Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30dec7b1-98c9-40e1-b13e-1b20c016eaba/b387da037cc6a553c654e655967273c675960406.roa
File:                     b387da037cc6a553c654e655967273c675960406.roa (raw, json)
Hash identifier:          BwJfYhPb24+EypPMrE0fnjOyhdrY7RchZ/A4lvboI/0=
Subject key identifier:   80:EF:A5:BB:B7:FD:68:7B:A3:A5:9A:AB:E7:1A:1D:41:7A:86:9B:EB
Certificate issuer:       /CN=fc4cfd946a0eeb5645e4de745f0b1bd955372749
Certificate serial:       1AC9B6
Authority key identifier: A4:03:9C:2C:3E:1E:90:3F:57:08:3D:A1:81:A3:16:49:3A:CC:E3:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc4cfd946a0eeb5645e4de745f0b1bd955372749.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30dec7b1-98c9-40e1-b13e-1b20c016eaba/b387da037cc6a553c654e655967273c675960406.roa
Signing time:             Mon 25 Mar 2024 08:30:01 +0000
ROA not before:           Mon 25 Mar 2024 08:30:01 +0000
ROA not after:            Wed 25 Mar 2026 08:30:01 +0000
asID:                     271806
IP address blocks:        190.113.40.0/22 maxlen: 24
                          2803:d010::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1755574 (0x1ac9b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc4cfd946a0eeb5645e4de745f0b1bd955372749
        Validity
            Not Before: Mar 25 08:30:01 2024 GMT
            Not After : Mar 25 08:30:01 2026 GMT
        Subject: CN=b387da037cc6a553c654e655967273c675960406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c7:f9:ea:ee:5b:43:e1:c7:05:26:6c:a8:c0:
                    ae:fc:76:aa:1d:13:0c:4c:ac:ea:db:51:7b:a2:36:
                    6a:fd:6a:d3:32:17:a8:77:cc:55:6e:cf:d7:af:e3:
                    11:86:1f:7a:aa:d4:c1:d5:58:74:9d:cb:f5:32:fc:
                    b1:22:ac:06:7c:2b:b0:d5:d1:0d:44:85:53:08:19:
                    3e:d9:43:c2:ec:42:24:8e:c2:9d:6b:c3:d1:2d:e8:
                    39:1a:a4:de:ef:cf:b5:f9:08:14:7a:d4:44:ec:de:
                    61:f8:1c:ed:8d:bf:a4:ac:40:df:15:58:3a:8d:67:
                    2f:f3:c4:96:ec:52:75:e4:d7:53:ec:d9:7c:c3:3c:
                    ed:a6:ec:48:44:d5:d0:d2:c4:84:c3:a3:4b:42:3b:
                    dd:f4:8e:50:0e:4f:43:c8:40:e0:34:63:45:07:da:
                    17:46:ac:f7:09:04:fc:e4:69:a8:75:f2:5d:7c:d3:
                    c5:cd:f7:c0:26:47:fd:a3:24:d2:3f:c9:74:eb:78:
                    58:f1:a2:a1:41:b0:31:e0:bf:c8:53:dd:7a:b7:f0:
                    d2:ce:8a:9f:b4:ae:fb:49:82:01:15:f1:22:d6:69:
                    b3:12:24:e8:a8:b2:74:4a:00:54:d8:ec:f0:2b:04:
                    32:6b:34:a6:c5:04:9d:03:e4:56:c2:ed:a2:6b:bb:
                    d4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:EF:A5:BB:B7:FD:68:7B:A3:A5:9A:AB:E7:1A:1D:41:7A:86:9B:EB
            X509v3 Authority Key Identifier:
                keyid:A4:03:9C:2C:3E:1E:90:3F:57:08:3D:A1:81:A3:16:49:3A:CC:E3:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc4cfd946a0eeb5645e4de745f0b1bd955372749.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30dec7b1-98c9-40e1-b13e-1b20c016eaba/b387da037cc6a553c654e655967273c675960406.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30dec7b1-98c9-40e1-b13e-1b20c016eaba/fc4cfd946a0eeb5645e4de745f0b1bd955372749.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.40.0/22
                IPv6:
                  2803:d010::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:63:b4:5e:08:a2:09:6d:09:64:04:80:49:c5:ca:e2:97:8e:
         d5:11:2d:4b:77:6b:47:17:1f:04:7d:a1:92:15:9a:61:f9:6c:
         61:d8:23:9f:15:6f:ac:52:b3:99:ba:00:6a:51:e4:3d:cf:c1:
         c0:00:22:c2:07:ec:35:17:18:90:ad:67:26:18:6f:81:b0:4f:
         74:27:5b:1b:36:01:e4:58:a7:e1:99:52:6f:64:6d:d5:db:23:
         2d:d8:6e:bc:e7:31:64:6a:84:1b:9e:78:c6:41:7b:a0:a9:7e:
         41:db:32:5a:e6:f2:e5:2d:1f:8d:51:03:e3:42:d1:72:5e:32:
         bd:7d:51:62:6a:83:40:e5:48:cc:df:03:ca:3c:7a:8b:0d:4f:
         d1:0f:65:f9:d2:45:71:80:57:df:4f:2d:b2:79:80:d7:f3:61:
         6f:06:33:01:e6:44:cd:ab:44:27:fc:2a:ef:a7:c4:86:66:50:
         e8:a1:3a:94:4e:bd:a0:a0:3e:aa:00:7c:1e:65:6f:4d:b0:9a:
         32:1a:41:17:c3:ed:af:8c:3e:0c:56:50:16:62:76:88:db:0d:
         90:93:51:81:59:a5:ff:e0:5f:3a:ee:d5:10:57:1f:25:db:e5:
         98:e1:83:7a:b4:ba:2c:d2:38:4f:0b:03:4f:e5:53:aa:5b:d1:
         c8:4f:5d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----