Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/45206155-092c-4591-84e4-f7e86f1bdfdc/a6fe441a7503a35156d75297beb21a1016e661c2.roa
File:                     a6fe441a7503a35156d75297beb21a1016e661c2.roa (raw, json)
Hash identifier:          /Rhq/9ynvEzmxUb4hj3kIKkKwSUlOP4Gma+qP9ghqy8=
Subject key identifier:   B1:66:0C:F4:F4:EF:C0:CF:A1:EA:A8:21:F5:A7:F0:79:6B:69:47:0B
Certificate issuer:       /CN=42b08b0342f4f7f7c4e44054026d23d7568373f6
Certificate serial:       11DDCC
Authority key identifier: 1F:47:29:D2:C3:62:FF:76:5B:8A:D4:B8:F1:D9:B7:18:24:A4:F4:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/42b08b0342f4f7f7c4e44054026d23d7568373f6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/45206155-092c-4591-84e4-f7e86f1bdfdc/a6fe441a7503a35156d75297beb21a1016e661c2.roa
Signing time:             Tue 28 Mar 2023 08:30:01 +0000
ROA not before:           Mon 27 Mar 2023 08:30:01 +0000
ROA not after:            Wed 26 Mar 2025 08:30:01 +0000
asID:                     270110
IP address blocks:        189.85.100.0/22 maxlen: 24
                          2806:3b1::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1170892 (0x11ddcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42b08b0342f4f7f7c4e44054026d23d7568373f6
        Validity
            Not Before: Mar 27 08:30:01 2023 GMT
            Not After : Mar 26 08:30:01 2025 GMT
        Subject: CN=a6fe441a7503a35156d75297beb21a1016e661c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ee:60:b1:e0:cf:6c:f5:37:49:65:cc:dd:f5:
                    e6:1c:99:bd:71:7e:97:54:ed:a9:4d:68:b3:16:e1:
                    25:49:77:9f:91:d4:1c:64:d3:07:68:2d:4f:9c:cd:
                    0b:03:e8:15:a6:62:36:f0:fe:14:f3:6b:e2:75:63:
                    e7:b4:47:bc:dd:f1:4d:ae:f3:52:fd:b4:68:6b:a3:
                    45:c7:85:ba:89:e5:c9:5c:c3:cf:8f:b5:d4:a9:28:
                    b7:37:55:64:99:1c:8e:4a:df:95:55:29:c5:4b:91:
                    56:67:e5:e7:b2:19:c9:e1:f8:48:14:b8:a1:11:5a:
                    5c:64:fc:77:22:45:55:1b:0e:ff:25:e2:45:0d:d4:
                    ff:55:fa:0b:d4:df:60:52:5b:41:24:2c:a5:0a:f3:
                    cd:7d:94:19:0d:ca:ec:54:60:44:b8:bf:8d:0f:1a:
                    c9:c4:ab:c0:2a:5a:1a:3d:b3:9a:01:7c:61:23:41:
                    9f:2b:77:f4:c4:98:73:fa:21:0d:56:8b:4a:43:32:
                    b9:63:52:35:3e:42:3a:5d:2e:ef:46:51:2e:e8:ff:
                    db:fe:a3:82:49:b1:41:20:25:8e:75:41:4e:1a:2b:
                    70:cd:36:f9:63:ca:95:90:b7:97:36:5f:b6:a9:a6:
                    a3:ac:9a:95:af:64:2c:21:7b:f6:d9:38:49:c0:44:
                    4e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:66:0C:F4:F4:EF:C0:CF:A1:EA:A8:21:F5:A7:F0:79:6B:69:47:0B
            X509v3 Authority Key Identifier:
                keyid:1F:47:29:D2:C3:62:FF:76:5B:8A:D4:B8:F1:D9:B7:18:24:A4:F4:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/42b08b0342f4f7f7c4e44054026d23d7568373f6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/45206155-092c-4591-84e4-f7e86f1bdfdc/a6fe441a7503a35156d75297beb21a1016e661c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/45206155-092c-4591-84e4-f7e86f1bdfdc/42b08b0342f4f7f7c4e44054026d23d7568373f6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.100.0/22
                IPv6:
                  2806:3b1::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:24:20:07:7d:dd:5e:6e:b8:d7:89:31:aa:26:8b:95:19:e2:
         43:b0:47:ea:6c:83:a5:0c:bb:db:23:86:b5:43:3c:b3:05:e8:
         70:bb:e8:12:ef:ef:28:20:2b:47:61:eb:a0:81:6b:30:05:f0:
         8d:d0:44:c4:b6:35:d4:c1:25:0f:47:f0:1c:62:38:51:e0:f2:
         a1:09:20:94:6c:fa:a2:63:84:94:17:8f:9d:68:9d:61:d7:fb:
         28:9e:e9:69:1e:2e:a1:f6:24:19:8c:89:c5:7d:24:27:97:31:
         10:92:1a:d9:b9:98:82:05:01:14:ae:a4:32:c6:3c:d9:75:b1:
         0a:0a:fd:60:19:7f:6b:ad:6e:8f:78:da:79:90:56:91:8e:75:
         15:9e:1b:7b:69:84:bd:01:d4:dc:8e:ae:ba:e6:83:5e:17:e1:
         05:9d:25:c5:e1:1a:5c:b7:cc:c9:f0:f6:05:24:57:25:8c:25:
         27:25:9e:4b:e4:f4:dd:37:fb:b2:97:30:7a:8f:de:d0:5f:39:
         3e:ea:47:08:bb:0b:e1:56:0c:27:bb:be:41:cd:67:0a:ff:f5:
         84:b9:f5:f4:23:ab:8a:da:88:16:00:e5:16:00:bc:26:8c:2e:
         a4:a0:f1:d0:20:d6:9f:45:2c:16:18:60:b0:fb:10:3c:98:37:
         88:f7:c6:be
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDEd3MMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQy
YjA4YjAzNDJmNGY3ZjdjNGU0NDA1NDAyNmQyM2Q3NTY4MzczZjYwHhcNMjMwMzI3
MDgzMDAxWhcNMjUwMzI2MDgzMDAxWjAzMTEwLwYDVQQDEyhhNmZlNDQxYTc1MDNh
MzUxNTZkNzUyOTdiZWIyMWExMDE2ZTY2MWMyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkO5gseDPbPU3SWXM3fXmHJm9cX6XVO2pTWizFuElSXefkdQc
ZNMHaC1PnM0LA+gVpmI28P4U82vidWPntEe83fFNrvNS/bRoa6NFx4W6ieXJXMPP
j7XUqSi3N1VkmRyOSt+VVSnFS5FWZ+XnshnJ4fhIFLihEVpcZPx3IkVVGw7/JeJF
DdT/VfoL1N9gUltBJCylCvPNfZQZDcrsVGBEuL+NDxrJxKvAKloaPbOaAXxhI0Gf
K3f0xJhz+iENVotKQzK5Y1I1PkI6XS7vRlEu6P/b/qOCSbFBICWOdUFOGitwzTb5
Y8qVkLeXNl+2qaajrJqVr2QsIXv22ThJwERObQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFLFmDPT078DPoeqoIfWn8HlraUcLMB8GA1UdIwQYMBaAFB9HKdLDYv92W4rU
uPHZtxgkpPRfMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDJiMDhi
MDM0MmY0ZjdmN2M0ZTQ0MDU0MDI2ZDIzZDc1NjgzNzNmNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDUyMDYxNTUtMDkyYy00NTkxLTg0ZTQtZjdlODZm
MWJkZmRjL2E2ZmU0NDFhNzUwM2EzNTE1NmQ3NTI5N2JlYjIxYTEwMTZlNjYxYzIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80NTIwNjE1NS0wOTJjLTQ1OTEtODRlNC1mN2U4
NmYxYmRmZGMvNDJiMDhiMDM0MmY0ZjdmN2M0ZTQ0MDU0MDI2ZDIzZDc1NjgzNzNm
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAr1VZDANBAIAAjAHAwUAKAYDsTANBgkqhkiG9w0BAQsFAAOC
AQEAASQgB33dXm6414kxqiaLlRniQ7BH6myDpQy72yOGtUM8swXocLvoEu/vKCAr
R2HroIFrMAXwjdBExLY11MElD0fwHGI4UeDyoQkglGz6omOElBePnWidYdf7KJ7p
aR4uofYkGYyJxX0kJ5cxEJIa2bmYggUBFK6kMsY82XWxCgr9YBl/a61uj3jaeZBW
kY51FZ4be2mEvQHU3I6uuuaDXhfhBZ0lxeEaXLfMyfD2BSRXJYwlJyWeS+T03Tf7
spcweo/e0F85PupHCLsL4VYMJ7u+Qc1nCv/1hLn19COritqIFgDlFgC8JowupKDx
0CDWn0UsFhhgsPsQPJg3iPfGvg==
-----END CERTIFICATE-----