Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2797b2f0-e5da-416c-a8d6-a61dc102a441/763497cc48105f3f1d07ba8a5627afe239df89e2.roa
File:                     763497cc48105f3f1d07ba8a5627afe239df89e2.roa (raw, json)
Hash identifier:          g7r4AYPHqUc+2ywr5DXHtdkoYbshWzPJVScSxxIwLe0=
Subject key identifier:   E7:C1:F2:B0:8E:89:FD:E8:7F:B6:01:B8:8F:EC:75:38:3B:ED:14:A0
Certificate issuer:       /CN=5494bd71484d106b75c5bedf4263f48281a4e409
Certificate serial:       2426E9
Authority key identifier: 4C:B6:BE:C7:78:41:99:EC:CA:F0:31:13:8A:C9:9A:2E:66:AB:83:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5494bd71484d106b75c5bedf4263f48281a4e409.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2797b2f0-e5da-416c-a8d6-a61dc102a441/763497cc48105f3f1d07ba8a5627afe239df89e2.roa
Signing time:             Thu 21 Sep 2023 16:59:48 +0000
ROA not before:           Wed 20 Sep 2023 16:59:48 +0000
ROA not after:            Sun 21 Sep 2025 16:59:48 +0000
asID:                     6147
IP address blocks:        200.60.0.0/16 maxlen: 24
                          200.48.0.0/16 maxlen: 24
                          201.240.0.0/16 maxlen: 24
                          181.64.0.0/14 maxlen: 24
                          200.10.64.0/19 maxlen: 24
                          201.230.0.0/16 maxlen: 24
                          190.232.0.0/13 maxlen: 24
                          200.106.0.0/17 maxlen: 24
                          170.79.36.0/22 maxlen: 24
                          200.37.0.0/16 maxlen: 24
                          201.131.220.0/22 maxlen: 24
                          190.40.0.0/14 maxlen: 24
                          200.4.192.0/18 maxlen: 24
                          200.107.128.0/18 maxlen: 24
                          200.121.0.0/16 maxlen: 24
                          2001:1388::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2369257 (0x2426e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5494bd71484d106b75c5bedf4263f48281a4e409
        Validity
            Not Before: Sep 20 16:59:48 2023 GMT
            Not After : Sep 21 16:59:48 2025 GMT
        Subject: CN=763497cc48105f3f1d07ba8a5627afe239df89e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c9:3b:26:f9:04:6f:f6:5c:67:ce:5e:14:db:
                    64:89:5c:f4:29:57:39:80:91:10:72:24:2e:8f:5d:
                    9b:6b:80:f6:37:99:6f:c3:12:3e:8a:55:c2:66:35:
                    b6:50:6f:60:e0:de:99:81:ca:5d:a3:c3:6d:3d:c4:
                    59:34:df:de:a5:56:63:3a:01:9c:88:ba:3f:48:33:
                    08:11:c3:ce:cd:1f:14:33:30:28:cb:1c:72:da:b8:
                    12:1e:6d:29:4a:79:d2:2b:1e:f6:25:c0:87:bf:88:
                    78:78:35:e3:d5:d6:8c:8f:bf:7d:d5:4b:33:ad:46:
                    76:d8:ef:63:43:66:04:a1:4d:53:b6:8f:5c:be:f2:
                    99:a2:35:d5:32:6b:15:5c:65:31:74:d9:12:51:d9:
                    3a:6c:1b:94:4d:93:5e:5d:34:d8:a0:be:07:d0:00:
                    84:c2:c7:70:45:82:bc:27:0c:79:bd:8f:36:c9:3e:
                    3e:ed:5e:78:6d:53:73:2b:7e:f2:2e:3c:77:2f:84:
                    1b:17:69:a5:7d:e8:34:86:14:2e:25:e1:03:96:3e:
                    32:74:5c:d6:1a:70:0f:cc:b9:72:a7:e6:bf:d9:fc:
                    01:65:41:43:17:36:63:19:4a:65:be:18:2e:2e:22:
                    19:f1:29:e0:1f:3a:ee:ee:c8:d0:dc:41:97:bb:47:
                    ed:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C1:F2:B0:8E:89:FD:E8:7F:B6:01:B8:8F:EC:75:38:3B:ED:14:A0
            X509v3 Authority Key Identifier:
