Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/228c410d-9e5e-4f1e-a355-a4073435ca14/e614f04f208a8025c426287fbe40c24ddba728fd.roa
File:                     e614f04f208a8025c426287fbe40c24ddba728fd.roa (raw, json)
Hash identifier:          w6GHwOU4aPGm4va9JAOcFJisgsnoLamIlxgoxVJdm/Y=
Subject key identifier:   FE:48:43:5E:4B:51:0A:4D:DD:AA:63:B7:54:D5:51:37:BD:DA:56:82
Certificate issuer:       /CN=36e192b55cb56ddb327e18a090fa757000686249
Certificate serial:       220E3E
Authority key identifier: 75:D0:7D:9E:91:AC:51:2C:49:38:1A:C8:8E:68:5A:9E:77:AB:C3:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/36e192b55cb56ddb327e18a090fa757000686249.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/228c410d-9e5e-4f1e-a355-a4073435ca14/e614f04f208a8025c426287fbe40c24ddba728fd.roa
Signing time:             Mon 31 Jul 2023 15:48:23 +0000
ROA not before:           Sun 30 Jul 2023 15:48:22 +0000
ROA not after:            Thu 31 Jul 2025 15:48:22 +0000
asID:                     270057
IP address blocks:        191.102.225.0/24 maxlen: 24
                          191.102.238.0/23 maxlen: 24
                          2803:2a80:802::/48 maxlen: 64
                          2803:2a80:806::/47 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2231870 (0x220e3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36e192b55cb56ddb327e18a090fa757000686249
        Validity
            Not Before: Jul 30 15:48:22 2023 GMT
            Not After : Jul 31 15:48:22 2025 GMT
        Subject: CN=e614f04f208a8025c426287fbe40c24ddba728fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bc:8e:e6:e2:cc:0e:4c:78:ec:79:64:13:e2:
                    e1:a6:fd:c0:7e:ce:41:04:1e:4b:5c:1a:1f:d2:83:
                    04:c7:4d:8c:ab:f7:00:56:1d:38:82:0e:30:76:ba:
                    5f:20:be:e1:eb:07:8c:f9:69:e0:b5:e5:b5:4b:65:
                    a6:6f:db:fc:aa:8a:58:e8:e0:b1:65:e1:a2:cb:2c:
                    e9:09:46:3f:7f:30:b1:bd:e2:7a:5c:ec:d3:33:81:
                    15:72:7c:9a:ef:1d:4c:72:dd:82:48:98:c7:7b:2e:
                    61:2c:6b:25:7e:92:78:b1:05:9c:fe:6f:b0:95:f1:
                    b5:ec:b8:35:9a:1a:34:be:ed:21:54:3f:8d:d0:44:
                    57:b3:2f:85:e7:20:94:bd:d7:4c:e7:fb:07:ee:e4:
                    1c:2b:f8:51:26:75:e0:de:db:a3:3c:dd:75:c5:c8:
                    73:db:4e:32:bb:4a:ff:b2:0a:3d:65:63:d2:c9:b3:
                    07:68:3a:e1:7d:8a:59:1f:38:3e:bc:3f:42:16:f6:
                    eb:71:87:37:19:28:cd:33:bf:35:62:c0:4b:d6:96:
                    58:d6:cd:df:5e:6c:a0:2f:13:e1:12:b9:55:f8:fe:
                    ad:71:b3:c7:b1:73:36:31:0f:60:e2:df:f5:0d:9f:
                    04:02:f5:eb:8b:42:e8:26:d7:36:00:33:b8:2e:2f:
                    ee:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:48:43:5E:4B:51:0A:4D:DD:AA:63:B7:54:D5:51:37:BD:DA:56:82
            X509v3 Authority Key Identifier:
                keyid:75:D0:7D:9E:91:AC:51:2C:49:38:1A:C8:8E:68:5A:9E:77:AB:C3:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/36e192b55cb56ddb327e18a090fa757000686249.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/228c410d-9e5e-4f1e-a355-a4073435ca14/e614f04f208a8025c426287fbe40c24ddba728fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/228c410d-9e5e-4f1e-a355-a4073435ca14/36e192b55cb56ddb327e18a090fa757000686249.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.225.0/24
                  191.102.238.0/23
                IPv6:
                  2803:2a80:802::/48
                  2803:2a80:806::/47

    Signature Algorithm: sha256WithRSAEncryption
         0f:b4:f0:d5:2e:c8:24:a8:e5:dd:d8:63:bf:ff:dc:f7:3d:02:
         26:eb:40:62:06:bb:ce:72:51:09:4a:b8:c0:48:81:ec:7b:95:
         7f:aa:b6:d5:8b:fa:20:02:37:2e:41:86:e3:a5:a1:89:0f:01:
         df:79:2c:a0:2c:35:bf:5b:5d:0e:f2:93:1d:9f:c5:3e:9f:98:
         cc:60:8e:c9:14:da:85:0a:49:23:d6:2c:29:15:21:57:17:75:
         ae:33:3d:61:4d:75:2a:d6:dc:02:64:84:19:50:39:02:f9:94:
         ce:e2:6c:c6:be:63:c7:81:e9:18:d6:2c:75:d6:54:6a:8b:e4:
         7c:14:df:35:7f:79:c2:b7:ed:8e:18:1a:85:87:e1:ef:53:59:
         50:17:b9:d1:95:d6:e9:01:9a:67:ee:28:e0:20:45:f0:01:28:
         d0:c6:50:a5:c8:1f:a1:01:22:5f:90:35:1f:02:f6:bb:f6:3e:
         15:46:7a:d6:41:59:da:84:d5:ea:f6:77:c1:18:78:79:cd:29:
         0c:f5:10:e5:c2:d7:6a:44:90:3a:11:0a:42:02:2f:ab:6a:33:
         25:d6:9a:c0:e5:a2:6a:6f:fa:5c:8e:2b:c2:e1:92:8b:f9:30:
         8d:96:16:85:90:20:b5:75:a2:cb:12:08:ac:38:be:de:3d:09:
         12:2a:df:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----