Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4ced9548-51d3-4d90-a5ea-188f13a549dd/a16ce02b0ab3a4af0c847a5aa6dff2a758a61c30.roa
File:                     a16ce02b0ab3a4af0c847a5aa6dff2a758a61c30.roa (raw, json)
Hash identifier:          teIVcXr7BvXNLJagpTLZc+mNR3ze+AOwH16JMsgJ89g=
Subject key identifier:   43:A2:60:95:F1:2D:C1:02:B9:88:6C:54:98:72:CE:47:2E:61:A2:95
Certificate issuer:       /CN=6410162b16fe94fd0a84d5440b3138f11f80bb21
Certificate serial:       216211
Authority key identifier: 45:38:AC:6C:70:78:61:AD:60:CF:D1:72:57:29:A5:05:C4:00:13:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6410162b16fe94fd0a84d5440b3138f11f80bb21.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4ced9548-51d3-4d90-a5ea-188f13a549dd/a16ce02b0ab3a4af0c847a5aa6dff2a758a61c30.roa
Signing time:             Wed 28 Jun 2023 18:25:37 +0000
ROA not before:           Tue 27 Jun 2023 18:25:36 +0000
ROA not after:            Sat 28 Jun 2025 18:25:36 +0000
asID:                     25607
IP address blocks:        191.103.112.0/20 maxlen: 24
                          190.106.48.0/20 maxlen: 24
                          161.0.32.0/19 maxlen: 24
                          200.85.160.0/20 maxlen: 24
                          2803:800::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2187793 (0x216211)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6410162b16fe94fd0a84d5440b3138f11f80bb21
        Validity
            Not Before: Jun 27 18:25:36 2023 GMT
            Not After : Jun 28 18:25:36 2025 GMT
        Subject: CN=a16ce02b0ab3a4af0c847a5aa6dff2a758a61c30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1d:4e:2f:90:25:3b:5e:45:b7:f2:a1:42:34:
                    2c:a8:c8:73:89:2e:a9:73:3c:59:1c:a3:f2:e2:6d:
                    0a:c3:f2:5c:a1:76:e3:7e:89:29:cc:64:6c:ec:28:
                    07:b0:ce:2d:d4:ed:1a:f2:d1:05:1f:68:cc:9e:fa:
                    73:45:24:24:4e:8c:09:a2:c6:8d:3c:92:c6:29:1d:
                    5e:7b:12:b5:96:59:68:a8:f0:d4:d4:27:1f:e2:71:
                    a1:41:6f:d5:0a:2d:33:48:9d:75:bf:4b:fd:98:62:
                    f6:06:f3:7f:38:98:55:ae:27:5c:e1:60:0a:a5:9e:
                    85:da:4d:30:d0:24:e5:4b:09:99:d2:1d:71:c7:ca:
                    fb:66:2e:5c:0e:fd:4e:26:9f:46:f4:1f:2c:d2:42:
                    7b:0f:d4:b8:b7:4c:aa:de:a3:65:e1:d3:c2:13:d9:
                    01:00:86:5d:18:99:d5:eb:75:71:7d:2b:db:7a:c5:
                    15:b9:48:b4:13:7f:46:d6:44:84:d2:80:08:6a:ba:
                    31:73:2a:d6:3d:e8:ef:86:0a:26:23:2f:e8:0d:ae:
                    0e:c1:e0:5f:55:36:71:54:fe:2b:32:0d:0b:e4:dd:
                    f3:f0:53:6c:5f:fb:64:08:c7:28:79:71:06:06:fe:
                    7e:51:99:02:8a:c7:b6:f9:60:09:08:09:41:a1:89:
                    cd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A2:60:95:F1:2D:C1:02:B9:88:6C:54:98:72:CE:47:2E:61:A2:95
            X509v3 Authority Key Identifier:
