Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/3230372e3234382e3136302e302f31392d3139203d3e2034323434.roa
File:                     3230372e3234382e3136302e302f31392d3139203d3e2034323434.roa (raw, json)
Hash identifier:          4V8QC2zGiqknOWTmMxhMNMT0kt/McQGlN5HQBeIlpFM=
Subject key identifier:   4A:F6:BF:F5:94:AF:DF:19:D1:B8:A7:DA:EE:AC:CB:30:54:74:3A:56
Certificate issuer:       /CN=C8F3196C76958256E0627C6E7C0CC9582BF1EBD0
Certificate serial:       1EB28E55FF53925C08D26367B819208A035CB59D
Authority key identifier: C8:F3:19:6C:76:95:82:56:E0:62:7C:6E:7C:0C:C9:58:2B:F1:EB:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C8F3196C76958256E0627C6E7C0CC9582BF1EBD0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/3230372e3234382e3136302e302f31392d3139203d3e2034323434.roa
Signing time:             Tue 30 Jul 2024 16:50:01 +0000
ROA not before:           Tue 30 Jul 2024 16:45:01 +0000
ROA not after:            Tue 29 Jul 2025 16:50:01 +0000
asID:                     4244
IP address blocks:        207.248.160.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:b2:8e:55:ff:53:92:5c:08:d2:63:67:b8:19:20:8a:03:5c:b5:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8F3196C76958256E0627C6E7C0CC9582BF1EBD0
        Validity
            Not Before: Jul 30 16:45:01 2024 GMT
            Not After : Jul 29 16:50:01 2025 GMT
        Subject: CN=4AF6BFF594AFDF19D1B8A7DAEEACCB3054743A56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b6:9a:2f:aa:2a:02:08:62:f2:88:72:23:b5:
                    83:58:80:7f:87:8b:1d:ba:b4:41:cf:70:fe:bc:2f:
                    30:4c:5a:ef:08:09:52:18:c8:ee:f9:c8:09:0e:20:
                    f8:b9:d7:67:b3:68:ef:61:c0:69:d2:80:da:d0:35:
                    78:fd:2d:8c:dd:80:11:b1:fd:8c:cd:2c:40:fb:2d:
                    4b:df:2d:7d:f9:ad:d6:c5:45:bc:4a:69:a6:d0:fa:
                    97:25:03:0c:aa:89:0d:2f:e4:d9:de:54:58:b6:9f:
                    bc:6b:ba:f4:f4:44:cb:7f:f4:e7:d8:54:e6:f8:9c:
                    3d:79:36:e5:09:15:5a:70:b1:97:e9:b3:9b:39:71:
                    f1:72:69:38:ce:75:21:ac:72:fe:62:a1:32:89:c2:
                    18:e0:45:8c:57:9e:42:49:f1:cd:18:3b:2a:27:75:
                    07:8b:42:e5:07:89:e9:37:8a:9d:76:36:72:67:9f:
                    49:74:e0:57:f3:e5:7a:98:ac:7a:f2:79:1f:51:c7:
                    a0:ae:a9:90:d4:ce:f9:2d:4f:f5:a0:46:82:e1:49:
                    6a:a4:17:5a:63:1c:b6:dd:d9:95:71:c0:cf:7b:a0:
                    e5:2b:44:30:49:14:d5:48:a9:3a:a7:99:c9:54:7b:
                    95:74:49:68:eb:19:85:ca:fa:9a:e5:ba:fb:51:8b:
                    43:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F6:BF:F5:94:AF:DF:19:D1:B8:A7:DA:EE:AC:CB:30:54:74:3A:56
            X509v3 Authority Key Identifier:
                keyid:C8:F3:19:6C:76:95:82:56:E0:62:7C:6E:7C:0C:C9:58:2B:F1:EB:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/C8F3196C76958256E0627C6E7C0CC9582BF1EBD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C8F3196C76958256E0627C6E7C0CC9582BF1EBD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/3230372e3234382e3136302e302f31392d3139203d3e2034323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         39:4f:88:50:af:c9:4e:32:ba:7a:0f:e4:dc:6a:39:78:aa:f3:
         ff:f1:07:51:9e:b2:56:5a:68:4f:9d:0d:8c:44:ca:8e:e0:c4:
         75:90:1e:87:24:48:50:b2:7b:49:08:2c:08:6b:db:aa:53:1e:
         58:d0:aa:4d:f3:0d:ff:b2:7d:2a:86:e8:87:a3:ea:71:1e:93:
         d8:de:68:5c:ca:d6:9f:cb:86:97:23:f7:4c:d4:1e:62:9f:15:
         78:fa:53:26:03:e8:ab:08:77:c0:aa:f5:f5:f1:31:2a:24:19:
         0e:64:a4:39:d2:13:0b:e5:7d:36:1c:34:e4:82:d4:ec:e3:f1:
         7c:9c:dc:2d:c2:f8:69:ac:50:aa:55:a5:08:71:ae:24:7b:64:
         62:4e:b2:72:9c:31:6d:d0:40:fa:98:1e:5c:97:e8:50:de:1f:
         74:3f:67:f2:43:9c:0c:d3:48:af:7f:8d:0f:97:3d:78:5d:d6:
         f5:12:65:d4:4f:3d:e8:27:36:3c:e2:b2:6b:d0:34:8a:a7:04:
         2b:bc:54:3f:57:f6:b2:4a:dc:19:8f:af:4f:ae:c4:e7:38:52:
         33:17:0a:88:4f:02:01:b9:f4:c7:d1:3b:ba:73:9e:08:64:99:
         48:ee:e7:04:32:c7:d8:53:1d:f8:9b:61:7e:a1:6a:0e:bd:2e:
         ba:52:f5:bf
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUHrKOVf9TklwI0mNnuBkgigNctZ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzhGMzE5NkM3Njk1ODI1NkUwNjI3QzZFN0MwQ0M5NTgy
QkYxRUJEMDAeFw0yNDA3MzAxNjQ1MDFaFw0yNTA3MjkxNjUwMDFaMDMxMTAvBgNV
BAMTKDRBRjZCRkY1OTRBRkRGMTlEMUI4QTdEQUVFQUNDQjMwNTQ3NDNBNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJtpovqioCCGLyiHIjtYNYgH+H
ix26tEHPcP68LzBMWu8ICVIYyO75yAkOIPi512ezaO9hwGnSgNrQNXj9LYzdgBGx
/YzNLED7LUvfLX35rdbFRbxKaabQ+pclAwyqiQ0v5NneVFi2n7xruvT0RMt/9OfY
VOb4nD15NuUJFVpwsZfps5s5cfFyaTjOdSGscv5ioTKJwhjgRYxXnkJJ8c0YOyon
dQeLQuUHiek3ip12NnJnn0l04Ffz5XqYrHryeR9Rx6CuqZDUzvktT/WgRoLhSWqk
F1pjHLbd2ZVxwM97oOUrRDBJFNVIqTqnmclUe5V0SWjrGYXK+prluvtRi0N9AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUSva/9ZSv3xnRuKfa7qzLMFR0OlYwHwYDVR0j
BBgwFoAUyPMZbHaVglbgYnxufAzJWCvx69AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xOEQ0NkZCMzhGQ0VBNUU3RTg4MDUxREFFQzNGMEU3QTU4
ODRBNkE4NzJEM0FBNDhERTY2NEY4MUE3RDY0RERBLzAvQzhGMzE5NkM3Njk1ODI1
NkUwNjI3QzZFN0MwQ0M5NTgyQkYxRUJEMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DOEYzMTk2Qzc2OTU4MjU2RTA2
MjdDNkU3QzBDQzk1ODJCRjFFQkQwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMThENDZGQjM4RkNFQTVFN0U4ODA1MURBRUMzRjBFN0E1ODg0QTZBODcy
RDNBQTQ4REU2NjRGODFBN0Q2NEREQS8wLzMyMzAzNzJlMzIzNDM4MmUzMTM2MzAy
ZTMwMmYzMTM5MmQzMTM5MjAzZDNlMjAzNDMyMzQzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBc/4oDAN
BgkqhkiG9w0BAQsFAAOCAQEAOU+IUK/JTjK6eg/k3Go5eKrz//EHUZ6yVlpoT50N
jETKjuDEdZAehyRIULJ7SQgsCGvbqlMeWNCqTfMN/7J9Koboh6PqcR6T2N5oXMrW
n8uGlyP3TNQeYp8VePpTJgPoqwh3wKr19fExKiQZDmSkOdITC+V9Nhw05ILU7OPx
fJzcLcL4aaxQqlWlCHGuJHtkYk6ycpwxbdBA+pgeXJfoUN4fdD9n8kOcDNNIr3+N
D5c9eF3W9RJl1E896Cc2POKya9A0iqcEK7xUP1f2skrcGY+vT67E5zhSMxcKiE8C
Abn0x9E7unOeCGSZSO7nBDLH2FMd+JthfqFqDr0uulL1vw==
-----END CERTIFICATE-----