Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ed24b57-5637-4d04-a1a2-b55f1b7d07a7/61fe22ce7e4617358de9634da72da4269c6862cc.roa
File:                     61fe22ce7e4617358de9634da72da4269c6862cc.roa (raw, json)
Hash identifier:          hKqjHBa4Ny7ahofSJtqKeZ9eZGvVjy6gxBZiBkJGHoM=
Subject key identifier:   8F:25:C9:15:D8:99:AA:39:27:E4:5A:5E:2C:A7:EF:35:24:25:6D:11
Certificate issuer:       /CN=ef50a919c38d29bb33866e24d668a0b386609323
Certificate serial:       13C828
Authority key identifier: A2:7E:F9:12:D9:A3:A0:AE:2C:D2:E1:59:04:73:E0:80:98:E6:0D:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef50a919c38d29bb33866e24d668a0b386609323.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ed24b57-5637-4d04-a1a2-b55f1b7d07a7/61fe22ce7e4617358de9634da72da4269c6862cc.roa
Signing time:             Tue 19 Oct 2021 21:19:23 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     269827
IP address blocks:        190.97.227.0/24 maxlen: 24
                          190.97.229.0/24 maxlen: 24
                          190.97.232.0/24 maxlen: 24
                          190.97.237.0/24 maxlen: 24
                          190.97.238.0/23 maxlen: 24
                          190.97.243.0/24 maxlen: 24
                          190.97.245.0/24 maxlen: 24
                          190.97.246.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1296424 (0x13c828)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef50a919c38d29bb33866e24d668a0b386609323
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=61fe22ce7e4617358de9634da72da4269c6862cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6c:58:25:77:ba:b8:b2:45:9d:c6:a9:01:ac:
                    be:fa:5b:1b:73:2d:f0:d0:7a:60:dd:7d:23:d1:d7:
                    66:f9:c8:9b:57:64:81:26:68:8e:30:67:c3:c5:c9:
                    61:9a:18:92:75:e5:13:0b:e2:e3:41:6f:64:de:3c:
                    62:f9:22:32:64:6c:f1:88:70:73:8b:76:2e:38:57:
                    11:b0:0a:ac:10:30:5a:9f:b2:45:d3:e1:f9:a6:f7:
                    27:f7:c0:32:a5:64:cd:e4:b7:2e:16:c1:ae:53:d5:
                    e3:4a:81:0e:57:79:65:44:91:40:ed:f4:13:ae:0c:
                    cf:f6:e1:0b:39:91:2f:f4:62:80:75:3d:84:3d:c2:
                    6b:f9:b8:12:ca:3c:82:f8:1d:d0:39:37:df:80:d6:
                    b9:6f:ad:bb:94:af:2d:f8:70:7b:50:db:84:a1:63:
                    56:d9:71:6f:ee:18:19:1d:37:dc:04:59:9f:2d:0e:
                    ca:25:f5:88:f4:29:5b:dc:1d:ad:02:40:50:9b:ee:
                    d9:74:be:a4:b2:ba:de:73:85:b6:a1:16:c9:8e:6d:
                    9c:e5:d6:85:2a:83:3a:ff:d1:fe:93:e1:23:a8:e2:
                    bf:ec:08:46:10:e4:15:da:16:da:7f:0b:88:18:ac:
                    42:c9:d3:30:b9:fc:e0:c7:ae:0f:ea:74:96:6d:60:
                    75:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:25:C9:15:D8:99:AA:39:27:E4:5A:5E:2C:A7:EF:35:24:25:6D:11
            X509v3 Authority Key Identifier:
                keyid:A2:7E:F9:12:D9:A3:A0:AE:2C:D2:E1:59:04:73:E0:80:98:E6:0D:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef50a919c38d29bb33866e24d668a0b386609323.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ed24b57-5637-4d04-a1a2-b55f1b7d07a7/61fe22ce7e4617358de9634da72da4269c6862cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ed24b57-5637-4d04-a1a2-b55f1b7d07a7/ef50a919c38d29bb33866e24d668a0b386609323.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.97.227.0/24