                keyid:45:38:AC:6C:70:78:61:AD:60:CF:D1:72:57:29:A5:05:C4:00:13:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6410162b16fe94fd0a84d5440b3138f11f80bb21.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4ced9548-51d3-4d90-a5ea-188f13a549dd/a16ce02b0ab3a4af0c847a5aa6dff2a758a61c30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4ced9548-51d3-4d90-a5ea-188f13a549dd/6410162b16fe94fd0a84d5440b3138f11f80bb21.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.0.32.0/19
                  190.106.48.0/20
                  191.103.112.0/20
                  200.85.160.0/20
                IPv6:
                  2803:800::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:cf:a2:41:50:b7:01:53:f2:cc:99:a1:0b:aa:d0:6f:78:b4:
         0b:c2:c9:02:f0:1c:6f:2c:f3:b6:fa:68:e6:05:75:bc:23:b4:
         fb:e9:59:6d:7d:77:d1:0a:24:ae:90:4f:60:22:8c:d1:0c:03:
         6c:9a:19:a1:e8:fb:6f:87:84:55:7f:a3:93:0d:8c:03:4b:4a:
         98:d1:b3:f1:13:6e:90:4f:a8:a7:6d:33:ec:dc:74:07:ae:8f:
         ef:55:5b:b5:22:0e:f8:63:08:5c:5c:44:84:4d:5f:c0:23:b2:
         a9:54:f8:d4:0c:fd:b4:75:92:48:9d:35:f4:72:dd:c1:ae:3f:
         2b:bd:7c:05:86:f3:c7:d0:40:43:fc:4b:38:a8:a4:1a:f6:96:
         5e:2f:e5:18:7c:78:35:3e:1c:96:01:21:67:64:38:fb:b3:30:
         6f:d2:53:db:ce:53:ac:f5:64:d4:08:f6:54:49:8c:79:50:df:
         83:26:5c:e9:4b:dd:08:1e:1a:18:be:17:c7:11:33:f9:5e:10:
         b5:05:84:9f:1d:4e:c2:c6:fb:90:ce:42:17:a3:21:65:42:8d:
         02:65:3b:3d:d0:44:da:cf:92:2b:02:c8:65:7c:8f:f9:ed:be:
         4d:f4:11:3e:59:69:5a:89:74:a6:bd:fb:f0:8a:ea:72:d8:a8:
         8c:06:f5:b9
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIDIWIRMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY0
MTAxNjJiMTZmZTk0ZmQwYTg0ZDU0NDBiMzEzOGYxMWY4MGJiMjEwHhcNMjMwNjI3
MTgyNTM2WhcNMjUwNjI4MTgyNTM2WjAzMTEwLwYDVQQDEyhhMTZjZTAyYjBhYjNh
NGFmMGM4NDdhNWFhNmRmZjJhNzU4YTYxYzMwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsh1OL5AlO15Ft/KhQjQsqMhziS6pczxZHKPy4m0Kw/JcoXbj
fokpzGRs7CgHsM4t1O0a8tEFH2jMnvpzRSQkTowJosaNPJLGKR1eexK1llloqPDU
1Ccf4nGhQW/VCi0zSJ11v0v9mGL2BvN/OJhVridc4WAKpZ6F2k0w0CTlSwmZ0h1x
x8r7Zi5cDv1OJp9G9B8s0kJ7D9S4t0yq3qNl4dPCE9kBAIZdGJnV63VxfSvbesUV
uUi0E39G1kSE0oAIaroxcyrWPejvhgomIy/oDa4OweBfVTZxVP4rMg0L5N3z8FNs
X/tkCMcoeXEGBv5+UZkCise2+WAJCAlBoYnNbwIDAQABo4ICfDCCAngwHQYDVR0O
BBYEFEOiYJXxLcECuYhsVJhyzkcuYaKVMB8GA1UdIwQYMBaAFEU4rGxweGGtYM/R
clcppQXEABOPMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjQxMDE2
MmIxNmZlOTRmZDBhODRkNTQ0MGIzMTM4ZjExZjgwYmIyMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGNlZDk1NDgtNTFkMy00ZDkwLWE1ZWEtMTg4ZjEz
YTU0OWRkL2ExNmNlMDJiMGFiM2E0YWYwYzg0N2E1YWE2ZGZmMmE3NThhNjFjMzAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80Y2VkOTU0OC01MWQzLTRkOTAtYTVlYS0xODhm
MTNhNTQ5ZGQvNjQxMDE2MmIxNmZlOTRmZDBhODRkNTQ0MGIzMTM4ZjExZjgwYmIy
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBABggrBgEFBQcBBwEB/wQx
MC8wHgQCAAEwGAMEBaEAIAMEBL5qMAMEBL9ncAMEBMhVoDANBAIAAjAHAwUAKAMI
ADANBgkqhkiG9w0BAQsFAAOCAQEAg8+iQVC3AVPyzJmhC6rQb3i0C8LJAvAcbyzz
tvpo5gV1vCO0++lZbX130QokrpBPYCKM0QwDbJoZoej7b4eEVX+jkw2MA0tKmNGz
8RNukE+op20z7Nx0B66P71VbtSIO+GMIXFxEhE1fwCOyqVT41Az9tHWSSJ019HLd
wa4/K718BYbzx9BAQ/xLOKikGvaWXi/lGHx4NT4clgEhZ2Q4+7Mwb9JT285TrPVk
1Aj2VEmMeVDfgyZc6UvdCB4aGL4XxxEz+V4QtQWEnx1Owsb7kM5CF6MhZUKNAmU7
PdBE2s+SKwLIZXyP+e2+TfQRPllpWol0pr378IrqctiojAb1uQ==
-----END CERTIFICATE-----