Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/b3453a15aeffec9eba1913282f46ebc50ab871e9.roa
File:                     b3453a15aeffec9eba1913282f46ebc50ab871e9.roa (raw, json)
Hash identifier:          MFMt4ENH2sKbAxPLTFL0hGsVWD5ON04YDJTyxd4kEAo=
Subject key identifier:   60:F1:5C:8C:63:57:8E:60:8B:32:4E:A6:D7:06:FC:79:24:46:4E:98
Certificate issuer:       /CN=1866c45b21787e12af4deafc085303e786f50b2f
Certificate serial:       2D6497
Authority key identifier: C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/b3453a15aeffec9eba1913282f46ebc50ab871e9.roa
Signing time:             Sun 17 Mar 2024 18:43:05 +0000
ROA not before:           Sun 17 Mar 2024 18:42:19 +0000
ROA not after:            Sat 17 Mar 2029 18:42:19 +0000
asID:                     14080
IP address blocks:        186.80.44.0/24 maxlen: 24
                          186.80.45.0/24 maxlen: 24
                          186.80.46.0/24 maxlen: 24
                          186.80.47.0/24 maxlen: 24
                          186.86.255.0/24 maxlen: 24
                          186.147.142.0/24 maxlen: 24
                          186.147.143.0/24 maxlen: 24
                          190.158.112.0/24 maxlen: 24
                          190.158.113.0/24 maxlen: 24
                          190.158.114.0/24 maxlen: 24
                          190.158.115.0/24 maxlen: 24
                          181.59.214.0/24 maxlen: 24
                          181.59.215.0/24 maxlen: 24
                          181.60.133.0/24 maxlen: 24
                          181.60.134.0/24 maxlen: 24
                          181.60.135.0/24 maxlen: 24
                          181.58.222.0/24 maxlen: 24
                          181.58.223.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2974871 (0x2d6497)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1866c45b21787e12af4deafc085303e786f50b2f
        Validity
            Not Before: Mar 17 18:42:19 2024 GMT
            Not After : Mar 17 18:42:19 2029 GMT
        Subject: CN=b3453a15aeffec9eba1913282f46ebc50ab871e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:83:04:e5:f4:d8:41:26:80:d9:8e:cb:08:eb:
                    6d:1f:a0:0b:96:9b:f8:2e:2f:04:a0:3f:b6:6f:7c:
                    de:04:79:1a:e8:2a:87:71:a7:c5:ac:44:c4:a3:a7:
                    cf:54:1d:6f:db:82:d1:8a:4c:53:4f:31:11:de:a9:
                    c9:c3:b5:12:41:d0:97:85:4a:82:e7:fa:d3:41:c8:
                    ae:98:8e:ae:7c:7a:b5:91:66:c9:95:43:df:6e:f8:
                    ed:61:11:6c:4c:19:4d:c5:ce:a5:cf:11:e7:33:2a:
                    a9:ce:b3:1e:5f:e1:4e:bc:6b:36:00:6b:2f:77:4a:
                    b7:f1:0b:64:ae:94:4d:3d:c6:10:bd:da:d0:5b:53:
                    d3:b1:b2:21:00:fd:4c:23:aa:ed:24:9b:15:24:fa:
                    82:23:64:6d:fb:0e:13:ea:47:f3:eb:21:c0:84:c4:
                    7b:01:e4:25:a8:34:29:2a:5d:88:ed:dc:1c:3c:da:
                    bf:74:6c:8e:ad:52:fb:fa:dc:42:89:aa:6f:fa:3d:
                    74:75:9a:0d:fe:2e:7c:b5:c7:21:6f:07:f7:da:b7:
                    49:47:c5:7e:54:94:ca:b4:c4:10:bd:8c:db:70:4a:
                    92:ea:77:0c:23:97:3f:c2:5d:e9:5b:76:fd:72:99:
                    90:b4:15:73:1f:25:e3:d3:47:f2:35:64:c3:af:fb:
                    1e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F1:5C:8C:63:57:8E:60:8B:32:4E:A6:D7:06:FC:79:24:46:4E:98
