Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/03efe43f-f1e5-4542-b99a-8f07fad1d4d1/91d76eb33967f9c616132ae0115ccaa674f235d7.roa
File:                     91d76eb33967f9c616132ae0115ccaa674f235d7.roa (raw, json)
Hash identifier:          4LGM6DwuwJLTbg8mI/xlILt3Ay39O/oJR8uooP6y+Hk=
Subject key identifier:   32:D4:D3:CE:25:49:3F:57:8C:64:D8:DB:EA:6A:9F:4F:75:2C:B9:AC
Certificate issuer:       /CN=73c54cefdcda0c2f8f7a0b8822f7e92c8f371519
Certificate serial:       246EAE
Authority key identifier: E5:AF:26:E5:C8:C4:04:C9:ED:A7:DB:5B:6D:AE:F8:16:A2:71:0A:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/73c54cefdcda0c2f8f7a0b8822f7e92c8f371519.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/03efe43f-f1e5-4542-b99a-8f07fad1d4d1/91d76eb33967f9c616132ae0115ccaa674f235d7.roa
Signing time:             Mon 18 Sep 2023 11:01:52 +0000
ROA not before:           Sun 17 Sep 2023 11:01:52 +0000
ROA not after:            Thu 18 Sep 2025 11:01:52 +0000
asID:                     28073
IP address blocks:        190.2.80.0/21 maxlen: 24
                          170.84.128.0/22 maxlen: 24
                          190.0.232.0/21 maxlen: 24
                          190.123.144.0/20 maxlen: 24
                          2803:4700::/31 maxlen: 37

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2387630 (0x246eae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c54cefdcda0c2f8f7a0b8822f7e92c8f371519
        Validity
            Not Before: Sep 17 11:01:52 2023 GMT
            Not After : Sep 18 11:01:52 2025 GMT
        Subject: CN=91d76eb33967f9c616132ae0115ccaa674f235d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:16:d6:f9:4a:72:79:51:cc:40:69:2d:58:57:
                    54:e6:a4:dc:ec:f1:93:39:87:78:b9:9c:9a:39:3f:
                    34:97:ed:1c:c6:c7:68:18:c0:a6:60:9f:ce:4c:a9:
                    f3:b9:d4:40:03:b7:8e:e1:ea:dd:a2:4a:10:15:ec:
                    7b:62:c1:f8:59:e9:76:14:02:13:8c:31:ba:f8:c2:
                    68:2d:16:1d:d4:4e:4f:6e:b8:b2:51:fd:d6:be:9d:
                    1f:2c:b3:5a:dd:66:a8:00:ac:e7:b7:6a:a4:2d:0b:
                    b8:c0:f4:8a:ef:11:55:72:5a:97:29:a9:d7:fe:df:
                    4c:a0:db:20:4e:bb:79:73:50:8a:a3:90:3a:70:c2:
                    64:96:81:22:61:7d:f4:e7:0f:93:8f:e6:af:e1:49:
                    85:e5:fe:06:ff:13:c3:e4:54:0b:c4:6b:c1:1f:4c:
                    2f:12:3a:09:42:3d:7f:5a:8f:bc:42:8e:77:36:6e:
                    63:33:0b:8e:45:c0:b8:28:d1:f2:29:27:db:65:20:
                    b8:b2:73:e8:49:fc:a4:bd:09:e3:3c:69:ad:a1:de:
                    c7:47:5d:96:58:25:1d:fa:f7:54:99:51:79:b6:44:
                    21:db:b7:83:2a:18:13:90:7b:4d:ae:1c:ef:79:80:
                    8d:c7:54:08:d6:47:26:ac:43:3c:51:b1:7d:34:6c:
                    25:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D4:D3:CE:25:49:3F:57:8C:64:D8:DB:EA:6A:9F:4F:75:2C:B9:AC
            X509v3 Authority Key Identifier:
                keyid:E5:AF:26:E5:C8:C4:04:C9:ED:A7:DB:5B:6D:AE:F8:16:A2:71:0A:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/73c54cefdcda0c2f8f7a0b8822f7e92c8f371519.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/03efe43f-f1e5-4542-b99a-8f07fad1d4d1/91d76eb33967f9c616132ae0115ccaa674f235d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/03efe43f-f1e5-4542-b99a-8f07fad1d4d1/73c54cefdcda0c2f8f7a0b8822f7e92c8f371519.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.128.0/22
                  190.0.232.0/21
                  190.2.80.0/21
                  190.123.144.0/20
                IPv6:
                  2803:4700::/31

    Signature Algorithm: sha256WithRSAEncryption
         0b:5c:d2:bd:1f:9a:07:c6:45:34:b1:f8:5c:7d:90:99:84:fd:
         1e:62:2d:cb:a5:f6:2d:b4:90:c5:15:99:36:1e:88:cb:fd:7c:
         bb:00:ca:12:28:78:e1:58:3d:0c:de:8b:dd:a3:9c:f8:51:0a:
         6a:28:b7:f4:cc:d8:fb:c5:83:1b:de:90:21:6a:f4:ea:03:43:
         eb:d6:22:87:e6:fd:79:b6:bb:da:73:35:e9:0e:90:a5:92:96:
         f3:ec:f5:a2:3c:05:c5:9d:d6:d6:c3:5b:7c:9b:04:32:32:ed:
         4f:e0:77:c8:1b:69:43:71:2c:ca:eb:c6:c4:1b:94:0d:30:08:
         ac:4e:a7:ed:02:17:fc:5b:cf:24:46:ea:bb:9a:cb:9c:24:30:
         71:4e:6f:80:50:94:2b:34:c0:3e:2c:a0:a5:dc:48:de:e9:55:
         b4:da:d4:de:d5:41:73:f8:99:ed:e0:4f:fe:bb:00:28:8c:a1:
         24:7f:33:1a:65:f9:8d:59:67:76:95:dd:fa:8c:64:23:83:71:
         a4:f4:f9:92:5d:6d:54:d4:64:63:c9:5e:8c:eb:7b:c6:44:f2:
         65:29:4b:15:d7:1d:2b:c5:4e:40:32:3e:8f:1b:7d:24:5f:a7:
         2b:e0:99:fc:7b:90:5c:1c:16:94:d7:a3:45:2f:2a:37:01:51:
         22:11:4d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----