Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/abdb7e046832ec54f6e09d9101fd4467cd7ef496.roa
File:                     abdb7e046832ec54f6e09d9101fd4467cd7ef496.roa (raw, json)
Hash identifier:          zpdpKZOoITn4nM2Uau6EimDmlWH8ZV0TPWl3iDLnHXA=
Subject key identifier:   3E:7A:0C:A3:0C:3E:F7:00:4C:F2:D5:9B:13:BB:6E:2E:BA:63:77:5F
Certificate issuer:       /CN=1866c45b21787e12af4deafc085303e786f50b2f
Certificate serial:       2DB123
Authority key identifier: C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/abdb7e046832ec54f6e09d9101fd4467cd7ef496.roa
Signing time:             Sun 17 Mar 2024 18:44:06 +0000
ROA not before:           Sun 17 Mar 2024 18:42:19 +0000
ROA not after:            Sat 17 Mar 2029 18:42:19 +0000
asID:                     14080
IP address blocks:        186.147.0.0/16 maxlen: 24
                          186.80.0.0/16 maxlen: 24
                          186.81.0.0/16 maxlen: 24
                          186.82.0.0/16 maxlen: 24
                          186.83.0.0/16 maxlen: 24
                          181.49.76.0/22 maxlen: 24
                          190.145.228.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2994467 (0x2db123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1866c45b21787e12af4deafc085303e786f50b2f
        Validity
            Not Before: Mar 17 18:42:19 2024 GMT
            Not After : Mar 17 18:42:19 2029 GMT
        Subject: CN=abdb7e046832ec54f6e09d9101fd4467cd7ef496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:00:e2:72:a5:cb:e6:25:48:01:d0:e8:0f:1b:
                    13:31:fb:53:20:cc:4f:05:54:06:5c:e1:95:aa:39:
                    9e:0c:87:92:71:e2:39:04:29:81:85:bc:eb:76:df:
                    74:f4:9a:ae:bb:88:86:26:50:af:7f:db:e6:8b:53:
                    ce:65:2a:94:b3:a0:15:1b:9a:da:11:9f:9e:22:00:
                    55:b0:47:a1:a8:4d:98:5a:c8:f3:f0:0d:53:e1:e0:
                    f0:5d:96:4a:82:7a:24:68:53:83:7f:cb:d3:a0:84:
                    a9:30:3e:f0:30:b6:0d:49:95:68:fb:80:d8:65:62:
                    f6:a2:56:06:a7:27:8b:a6:a9:56:7b:a6:8a:6f:bc:
                    9a:3c:ac:93:44:90:96:5e:a6:94:98:8f:0d:61:d5:
                    68:ea:37:e6:89:fc:02:dd:55:36:2e:50:2d:73:0e:
                    64:32:fd:3e:4c:66:c3:66:52:99:89:32:e7:ee:f5:
                    a6:a6:40:c9:c5:7f:06:5a:b6:38:61:59:bb:98:8f:
                    17:7e:ac:b3:7c:0e:cc:f3:96:f9:a2:0d:66:aa:71:
                    30:43:08:0b:dc:2d:e9:a0:ee:eb:54:77:4c:15:3a:
                    b3:0c:cd:73:9c:96:60:ba:28:f0:0d:ef:2d:a6:6e:
                    66:d7:48:8e:ed:86:d7:5c:d0:77:9f:39:67:60:88:
                    46:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:7A:0C:A3:0C:3E:F7:00:4C:F2:D5:9B:13:BB:6E:2E:BA:63:77:5F
            X509v3 Authority Key Identifier:
                keyid:C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/abdb7e046832ec54f6e09d9101fd4467cd7ef496.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/1866c45b21787e12af4deafc085303e786f50b2f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.49.76.0/22
                  186.80.0.0/14
                  186.147.0.0/16
                  190.145.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:6a:33:f1:b9:35:e2:67:e0:9c:66:82:0a:b3:b1:18:1f:71:
         1d:46:21:47:66:c2:b3:66:6b:37:96:a4:d9:6d:25:08:77:f5:
         90:8b:3b:4b:c5:b3:2a:01:55:2f:72:7f:da:32:ca:23:fc:f2:
         9a:5c:5d:14:aa:74:73:2a:ca:93:b5:42:2f:1b:e5:02:bc:c2:
         62:ed:ba:f6:3d:85:41:2b:39:ce:d6:60:ca:20:99:d5:af:af:
         04:7f:a1:20:51:b9:9a:ca:f4:e9:4b:ef:fa:d0:89:f2:3d:68:
         4a:18:01:20:89:a2:a2:8b:a4:2f:45:aa:9b:e6:96:d6:b4:50:
         f1:16:e9:ec:5b:8f:35:f2:81:00:bb:e6:73:8b:9b:ff:c7:7e:
         a3:9d:8f:b0:bb:80:4a:3a:cc:9a:b2:66:28:5d:b9:f8:aa:54:
         64:20:50:cc:5c:09:c6:ce:b5:82:84:ea:9f:6f:94:6d:4d:dc:
         11:af:3a:51:d5:59:f6:f2:5f:1c:73:35:e9:4e:12:4b:7a:63:
         ab:c5:d8:21:f9:49:8c:52:e5:f8:ef:c4:76:bb:3f:4d:d8:dd:
         0f:84:a1:3d:a0:10:22:23:93:41:8c:2c:e4:92:ac:61:a1:b8:
         5e:46:e1:9d:12:4a:71:b3:c1:ca:69:40:6e:d4:08:b4:d0:fd:
         6d:8f:dd:cb
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIDLbEjMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE4
NjZjNDViMjE3ODdlMTJhZjRkZWFmYzA4NTMwM2U3ODZmNTBiMmYwHhcNMjQwMzE3
MTg0MjE5WhcNMjkwMzE3MTg0MjE5WjAzMTEwLwYDVQQDEyhhYmRiN2UwNDY4MzJl
YzU0ZjZlMDlkOTEwMWZkNDQ2N2NkN2VmNDk2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAowDicqXL5iVIAdDoDxsTMftTIMxPBVQGXOGVqjmeDIeSceI5
BCmBhbzrdt909Jquu4iGJlCvf9vmi1POZSqUs6AVG5raEZ+eIgBVsEehqE2YWsjz
8A1T4eDwXZZKgnokaFODf8vToISpMD7wMLYNSZVo+4DYZWL2olYGpyeLpqlWe6aK
b7yaPKyTRJCWXqaUmI8NYdVo6jfmifwC3VU2LlAtcw5kMv0+TGbDZlKZiTLn7vWm
pkDJxX8GWrY4YVm7mI8XfqyzfA7M85b5og1mqnEwQwgL3C3poO7rVHdMFTqzDM1z
nJZguijwDe8tpm5m10iO7YbXXNB3nzlnYIhG6wIDAQABo4ICazCCAmcwHQYDVR0O
BBYEFD56DKMMPvcATPLVmxO7bi66Y3dfMB8GA1UdIwQYMBaAFMLSc6Z8Bh9jCzEo
oEBMvuztIjGIMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTg2NmM0
NWIyMTc4N2UxMmFmNGRlYWZjMDg1MzAzZTc4NmY1MGIyZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDI0MTliOTItZmJiYS00MDRiLWEyMjktZjM4NjVk
NTdhNDZhL2FiZGI3ZTA0NjgzMmVjNTRmNmUwOWQ5MTAxZmQ0NDY3Y2Q3ZWY0OTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wMjQxOWI5Mi1mYmJhLTQwNGItYTIyOS1mMzg2
NWQ1N2E0NmEvMTg2NmM0NWIyMTc4N2UxMmFmNGRlYWZjMDg1MzAzZTc4NmY1MGIy
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAvBggrBgEFBQcBBwEB/wQg
MB4wHAQCAAEwFgMEArUxTAMDArpQAwMAupMDBAG+keQwDQYJKoZIhvcNAQELBQAD
ggEBAEFqM/G5NeJn4JxmggqzsRgfcR1GIUdmwrNmazeWpNltJQh39ZCLO0vFsyoB
VS9yf9oyyiP88ppcXRSqdHMqypO1Qi8b5QK8wmLtuvY9hUErOc7WYMogmdWvrwR/
oSBRuZrK9OlL7/rQifI9aEoYASCJoqKLpC9Fqpvmlta0UPEW6exbjzXygQC75nOL
m//HfqOdj7C7gEo6zJqyZihdufiqVGQgUMxcCcbOtYKE6p9vlG1N3BGvOlHVWfby
XxxzNelOEkt6Y6vF2CH5SYxS5fjvxHa7P03Y3Q+EoT2gECIjk0GMLOSSrGGhuF5G
4Z0SSnGzwcppQG7UCLTQ/W2P3cs=
-----END CERTIFICATE-----