                  190.97.229.0/24
                  190.97.232.0/24
                  190.97.237.0-190.97.239.255
                  190.97.243.0/24
                  190.97.245.0-190.97.246.255

    Signature Algorithm: sha256WithRSAEncryption
         53:6d:a7:d0:46:41:9f:52:9e:6b:1a:3e:56:fa:25:2d:44:c6:
         47:95:17:65:dc:51:4e:62:9d:e3:90:f5:50:ce:c4:53:4b:2b:
         be:15:ab:1f:59:db:ec:cf:77:5f:7e:81:6d:51:0a:a0:41:93:
         33:84:47:ee:80:27:40:0d:1e:43:ee:d4:da:d2:10:4e:1e:37:
         07:35:35:86:93:9e:34:78:54:79:de:c2:f5:99:00:2a:a7:23:
         61:02:fb:6b:11:4e:04:2c:e0:56:4c:f7:73:62:e3:f0:14:b9:
         14:10:89:5d:69:e3:35:5f:fe:24:45:86:c2:de:48:0a:43:e7:
         55:82:4a:f3:31:85:d2:0f:d9:f3:df:f8:01:09:5d:01:e6:30:
         42:89:42:7b:6c:a6:d6:fb:92:5c:d2:77:7e:8f:1c:bd:b2:9f:
         da:97:93:b9:e2:0c:15:f0:8d:a8:b2:b0:18:05:04:dd:1c:3d:
         bb:41:6f:f1:ac:1c:87:94:af:7f:d0:f3:a3:d5:50:a7:6b:98:
         c3:a7:06:84:0d:45:15:61:07:bd:6a:13:f8:f1:07:9d:64:f7:
         08:c6:b2:99:8c:c4:8c:89:2c:af:8e:93:4d:2c:ec:13:c6:43:
         37:c1:7f:7c:be:f4:25:bd:52:33:19:db:22:f8:88:5b:42:b2:
         92:b6:2e:6c
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIDE8goMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGVm
NTBhOTE5YzM4ZDI5YmIzMzg2NmUyNGQ2NjhhMGIzODY2MDkzMjMwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyg2MWZlMjJjZTdlNDYx
NzM1OGRlOTYzNGRhNzJkYTQyNjljNjg2MmNjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvmxYJXe6uLJFncapAay++lsbcy3w0Hpg3X0j0ddm+cibV2SB
JmiOMGfDxclhmhiSdeUTC+LjQW9k3jxi+SIyZGzxiHBzi3YuOFcRsAqsEDBan7JF
0+H5pvcn98AypWTN5LcuFsGuU9XjSoEOV3llRJFA7fQTrgzP9uELOZEv9GKAdT2E
PcJr+bgSyjyC+B3QOTffgNa5b627lK8t+HB7UNuEoWNW2XFv7hgZHTfcBFmfLQ7K
JfWI9Clb3B2tAkBQm+7ZdL6ksrrec4W2oRbJjm2c5daFKoM6/9H+k+EjqOK/7AhG
EOQV2hbafwuIGKxCydMwufzgx64P6nSWbWB1uwIDAQABo4ICiTCCAoUwHQYDVR0O
BBYEFI8lyRXYmao5J+RaXiyn7zUkJW0RMB8GA1UdIwQYMBaAFKJ++RLZo6CuLNLh
WQRz4ICY5g3fMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZWY1MGE5
MTljMzhkMjliYjMzODY2ZTI0ZDY2OGEwYjM4NjYwOTMyMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWVkMjRiNTctNTYzNy00ZDA0LWExYTItYjU1ZjFi
N2QwN2E3LzYxZmUyMmNlN2U0NjE3MzU4ZGU5NjM0ZGE3MmRhNDI2OWM2ODYyY2Mu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZWQyNGI1Ny01NjM3LTRkMDQtYTFhMi1iNTVm
MWI3ZDA3YTcvZWY1MGE5MTljMzhkMjliYjMzODY2ZTI0ZDY2OGEwYjM4NjYwOTMy
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBNBggrBgEFBQcBBwEB/wQ+
MDwwOgQCAAEwNAMEAL5h4wMEAL5h5QMEAL5h6DAMAwQAvmHtAwQEvmHgAwQAvmHz
MAwDBAC+YfUDBAC+YfYwDQYJKoZIhvcNAQELBQADggEBAFNtp9BGQZ9SnmsaPlb6
JS1ExkeVF2XcUU5ineOQ9VDOxFNLK74Vqx9Z2+zPd19+gW1RCqBBkzOER+6AJ0AN
HkPu1NrSEE4eNwc1NYaTnjR4VHnewvWZACqnI2EC+2sRTgQs4FZM93Ni4/AUuRQQ
iV1p4zVf/iRFhsLeSApD51WCSvMxhdIP2fPf+AEJXQHmMEKJQntsptb7klzSd36P
HL2yn9qXk7niDBXwjaiysBgFBN0cPbtBb/GsHIeUr3/Q86PVUKdrmMOnBoQNRRVh
B71qE/jxB51k9wjGspmMxIyJLK+Ok00s7BPGQzfBf3y+9CW9UjMZ2yL4iFtCspK2
Lmw=
-----END CERTIFICATE-----