYtffvpnGzQ/Ez6F/p5PGOz4jNxve3iSQJ
aXDE1k3dhqs3UOxQFX6yQG0FR7X/k02ypsNRPYA+XHJOu0FgcRtVnptkEr0P8oJv
0T3DKnbSBVWi6FA0DPj+yyH0B6ePkYYVkvBw8GFTZODKh2PcU9+S34vbUAry9XPn
DJfCzIsgl+jrlp/eoYnW6MOJUnzdUj8gggQ0HnzoeRvsB/9LmSpd9U2R4WI2DZ6E
hAXWqk5lceW1kzZlnKtgXDRTheTP4zxrICVW1wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFKcXzewvpiUpSpMEqQi/WDhCXDbrMB8GA1UdIwQYMBaAFMLSc6Z8Bh9jCzEo
oEBMvuztIjGIMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTg2NmM0
NWIyMTc4N2UxMmFmNGRlYWZjMDg1MzAzZTc4NmY1MGIyZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDI0MTliOTItZmJiYS00MDRiLWEyMjktZjM4NjVk
NTdhNDZhLzBhODdkMzY4ZTg4ZjliNmU1OTI3YWIzYWIzYzYwYjk4ZWQzZjcwOWQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wMjQxOWI5Mi1mYmJhLTQwNGItYTIyOS1mMzg2
NWQ1N2E0NmEvMTg2NmM0NWIyMTc4N2UxMmFmNGRlYWZjMDg1MzAzZTc4NmY1MGIy
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAr6cBDANBgkqhkiG9w0BAQsFAAOCAQEAp3rpuCbRaZbkRXgr
Dxe2rnowkqBp+NigzOcLNjMPMSxihY0tzQsjflMf0kl5LTUTXSM0+HvshfjQ2xrS
L02jNRbnQIuMS0a/CbgL0+BRGoip190V9qbU6U4D2n44EA8rWvqMv5OxmR2jEQtY
X23wCNoJIcifEjSCPfE3eonOLJ10Q6z5Zv4UMUi48iwwE8S3u6hYMEs12wYn8b5Q
7IomK3vPrFOZHhtEHkNeF3y8G8KVRyGL7nga0NfXLJh4O0KWb4RC+5gPaPwSdFb+
kGArOEc0vHxjqpRcILSvAl31jimcCTSlgtYQWlM8IPFbFtXQV5WBP5oPHinHaEaC
+gVmAw==
-----END CERTIFICATE-----