Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c5eb4eb-bb0e-4190-9762-cb00b8498c4d/e54346ab203760f314571e3be036dd1a14f2afac.roa
File:                     e54346ab203760f314571e3be036dd1a14f2afac.roa (raw, json)
Hash identifier:          i4/06TB4RtjXyEyT412zzM5MzxvAiF4haDxie+/AOv0=
Subject key identifier:   99:02:C6:6C:22:3E:98:C2:89:71:AF:B0:40:75:1A:F1:63:A5:D5:3F
Certificate issuer:       /CN=0eefd3ca564e9210c3e5d7e79504f7fd6e635260
Certificate serial:       23A159
Authority key identifier: EE:82:5D:83:CE:B3:3E:5B:AF:24:99:89:04:8D:ED:3F:92:5C:20:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0eefd3ca564e9210c3e5d7e79504f7fd6e635260.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0c5eb4eb-bb0e-4190-9762-cb00b8498c4d/e54346ab203760f314571e3be036dd1a14f2afac.roa
Signing time:             Wed 13 Sep 2023 18:23:09 +0000
ROA not before:           Tue 12 Sep 2023 18:23:09 +0000
ROA not after:            Sat 13 Sep 2025 18:23:09 +0000
asID:                     27659
IP address blocks:        190.14.48.0/20 maxlen: 23
                          200.6.96.0/19 maxlen: 23
                          2803:aa00::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2335065 (0x23a159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eefd3ca564e9210c3e5d7e79504f7fd6e635260
        Validity
            Not Before: Sep 12 18:23:09 2023 GMT
            Not After : Sep 13 18:23:09 2025 GMT
        Subject: CN=e54346ab203760f314571e3be036dd1a14f2afac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fb:c2:c9:97:4a:9e:de:41:8a:66:0e:03:fd:
                    a4:92:0d:21:c3:8e:23:63:bd:6c:10:63:a9:58:b7:
                    fd:b9:0b:ee:d2:f9:ae:6b:0e:66:a9:6d:d7:9c:69:
                    f8:49:4a:63:46:69:a1:9a:c3:7d:67:37:0f:85:60:
                    bb:82:dd:53:3f:c2:98:78:34:c6:e6:f6:50:b8:05:
                    c9:68:9b:30:c9:95:37:07:75:b1:b0:dc:71:e4:98:
                    c5:97:a5:65:74:62:28:18:6b:3c:40:51:a9:dc:4b:
                    ad:78:78:20:11:9c:3c:b9:f3:cd:a2:52:51:f6:2f:
                    b4:57:dd:ae:75:5a:80:76:ca:60:3b:1d:a9:4c:55:
                    eb:0b:1c:c5:cd:b9:03:79:b0:77:88:3b:f8:7a:3f:
                    fa:03:4d:58:7a:51:75:ef:22:56:9d:2a:c7:54:1b:
                    eb:1e:bc:ce:ef:22:d2:19:e8:b5:01:32:e2:0e:7d:
                    2a:39:23:86:8a:0e:2a:9d:c8:17:bf:6b:50:33:b6:
                    ff:3e:3b:08:d2:cb:ed:b6:cf:46:02:55:21:96:bb:
                    d2:24:fb:47:00:3a:52:51:dc:e4:55:c0:dd:62:5c:
                    5d:71:e9:c1:9f:05:aa:47:21:e5:c9:05:22:aa:f0:
                    28:8a:6c:3e:85:58:2c:3b:59:22:33:d3:74:98:3e:
                    54:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:02:C6:6C:22:3E:98:C2:89:71:AF:B0:40:75:1A:F1:63:A5:D5:3F
            X509v3 Authority Key Identifier:
                keyid:EE:82:5D:83:CE:B3:3E:5B:AF:24:99:89:04:8D:ED:3F:92:5C:20:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0eefd3ca564e9210c3e5d7e79504f7fd6e635260.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c5eb4eb-bb0e-4190-9762-cb00b8498c4d/e54346ab203760f314571e3be036dd1a14f2afac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0c5eb4eb-bb0e-4190-9762-cb00b8498c4d/0eefd3ca564e9210c3e5d7e79504f7fd6e635260.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.48.0/20
                  200.6.96.0/19
                IPv6:
                  2803:aa00::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:37:e6:5c:bc:12:0a:ac:fa:11:a3:b0:98:21:ab:20:c4:17:
         fc:8c:ef:53:c0:a9:77:5c:d8:b2:da:6d:02:f1:83:51:26:c4:
         67:e8:73:08:75:91:59:2a:6d:53:da:a4:7c:62:a5:dd:bb:f5:
         ec:c3:a0:88:f8:da:fe:b3:ac:ea:d8:c0:24:c9:5c:ff:e9:ed:
         8c:5c:62:0f:fc:94:8a:11:cf:ac:48:cf:3a:58:ae:20:7b:b8:
         90:bf:45:e1:12:59:e0:86:3d:77:db:3f:2c:b4:79:f8:82:4e:
         cc:8b:5d:3f:47:3d:84:7f:2f:6a:d9:b3:4b:83:be:f4:10:d6:
         7d:0b:55:41:03:98:4d:f8:5e:0e:59:7c:e6:d1:3b:80:69:c8:
         0e:ac:ef:ed:6a:77:9f:90:df:58:bd:4a:2c:a8:f2:f7:68:93:
         b3:da:fb:aa:a8:0e:e2:96:7d:1d:53:97:44:d5:89:81:8e:11:
         90:4f:05:64:42:e1:e6:20:da:e7:43:3c:e1:0e:3d:d5:57:59:
         ab:20:40:10:27:cc:3a:bf:b1:0c:a9:e0:5c:60:c2:50:17:5f:
         23:07:e3:a1:d8:84:c2:01:1c:f6:87:74:0c:90:79:76:74:9f:
         a3:82:64:77:f9:70:2a:a2:c5:18:8f:03:10:e6:ac:46:95:1d:
         6b:f9:20:55
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgIDI6FZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDBl
ZWZkM2NhNTY0ZTkyMTBjM2U1ZDdlNzk1MDRmN2ZkNmU2MzUyNjAwHhcNMjMwOTEy
MTgyMzA5WhcNMjUwOTEzMTgyMzA5WjAzMTEwLwYDVQQDEyhlNTQzNDZhYjIwMzc2
MGYzMTQ1NzFlM2JlMDM2ZGQxYTE0ZjJhZmFjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArvvCyZdKnt5BimYOA/2kkg0hw44jY71sEGOpWLf9uQvu0vmu
aw5mqW3XnGn4SUpjRmmhmsN9ZzcPhWC7gt1TP8KYeDTG5vZQuAXJaJswyZU3B3Wx
sNxx5JjFl6VldGIoGGs8QFGp3EuteHggEZw8ufPNolJR9i+0V92udVqAdspgOx2p
TFXrCxzFzbkDebB3iDv4ej/6A01YelF17yJWnSrHVBvrHrzO7yLSGei1ATLiDn0q
OSOGig4qncgXv2tQM7b/PjsI0svtts9GAlUhlrvSJPtHADpSUdzkVcDdYlxdcenB
nwWqRyHlyQUiqvAoimw+hVgsO1kiM9N0mD5UrQIDAQABo4ICcDCCAmwwHQYDVR0O
BBYEFJkCxmwiPpjCiXGvsEB1GvFjpdU/MB8GA1UdIwQYMBaAFO6CXYPOsz5brySZ
iQSN7T+SXCCsMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMGVlZmQz
Y2E1NjRlOTIxMGMzZTVkN2U3OTUwNGY3ZmQ2ZTYzNTI2MC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMGM1ZWI0ZWItYmIwZS00MTkwLTk3NjItY2IwMGI4
NDk4YzRkL2U1NDM0NmFiMjAzNzYwZjMxNDU3MWUzYmUwMzZkZDFhMTRmMmFmYWMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wYzVlYjRlYi1iYjBlLTQxOTAtOTc2Mi1jYjAw
Yjg0OThjNGQvMGVlZmQzY2E1NjRlOTIxMGMzZTVkN2U3OTUwNGY3ZmQ2ZTYzNTI2
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQl
MCMwEgQCAAEwDAMEBL4OMAMEBcgGYDANBAIAAjAHAwUAKAOqADANBgkqhkiG9w0B
AQsFAAOCAQEAQTfmXLwSCqz6EaOwmCGrIMQX/IzvU8Cpd1zYstptAvGDUSbEZ+hz
CHWRWSptU9qkfGKl3bv17MOgiPja/rOs6tjAJMlc/+ntjFxiD/yUihHPrEjPOliu
IHu4kL9F4RJZ4IY9d9s/LLR5+IJOzItdP0c9hH8vatmzS4O+9BDWfQtVQQOYTfhe
Dll85tE7gGnIDqzv7Wp3n5DfWL1KLKjy92iTs9r7qqgO4pZ9HVOXRNWJgY4RkE8F
ZELh5iDa50M84Q491VdZqyBAECfMOr+xDKngXGDCUBdfIwfjodiEwgEc9od0DJB5
dnSfo4Jkd/lwKqLFGI8DEOasRpUda/kgVQ==
-----END CERTIFICATE-----