Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cd00567-4106-40ca-bbc1-1b069b60a78e/ad3286601996c3a0bf9f6122d58fccbc01391f65.roa
File:                     ad3286601996c3a0bf9f6122d58fccbc01391f65.roa (raw, json)
Hash identifier:          si1CdaOXdjSA+rSt0zy3XjWuAUl613sEDynXWfExA5E=
Subject key identifier:   A1:69:62:71:89:22:FC:32:5C:9D:09:74:94:6F:48:C0:F4:84:1B:34
Certificate issuer:       /CN=1159fdc4276fa3bfc64df717e4ca0a75249cf188
Certificate serial:       21E2D1
Authority key identifier: 2C:D3:D3:7E:8A:EA:10:A8:12:4B:D1:A2:E2:4C:0A:CC:C3:E1:A3:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1159fdc4276fa3bfc64df717e4ca0a75249cf188.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cd00567-4106-40ca-bbc1-1b069b60a78e/ad3286601996c3a0bf9f6122d58fccbc01391f65.roa
Signing time:             Wed 19 Jul 2023 19:58:11 +0000
ROA not before:           Tue 18 Jul 2023 19:58:11 +0000
ROA not after:            Sat 19 Jul 2025 19:58:11 +0000
asID:                     13489
IP address blocks:        190.28.0.0/15 maxlen: 16
                          201.232.0.0/15 maxlen: 16
                          201.184.0.0/15 maxlen: 16
                          190.248.0.0/14 maxlen: 16
                          2803:d80::/29 maxlen: 48
                          2800:e0::/28 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2220753 (0x21e2d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1159fdc4276fa3bfc64df717e4ca0a75249cf188
        Validity
            Not Before: Jul 18 19:58:11 2023 GMT
            Not After : Jul 19 19:58:11 2025 GMT
        Subject: CN=ad3286601996c3a0bf9f6122d58fccbc01391f65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8b:64:8b:88:ac:19:40:45:32:dc:08:48:e1:
                    f3:14:31:42:9b:ea:11:42:46:ff:b8:17:c3:ee:ce:
                    56:3e:3e:36:51:7a:dc:30:e2:fc:74:1f:94:d9:fc:
                    bf:3d:59:a9:a1:bc:e1:5a:35:40:91:b3:8e:dd:f6:
                    27:e9:b9:84:95:c5:2e:ea:e1:86:ab:d6:bb:fe:f5:
                    51:94:d4:a2:0b:ff:27:13:69:b4:04:06:39:71:93:
                    80:cf:56:96:4e:c8:35:a0:98:9f:49:b4:42:97:0b:
                    95:ec:b8:ed:57:df:a0:fe:de:1c:dd:a8:e4:1b:56:
                    db:12:f0:14:0d:ae:76:4c:aa:02:fe:43:86:8b:59:
                    14:97:69:76:06:6e:bc:bd:bd:2f:6e:c1:3e:07:21:
                    d9:43:02:e0:74:56:78:ff:89:42:2f:21:14:7a:61:
                    d0:7b:1e:63:96:8a:e6:81:e8:a0:f4:e4:71:11:ae:
                    42:43:29:0c:09:2d:88:6e:ff:fe:20:a5:ab:05:1f:
                    82:37:48:ad:5b:d0:3b:d8:f4:6e:27:f0:bc:45:54:
                    21:0a:c8:db:64:39:9d:c7:34:04:75:a9:e8:25:0c:
                    e8:38:88:66:da:4d:0b:34:29:f0:c7:aa:96:2f:19:
                    a6:8d:b2:0f:f8:21:78:ec:81:ab:78:af:b1:8c:de:
                    c2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:69:62:71:89:22:FC:32:5C:9D:09:74:94:6F:48:C0:F4:84:1B:34
            X509v3 Authority Key Identifier:
                keyid:2C:D3:D3:7E:8A:EA:10:A8:12:4B:D1:A2:E2:4C:0A:CC:C3:E1:A3:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1159fdc4276fa3bfc64df717e4ca0a75249cf188.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cd00567-4106-40ca-bbc1-1b069b60a78e/ad3286601996c3a0bf9f6122d58fccbc01391f65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cd00567-4106-40ca-bbc1-1b069b60a78e/1159fdc4276fa3bfc64df717e4ca0a75249cf188.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.28.0.0/15
                  190.248.0.0/14
                  201.184.0.0/15
                  201.232.0.0/15
                IPv6:
                  2800:e0::/28
                  2803:d80::/29

    Signature Algorithm: sha256WithRSAEncryption
         69:84:c4:2b:6e:e4:16:0a:3a:e0:fc:24:52:46:80:b6:7c:5b:
         2d:4a:b2:eb:71:6b:a5:3f:38:23:f7:bf:ef:0b:83:2c:4b:f8:
         74:68:62:36:06:26:e4:33:15:97:f3:9a:2b:d8:aa:13:35:16:
         60:b6:db:43:27:19:71:db:0d:5d:b0:a0:e4:b8:ba:2e:62:f1:
         a4:f5:c5:ee:d8:72:b2:32:22:a6:24:41:00:ef:98:e8:da:37:
         52:74:34:ac:04:52:ad:78:d8:ab:07:58:fc:33:57:54:55:95:
         32:6b:7e:04:ef:3c:6c:86:c5:40:e7:97:0d:1c:56:80:42:b1:
         73:b9:21:df:2e:65:bc:3b:6c:b8:2a:41:0e:31:84:50:a8:4d:
         4c:8d:f3:ac:a2:42:68:28:fc:34:c8:91:20:45:24:b7:af:8a:
         cf:82:c2:a0:60:bc:59:d3:4a:b5:92:64:8c:44:12:4f:04:59:
         f7:28:f6:ce:1c:fb:29:b6:02:4e:e7:27:8f:a2:e0:ac:e1:d2:
         ff:42:c0:45:0e:d9:76:f8:03:4a:c6:67:91:03:14:47:b0:cc:
         16:37:55:8b:77:d2:f3:19:a9:fa:8b:83:25:8e:be:61:dc:75:
         7f:a0:78:3e:25:8c:a2:39:ab:11:39:57:23:94:31:21:97:71:
         3f:ae:09:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----