Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/d52e52c71c592a51fe0ae33962c1012a91d9b78c.roa
File:                     d52e52c71c592a51fe0ae33962c1012a91d9b78c.roa (raw, json)
Hash identifier:          xW1jcZ//lhBVFd4wkYnSl7wBSS7eKJPigOgErwidHa8=
Subject key identifier:   72:3F:AA:1D:7A:D3:37:C0:82:D8:D6:67:53:0E:4E:ED:8C:1F:8B:F4
Certificate issuer:       /CN=e96ad0760fe41dfa57b0ded382e54d4a9f8cba25
Certificate serial:       0B6C6A
Authority key identifier: A8:D7:AF:27:9E:5F:AB:1A:CC:05:3B:0A:62:16:4E:DE:C8:24:FA:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e96ad0760fe41dfa57b0ded382e54d4a9f8cba25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/d52e52c71c592a51fe0ae33962c1012a91d9b78c.roa
Signing time:             Wed 01 Jun 2022 21:50:27 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     269905
IP address blocks:        190.112.170.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 748650 (0xb6c6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96ad0760fe41dfa57b0ded382e54d4a9f8cba25
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=d52e52c71c592a51fe0ae33962c1012a91d9b78c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6b:0a:31:10:bd:dd:0d:f3:a5:cf:59:75:b4:
                    d0:e2:3f:d6:75:91:25:b6:77:87:ec:c0:66:32:e9:
                    64:1b:63:85:84:43:d4:b3:a7:6d:33:ba:0d:87:08:
                    9a:27:59:2e:84:cc:2e:ed:d5:6b:eb:11:03:f0:a6:
                    bc:b3:0d:f9:04:4a:b4:23:d1:85:0f:80:75:32:87:
                    b4:b8:6a:18:e7:52:75:41:41:f4:8d:14:60:22:fe:
                    4e:ba:2b:a7:26:3a:5c:42:9f:80:83:e1:cd:d7:0d:
                    20:56:a5:0e:cf:38:7f:25:bf:c3:e3:07:b4:08:62:
                    ec:d5:79:3f:1e:8c:60:34:d6:f6:fd:4b:ee:37:82:
                    87:b7:ba:f3:d2:11:9e:78:e3:f6:a2:ee:64:b7:57:
                    36:3a:98:f7:e8:9c:53:76:43:d8:90:d8:d4:61:d1:
                    dd:4e:3c:88:05:4e:ae:d5:5e:ea:f5:fc:82:5a:cb:
                    c6:16:30:0c:78:f8:09:d1:c2:2d:e0:a5:a4:94:54:
                    e2:6d:53:d4:25:94:a0:72:38:5a:a7:63:e8:d5:4a:
                    be:7d:d2:31:bc:16:59:94:d4:b3:c0:88:11:c3:b6:
                    5a:cb:62:f4:1f:10:c3:0a:cc:f2:f1:ee:0d:d8:a7:
                    4d:62:5d:48:ae:a6:a6:31:3f:99:b1:24:67:cf:b9:
                    89:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:3F:AA:1D:7A:D3:37:C0:82:D8:D6:67:53:0E:4E:ED:8C:1F:8B:F4
            X509v3 Authority Key Identifier:
                keyid:A8:D7:AF:27:9E:5F:AB:1A:CC:05:3B:0A:62:16:4E:DE:C8:24:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e96ad0760fe41dfa57b0ded382e54d4a9f8cba25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/d52e52c71c592a51fe0ae33962c1012a91d9b78c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/e96ad0760fe41dfa57b0ded382e54d4a9f8cba25.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:67:a4:86:88:8f:12:46:0a:45:54:a7:ff:9b:98:0f:b1:91:
         de:fe:fc:3b:d0:7b:8a:01:7c:8c:48:e7:3c:43:bf:a4:39:6c:
         41:46:2c:c5:3c:d2:0a:0f:e6:a3:ed:fc:5a:66:fd:2b:35:de:
         32:88:13:28:5b:80:67:67:4b:27:8e:11:aa:25:f6:43:23:7d:
         50:b1:23:d3:32:81:bc:70:5f:8d:93:1b:77:56:c5:8f:da:e2:
         7e:63:db:07:14:3e:26:63:7a:7b:69:d7:f0:41:a9:59:80:e8:
         8d:c3:e5:72:f9:7c:6d:d5:d5:b6:cf:2b:d3:70:15:74:7a:62:
         5d:48:8c:84:45:1e:98:79:45:38:93:08:9d:f1:40:d8:d5:36:
         cd:74:b7:92:8f:60:8d:2f:5d:1f:6b:fe:d6:29:8f:10:e3:55:
         69:a9:5d:14:ba:7e:2d:e6:1f:e4:42:00:25:ee:7a:fe:2a:3f:
         65:cd:79:e8:2a:29:15:3f:43:91:94:aa:e1:2d:a3:d3:53:0d:
         1a:f1:d7:e2:c6:dd:49:e4:6a:01:38:23:be:f1:b3:68:71:a7:
         ce:d2:3c:4d:48:f3:80:b1:7e:65:c4:5b:e2:23:cd:1e:b9:5b:
         fa:0a:3b:51:2e:97:56:52:eb:e5:a3:55:49:a7:7d:9f:da:e3:
         76:be:eb:70
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDC2xqMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU5
NmFkMDc2MGZlNDFkZmE1N2IwZGVkMzgyZTU0ZDRhOWY4Y2JhMjUwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyhkNTJlNTJjNzFjNTky
YTUxZmUwYWUzMzk2MmMxMDEyYTkxZDliNzhjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxGsKMRC93Q3zpc9ZdbTQ4j/WdZEltneH7MBmMulkG2OFhEPU
s6dtM7oNhwiaJ1kuhMwu7dVr6xED8Ka8sw35BEq0I9GFD4B1Moe0uGoY51J1QUH0
jRRgIv5OuiunJjpcQp+Ag+HN1w0gVqUOzzh/Jb/D4we0CGLs1Xk/HoxgNNb2/Uvu
N4KHt7rz0hGeeOP2ou5kt1c2Opj36JxTdkPYkNjUYdHdTjyIBU6u1V7q9fyCWsvG
FjAMePgJ0cIt4KWklFTibVPUJZSgcjhap2Po1Uq+fdIxvBZZlNSzwIgRw7Zay2L0
HxDDCszy8e4N2KdNYl1IrqamMT+ZsSRnz7mJoQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFHI/qh160zfAgtjWZ1MOTu2MH4v0MB8GA1UdIwQYMBaAFKjXryeeX6sazAU7
CmIWTt7IJPqXMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTk2YWQw
NzYwZmU0MWRmYTU3YjBkZWQzODJlNTRkNGE5ZjhjYmEyNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDAwMWUxN2QtYTI1ZS00ZTliLTg4M2YtYzYxNjRh
MjQ5MzU3L2Q1MmU1MmM3MWM1OTJhNTFmZTBhZTMzOTYyYzEwMTJhOTFkOWI3OGMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80MDAxZTE3ZC1hMjVlLTRlOWItODgzZi1jNjE2
NGEyNDkzNTcvZTk2YWQwNzYwZmU0MWRmYTU3YjBkZWQzODJlNTRkNGE5ZjhjYmEy
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAb5wqjANBgkqhkiG9w0BAQsFAAOCAQEASmekhoiPEkYKRVSn
/5uYD7GR3v78O9B7igF8jEjnPEO/pDlsQUYsxTzSCg/mo+38Wmb9KzXeMogTKFuA
Z2dLJ44RqiX2QyN9ULEj0zKBvHBfjZMbd1bFj9rifmPbBxQ+JmN6e2nX8EGpWYDo
jcPlcvl8bdXVts8r03AVdHpiXUiMhEUemHlFOJMInfFA2NU2zXS3ko9gjS9dH2v+
1imPEONVaaldFLp+LeYf5EIAJe56/io/Zc156CopFT9DkZSq4S2j01MNGvHX4sbd
SeRqATgjvvGzaHGnztI8TUjzgLF+ZcRb4iPNHrlb+go7US6XVlLr5aNVSad9n9rj
dr7rcA==
-----END CERTIFICATE-----