                keyid:4C:B6:BE:C7:78:41:99:EC:CA:F0:31:13:8A:C9:9A:2E:66:AB:83:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5494bd71484d106b75c5bedf4263f48281a4e409.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2797b2f0-e5da-416c-a8d6-a61dc102a441/763497cc48105f3f1d07ba8a5627afe239df89e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2797b2f0-e5da-416c-a8d6-a61dc102a441/5494bd71484d106b75c5bedf4263f48281a4e409.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.36.0/22
                  181.64.0.0/14
                  190.40.0.0/14
                  190.232.0.0/13
                  200.4.192.0/18
                  200.10.64.0/19
                  200.37.0.0/16
                  200.48.0.0/16
                  200.60.0.0/16
                  200.106.0.0/17
                  200.107.128.0/18
                  200.121.0.0/16
                  201.131.220.0/22
                  201.230.0.0/16
                  201.240.0.0/16
                IPv6:
                  2001:1388::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:27:6a:eb:27:ef:cc:19:e9:39:6d:2b:e1:0a:e2:73:65:54:
         ae:94:0a:eb:a4:04:62:57:7f:7d:1c:d3:d3:0d:94:7d:15:b6:
         86:cf:d4:46:70:ff:1a:c8:4d:f7:4c:53:92:86:4e:36:cb:4e:
         d9:eb:82:b9:94:a7:64:1c:fa:5d:67:f4:5e:e9:99:3a:b5:8c:
         b7:6b:ed:ce:b3:7f:49:01:1f:fb:43:6e:51:93:69:83:ab:ef:
         b4:ad:0b:17:2d:86:fb:ca:98:eb:d7:ae:a4:70:09:25:08:7c:
         98:09:45:19:03:17:66:0a:83:d7:ae:e6:08:92:90:6d:e8:99:
         78:f8:89:f3:e7:95:dd:87:16:68:bb:43:3a:7c:db:15:ba:10:
         b9:7b:fd:7d:42:f1:ab:e6:22:65:57:21:2c:35:9a:18:c5:45:
         b3:f2:ee:0b:cc:d8:e0:4c:d5:71:90:c5:29:07:72:bd:f2:d2:
         6a:1e:6d:49:cf:da:7d:ad:10:b2:9b:92:02:bd:79:f0:34:5d:
         68:59:a0:29:0e:e9:78:f4:ef:15:0a:9a:de:d2:c9:08:3f:e2:
         8b:d8:5c:f2:f6:48:fe:39:ea:3e:30:45:51:9c:9c:7f:cf:f5:
         3e:48:b6:a3:df:15:3b:42:4e:28:67:9b:f6:be:97:68:5f:b1:
         d2:f3:80:b1
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgIDJCbpMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDU0
OTRiZDcxNDg0ZDEwNmI3NWM1YmVkZjQyNjNmNDgyODFhNGU0MDkwHhcNMjMwOTIw
MTY1OTQ4WhcNMjUwOTIxMTY1OTQ4WjAzMTEwLwYDVQQDEyg3NjM0OTdjYzQ4MTA1
ZjNmMWQwN2JhOGE1NjI3YWZlMjM5ZGY4OWUyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkck7JvkEb/ZcZ85eFNtkiVz0KVc5gJEQciQuj12ba4D2N5lv
wxI+ilXCZjW2UG9g4N6Zgcpdo8NtPcRZNN/epVZjOgGciLo/SDMIEcPOzR8UMzAo
yxxy2rgSHm0pSnnSKx72JcCHv4h4eDXj1daMj7991UszrUZ22O9jQ2YEoU1Tto9c
vvKZojXVMmsVXGUxdNkSUdk6bBuUTZNeXTTYoL4H0ACEwsdwRYK8Jwx5vY82yT4+
7V54bVNzK37yLjx3L4QbF2mlfeg0hhQuJeEDlj4ydFzWGnAPzLlyp+a/2fwBZUFD
FzZjGUplvhguLiIZ8SngHzru7sjQ3EGXu0ft5QIDAQABo4ICtTCCArEwHQYDVR0O
BBYEFOfB8rCOif3of7YBuI/sdTg77RSgMB8GA1UdIwQYMBaAFEy2vsd4QZnsyvAx
E4rJmi5mq4PdMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTQ5NGJk
NzE0ODRkMTA2Yjc1YzViZWRmNDI2M2Y0ODI4MWE0ZTQwOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjc5N2IyZjAtZTVkYS00MTZjLWE4ZDYtYTYxZGMx
MDJhNDQxLzc2MzQ5N2NjNDgxMDVmM2YxZDA3YmE4YTU2MjdhZmUyMzlkZjg5ZTIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yNzk3YjJmMC1lNWRhLTQxNmMtYThkNi1hNjFk
YzEwMmE0NDEvNTQ5NGJkNzE0ODRkMTA2Yjc1YzViZWRmNDI2M2Y0ODI4MWE0ZTQw
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjB5BggrBgEFBQcBBwEB/wRq
MGgwVwQCAAEwUQMEAqpPJAMDArVAAwMCvigDAwO+6AMEBsgEwAMEBcgKQAMDAMgl
AwMAyDADAwDIPAMEB8hqAAMEBshrgAMDAMh5AwQCyYPcAwMAyeYDAwDJ8DANBAIA
AjAHAwUAIAETiDANBgkqhkiG9w0BAQsFAAOCAQEAPCdq6yfvzBnpOW0r4Qric2VU
rpQK66QEYld/fRzT0w2UfRW2hs/URnD/GshN90xTkoZONstO2euCuZSnZBz6XWf0
XumZOrWMt2vtzrN/SQEf+0NuUZNpg6vvtK0LFy2G+8qY69eupHAJJQh8mAlFGQMX
ZgqD167mCJKQbeiZePiJ8+eV3YcWaLtDOnzbFboQuXv9fULxq+YiZVchLDWaGMVF
s/LuC8zY4EzVcZDFKQdyvfLSah5tSc/afa0QspuSAr158DRdaFmgKQ7pePTvFQqa
3tLJCD/ii9hc8vZI/jnqPjBFUZycf8/1Pki2o98VO0JOKGeb9r6XaF+x0vOAsQ==
-----END CERTIFICATE-----