Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/fa4a2b69a85edbf85835dc127e3cc6c0cefb80d4.roa
File:                     fa4a2b69a85edbf85835dc127e3cc6c0cefb80d4.roa (raw, json)
Hash identifier:          Qw0BXVKyXRsaa87jrZ3GIYc6u5lsbsDqrVMVNnWVo0w=
Subject key identifier:   18:77:1E:62:5A:2F:47:12:E2:EB:AA:F2:28:E2:93:B0:A5:7C:91:94
Certificate issuer:       /CN=e96ad0760fe41dfa57b0ded382e54d4a9f8cba25
Certificate serial:       0B737E
Authority key identifier: A8:D7:AF:27:9E:5F:AB:1A:CC:05:3B:0A:62:16:4E:DE:C8:24:FA:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e96ad0760fe41dfa57b0ded382e54d4a9f8cba25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/fa4a2b69a85edbf85835dc127e3cc6c0cefb80d4.roa
Signing time:             Wed 01 Jun 2022 22:17:27 +0000
ROA not before:           Fri 26 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     269905
IP address blocks:        190.112.170.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 750462 (0xb737e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96ad0760fe41dfa57b0ded382e54d4a9f8cba25
        Validity
            Not Before: Mar 26 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=fa4a2b69a85edbf85835dc127e3cc6c0cefb80d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ce:24:f9:1c:83:57:a6:31:16:b0:d0:64:04:
                    64:0e:79:f0:77:95:71:fe:a7:44:7e:e4:e8:3d:47:
                    49:80:bc:60:79:4d:eb:42:7f:3e:20:ec:2d:f1:c7:
                    4d:22:32:f2:03:c1:33:ca:e5:aa:33:ef:2f:64:bf:
                    54:70:dc:56:bd:fa:ae:16:66:24:17:f5:82:77:60:
                    6c:53:06:34:85:2b:dd:7b:5d:a1:67:79:b1:9b:1a:
                    9b:14:f0:cd:99:c3:5e:a0:e6:da:9c:3a:74:fc:8a:
                    79:60:e0:88:c2:86:71:32:59:a0:6a:51:70:08:88:
                    60:c1:65:4a:76:d9:e6:19:a4:e5:a0:38:f1:da:7a:
                    5d:e1:84:3e:0a:d7:56:ff:22:1b:2d:72:b2:e6:85:
                    94:1f:3a:f9:3a:b2:3f:0f:5b:07:dc:eb:fe:3d:07:
                    4c:6c:1a:87:dc:c0:9f:27:9c:58:5d:9d:23:6d:e5:
                    77:36:3d:14:4a:85:b9:9a:ff:6c:df:a4:b0:7c:2e:
                    1d:6b:1d:43:83:e8:28:ef:70:14:b7:78:c6:f4:d2:
                    5e:27:28:87:cc:3c:d9:3d:f6:f1:34:ac:f1:fe:4a:
                    f4:d9:ce:81:d2:06:58:76:ed:6d:4b:35:0e:c8:53:
                    0b:6c:9c:fa:11:c7:b9:b4:31:9b:6b:fa:46:8f:39:
                    e3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:77:1E:62:5A:2F:47:12:E2:EB:AA:F2:28:E2:93:B0:A5:7C:91:94
            X509v3 Authority Key Identifier:
                keyid:A8:D7:AF:27:9E:5F:AB:1A:CC:05:3B:0A:62:16:4E:DE:C8:24:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e96ad0760fe41dfa57b0ded382e54d4a9f8cba25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/fa4a2b69a85edbf85835dc127e3cc6c0cefb80d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/e96ad0760fe41dfa57b0ded382e54d4a9f8cba25.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:bc:b5:53:e3:c8:45:15:92:a1:2b:fb:2a:1b:35:6b:23:4a:
         93:56:c1:88:4a:15:83:cc:41:1b:6d:79:ab:96:60:e4:82:d0:
         40:d8:fc:55:28:aa:ac:1e:5d:bb:3c:a7:90:34:ad:3b:b4:b5:
         2c:12:e2:05:ea:10:59:49:cf:f6:25:69:c0:4b:7e:79:31:24:
         d4:b1:f1:83:cf:2c:fc:57:dd:e0:75:a9:9e:c2:e0:ea:cb:64:
         f3:2c:b0:95:7a:7e:af:76:0a:e7:0e:bf:14:00:51:99:7d:f8:
         a6:fa:cf:4a:8a:db:4f:09:b8:80:d9:55:49:bf:e9:f1:4d:8f:
         7c:69:c6:4c:d7:b3:ea:f5:b9:87:13:cb:01:70:ac:05:c5:39:
         ed:92:d9:28:0f:0b:46:f9:27:1e:df:2a:b1:15:75:b5:e5:49:
         f4:39:35:db:f6:18:b3:f1:2f:24:4d:8d:98:93:3b:ba:1d:c9:
         20:eb:c0:1e:1b:d0:1b:09:9c:1d:3a:b6:c7:ff:73:fd:70:d5:
         c6:45:f1:01:72:33:57:a6:81:29:b1:ac:36:80:86:f9:b3:f3:
         f2:85:f6:56:19:1e:8a:90:df:28:82:64:75:b1:52:dd:ef:85:
         e7:1b:1b:31:93:cf:cf:45:fc:c0:39:45:4a:c7:b3:b6:8d:7a:
         ab:5d:27:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----