            X509v3 Authority Key Identifier:
                keyid:C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/b3453a15aeffec9eba1913282f46ebc50ab871e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/1866c45b21787e12af4deafc085303e786f50b2f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.58.222.0/23
                  181.59.214.0/23
                  181.60.133.0-181.60.135.255
                  186.80.44.0/22
                  186.86.255.0/24
                  186.147.142.0/23
                  190.158.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:4f:e5:8e:e9:fb:7e:88:87:9e:11:97:47:82:fc:a2:5c:c2:
         5d:c2:fc:a4:c9:00:03:cc:76:e6:f9:07:8a:43:92:c6:50:99:
         2d:45:b0:eb:54:66:3f:df:71:73:25:6e:85:f8:19:97:c3:f6:
         49:5e:1e:73:b1:56:07:4d:9b:4e:58:a7:7f:a7:ca:2c:22:9c:
         70:00:57:ee:85:0e:6e:5d:de:ee:f3:9e:0c:4e:f0:75:c3:4f:
         c2:c8:7f:b1:86:28:19:18:37:4c:36:29:dc:ce:6e:2a:34:3b:
         bb:d2:53:b8:13:3e:ee:2f:0f:65:0d:1a:7e:2c:05:73:d9:59:
         cb:db:40:a9:12:7e:0c:60:0e:28:83:f0:36:9e:e9:39:97:ca:
         a9:6b:30:a1:6f:f7:72:be:6b:e7:72:6d:52:00:e6:29:6f:76:
         fe:88:1a:d6:c2:58:08:ba:b8:88:e9:0c:12:3c:b1:57:ee:87:
         26:54:e1:c1:13:b7:22:01:64:41:6f:6f:be:69:9d:10:01:2d:
         35:4a:42:c5:b2:29:11:e4:79:8f:30:50:3e:9a:08:6c:d2:6e:
         f0:58:78:49:bb:83:59:f6:2f:f3:ce:82:cd:85:75:3a:2c:ff:
         c4:3d:4a:62:5c:ab:37:e0:9f:cd:4e:f0:f0:c6:91:5c:02:1c:
         cf:e4:a0:6d
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIDLWSXMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE4
NjZjNDViMjE3ODdlMTJhZjRkZWFmYzA4NTMwM2U3ODZmNTBiMmYwHhcNMjQwMzE3
MTg0MjE5WhcNMjkwMzE3MTg0MjE5WjAzMTEwLwYDVQQDEyhiMzQ1M2ExNWFlZmZl
YzllYmExOTEzMjgyZjQ2ZWJjNTBhYjg3MWU5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArIME5fTYQSaA2Y7LCOttH6ALlpv4Li8EoD+2b3zeBHka6CqH
cafFrETEo6fPVB1v24LRikxTTzER3qnJw7USQdCXhUqC5/rTQciumI6ufHq1kWbJ
lUPfbvjtYRFsTBlNxc6lzxHnMyqpzrMeX+FOvGs2AGsvd0q38QtkrpRNPcYQvdrQ
W1PTsbIhAP1MI6rtJJsVJPqCI2Rt+w4T6kfz6yHAhMR7AeQlqDQpKl2I7dwcPNq/
dGyOrVL7+txCiapv+j10dZoN/i58tcchbwf32rdJR8V+VJTKtMQQvYzbcEqS6ncM
I5c/wl3pW3b9cpmQtBVzHyXj00fyNWTDr/sedQIDAQABo4IChzCCAoMwHQYDVR0O
BBYEFGDxXIxjV45gizJOptcG/HkkRk6YMB8GA1UdIwQYMBaAFMLSc6Z8Bh9jCzEo
oEBMvuztIjGIMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTg2NmM0
NWIyMTc4N2UxMmFmNGRlYWZjMDg1MzAzZTc4NmY1MGIyZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDI0MTliOTItZmJiYS00MDRiLWEyMjktZjM4NjVk
NTdhNDZhL2IzNDUzYTE1YWVmZmVjOWViYTE5MTMyODJmNDZlYmM1MGFiODcxZTku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wMjQxOWI5Mi1mYmJhLTQwNGItYTIyOS1mMzg2
NWQ1N2E0NmEvMTg2NmM0NWIyMTc4N2UxMmFmNGRlYWZjMDg1MzAzZTc4NmY1MGIy
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBLBggrBgEFBQcBBwEB/wQ8
MDowOAQCAAEwMgMEAbU63gMEAbU71jAMAwQAtTyFAwQDtTyAAwQCulAsAwQAulb/
AwQBupOOAwQCvp5wMA0GCSqGSIb3DQEBCwUAA4IBAQBxT+WO6ft+iIeeEZdHgvyi
XMJdwvykyQADzHbm+QeKQ5LGUJktRbDrVGY/33FzJW6F+BmXw/ZJXh5zsVYHTZtO
WKd/p8osIpxwAFfuhQ5uXd7u854MTvB1w0/CyH+xhigZGDdMNinczm4qNDu70lO4
Ez7uLw9lDRp+LAVz2VnL20CpEn4MYA4og/A2nuk5l8qpazChb/dyvmvncm1SAOYp
b3b+iBrWwlgIuriI6QwSPLFX7ocmVOHBE7ciAWRBb2++aZ0QAS01SkLFsikR5HmP
MFA+mghs0m7wWHhJu4NZ9i/zzoLNhXU6LP/EPUpiXKs34J/NTvDwxpFcAhzP5KBt
-----END CERTIFICATE-----