Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/91db667e1af751c43e6b9cc10498368f6d3d2a29.roa
File:                     91db667e1af751c43e6b9cc10498368f6d3d2a29.roa (raw, json)
Hash identifier:          PTZ+UNfUfd2xUbpiteR5xDAEOGwUJhF1XnGSNifG60c=
Subject key identifier:   06:56:AD:52:AA:DB:27:84:52:B6:9D:1D:68:DD:9D:D8:5C:76:55:E4
Certificate issuer:       /CN=ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68
Certificate serial:       224507
Authority key identifier: C1:AC:19:8F:3C:C0:07:16:CA:8E:94:87:E8:49:0D:0B:3F:AB:5E:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/91db667e1af751c43e6b9cc10498368f6d3d2a29.roa
Signing time:             Mon 29 May 2023 21:03:18 +0000
ROA not before:           Sun 28 May 2023 21:03:18 +0000
ROA not after:            Thu 29 May 2025 21:03:18 +0000
asID:                     61461
IP address blocks:        190.124.28.0/22 maxlen: 24
                          2803:d700::/32 maxlen: 40
                          2803:d700:2000::/40 maxlen: 40
                          2803:d700:3f00::/40 maxlen: 40
                          2803:d700:4000::/40 maxlen: 40
                          2803:d700:8000::/33 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2245895 (0x224507)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68
        Validity
            Not Before: May 28 21:03:18 2023 GMT
            Not After : May 29 21:03:18 2025 GMT
        Subject: CN=91db667e1af751c43e6b9cc10498368f6d3d2a29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fb:d8:d3:12:01:c8:7e:7e:68:3c:84:0e:0d:
                    1a:68:c8:dc:0a:32:20:16:a6:07:0b:75:6f:e3:51:
                    b5:a5:23:64:59:a5:5f:8d:86:d4:53:e4:72:14:2d:
                    27:6a:fb:6c:90:40:cc:3c:9c:4e:82:3d:70:49:59:
                    e7:ab:78:b6:f2:51:12:a9:28:45:3b:9a:2b:70:4e:
                    91:fc:13:c0:50:70:b4:ac:53:17:6b:ac:c4:ce:31:
                    ac:04:c9:6c:89:13:cf:1e:21:87:ff:73:f0:6e:df:
                    f4:f4:cb:01:c1:16:6a:3b:46:70:b5:db:21:42:ba:
                    f7:13:7f:ea:ba:1e:fb:0d:3d:86:b6:1c:13:19:08:
                    a6:09:b7:86:ce:9e:7b:18:62:6c:4a:87:bb:ea:f5:
                    b0:6d:ef:9c:fb:03:0d:72:95:5a:04:c6:19:d8:84:
                    e5:ac:98:0c:a0:b8:89:4c:6b:01:c4:b1:98:63:aa:
                    d1:a3:51:2d:cf:b4:70:7b:2e:cd:9a:35:79:b9:29:
                    be:22:e2:9d:ef:47:06:e4:ff:92:15:92:98:f0:7a:
                    5d:3d:a0:94:fa:74:fd:0e:7f:15:35:96:2a:a7:bf:
                    8d:4a:35:a4:5c:48:ec:29:60:84:6c:ab:36:e5:fc:
                    a6:32:1c:b4:f8:29:ca:b0:42:92:53:77:6f:35:b2:
                    69:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:56:AD:52:AA:DB:27:84:52:B6:9D:1D:68:DD:9D:D8:5C:76:55:E4
            X509v3 Authority Key Identifier:
                keyid:C1:AC:19:8F:3C:C0:07:16:CA:8E:94:87:E8:49:0D:0B:3F:AB:5E:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/91db667e1af751c43e6b9cc10498368f6d3d2a29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.28.0/22
                IPv6:
                  2803:d700::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:24:f9:66:64:cd:da:ef:e4:91:c2:7d:3b:2d:74:45:29:0c:
         c0:4d:ec:4c:4e:b4:16:c7:09:b7:8a:cd:34:1a:28:13:25:e8:
         00:b8:4d:d2:e1:da:d8:7f:a6:29:43:08:b1:a5:23:97:48:25:
         db:11:0e:2c:8c:98:ff:b2:c5:f0:db:57:e6:5e:e1:ee:47:cd:
         8b:8b:e8:fb:a7:45:2f:00:a5:37:63:e9:a3:84:f3:ad:2a:24:
         93:1d:83:a0:b7:6b:a5:ba:54:82:b7:cc:9f:5d:ad:b9:e8:c7:
         7b:6f:38:14:b9:72:54:e1:49:77:b2:85:d8:0c:8d:62:dd:ea:
         69:cb:45:48:3a:6d:c8:ca:11:c1:f2:fa:ba:7a:6d:eb:48:9c:
         df:a9:47:bc:76:9a:65:42:f7:9b:a3:bc:e0:06:89:df:be:12:
         b0:c3:b2:2a:5f:0b:02:9c:e8:96:ac:d5:c0:f2:bf:39:ab:0d:
         21:0b:aa:82:9e:64:2a:80:2c:77:73:9a:c4:6b:99:92:02:cb:
         3f:4a:ae:0a:08:55:fb:80:82:0f:60:89:39:28:71:d2:59:34:
         48:42:aa:5c:86:32:a0:2f:8a:4e:27:8b:59:2b:c4:ff:38:69:
         5f:0f:fd:d7:30:56:c7:b4:6f:b2:61:5e:0b:38:e5:b5:51:e6:
         88:a0:1a:90
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDIkUHMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFi
MzJlZjNhODllMzgyZWE0Y2EwZTliMGZjNjY4MGFjNGRkODljNjgwHhcNMjMwNTI4
MjEwMzE4WhcNMjUwNTI5MjEwMzE4WjAzMTEwLwYDVQQDEyg5MWRiNjY3ZTFhZjc1
MWM0M2U2YjljYzEwNDk4MzY4ZjZkM2QyYTI5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAq/vY0xIByH5+aDyEDg0aaMjcCjIgFqYHC3Vv41G1pSNkWaVf
jYbUU+RyFC0navtskEDMPJxOgj1wSVnnq3i28lESqShFO5orcE6R/BPAUHC0rFMX
a6zEzjGsBMlsiRPPHiGH/3Pwbt/09MsBwRZqO0ZwtdshQrr3E3/quh77DT2GthwT
GQimCbeGzp57GGJsSoe76vWwbe+c+wMNcpVaBMYZ2ITlrJgMoLiJTGsBxLGYY6rR
o1Etz7Rwey7NmjV5uSm+IuKd70cG5P+SFZKY8HpdPaCU+nT9Dn8VNZYqp7+NSjWk
XEjsKWCEbKs25fymMhy0+CnKsEKSU3dvNbJpbwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFAZWrVKq2yeEUradHWjdndhcdlXkMB8GA1UdIwQYMBaAFMGsGY88wAcWyo6U
h+hJDQs/q15VMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWIzMmVm
M2E4OWUzODJlYTRjYTBlOWIwZmM2NjgwYWM0ZGQ4OWM2OC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWUzMTM4YTUtYmE4OC00MjQxLWFkZWItMzE2YTNj
YTUyNGU1LzkxZGI2NjdlMWFmNzUxYzQzZTZiOWNjMTA0OTgzNjhmNmQzZDJhMjku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZTMxMzhhNS1iYTg4LTQyNDEtYWRlYi0zMTZh
M2NhNTI0ZTUvYWIzMmVmM2E4OWUzODJlYTRjYTBlOWIwZmM2NjgwYWM0ZGQ4OWM2
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAr58HDANBAIAAjAHAwUAKAPXADANBgkqhkiG9w0BAQsFAAOC
AQEAgCT5ZmTN2u/kkcJ9Oy10RSkMwE3sTE60FscJt4rNNBooEyXoALhN0uHa2H+m
KUMIsaUjl0gl2xEOLIyY/7LF8NtX5l7h7kfNi4vo+6dFLwClN2Ppo4TzrSokkx2D
oLdrpbpUgrfMn12tuejHe284FLlyVOFJd7KF2AyNYt3qactFSDptyMoRwfL6unpt
60ic36lHvHaaZUL3m6O84AaJ374SsMOyKl8LApzolqzVwPK/OasNIQuqgp5kKoAs
d3OaxGuZkgLLP0quCghV+4CCD2CJOShx0lk0SEKqXIYyoC+KTieLWSvE/zhpXw/9
1zBWx7RvsmFeCzjltVHmiKAakA==
-----END CERTIFICATE-----