Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5e41f8e0-767b-4f81-8908-a853d15adc64/e28a6d4590e91e6f7551a6256ef76759d91d3811.roa
File:                     e28a6d4590e91e6f7551a6256ef76759d91d3811.roa (raw, json)
Hash identifier:          +33UBf/9jVFef+2EjZ9EdQJ8miknp5scNcp39/DKCAw=
Subject key identifier:   3A:B6:99:67:F9:2A:69:4B:27:E4:7E:86:6B:4D:96:5C:5C:BE:B9:D9
Certificate issuer:       /CN=632e9a2ff72a8398731612b91d77d2040365c4a2
Certificate serial:       077409
Authority key identifier: 5D:2B:36:FF:65:7C:14:4D:98:23:0E:ED:9B:0E:07:38:4F:8A:8F:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/632e9a2ff72a8398731612b91d77d2040365c4a2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5e41f8e0-767b-4f81-8908-a853d15adc64/e28a6d4590e91e6f7551a6256ef76759d91d3811.roa
Signing time:             Thu 15 Feb 2024 15:06:48 +0000
ROA not before:           Thu 15 Feb 2024 15:06:47 +0000
ROA not after:            Sun 15 Feb 2026 15:06:47 +0000
asID:                     11947
IP address blocks:        196.32.32.0/19 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 488457 (0x77409)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632e9a2ff72a8398731612b91d77d2040365c4a2
        Validity
            Not Before: Feb 15 15:06:47 2024 GMT
            Not After : Feb 15 15:06:47 2026 GMT
        Subject: CN=e28a6d4590e91e6f7551a6256ef76759d91d3811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ec:fa:66:a7:13:1d:66:28:0e:ac:ad:a5:a5:
                    d6:56:8d:a7:64:48:7d:b9:1d:87:4e:d1:24:89:70:
                    29:25:ef:04:f9:c3:4d:a9:55:29:3e:b6:21:c6:79:
                    2f:11:ef:62:08:d5:1e:06:aa:97:8c:7e:db:5d:31:
                    8e:7a:65:32:08:f6:c9:33:57:87:3e:87:5c:f9:62:
                    eb:cd:74:e9:d9:65:53:b3:14:9e:57:f7:5b:20:07:
                    24:7b:0f:b7:be:10:a7:9e:a4:6c:bb:74:4b:30:1a:
                    75:ab:b2:0d:6c:09:5e:c2:dc:a2:f1:61:38:88:c2:
                    01:ec:83:3b:0e:53:83:a8:09:04:8f:b3:a9:15:76:
                    0b:75:b8:b0:7c:7a:a5:71:3e:06:52:72:d3:4a:3b:
                    c8:ab:1e:6c:bf:b4:28:d6:be:af:61:d6:06:35:71:
                    b3:cc:ba:f7:1f:f9:44:5d:c8:ca:51:0a:78:83:05:
                    53:b9:44:82:b9:12:f4:1c:e9:c1:5d:ef:1d:64:33:
                    ed:a2:7f:58:d6:4c:a4:5f:7a:c7:fe:d7:68:f1:7b:
                    77:ae:d4:8c:3c:42:a6:cc:b2:06:a2:41:f3:e3:50:
                    91:fa:db:9b:a7:26:93:86:eb:fd:de:d9:ca:a5:1c:
                    4c:0c:7a:9b:c0:3f:b3:37:84:b4:8b:97:16:86:d1:
                    04:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B6:99:67:F9:2A:69:4B:27:E4:7E:86:6B:4D:96:5C:5C:BE:B9:D9
            X509v3 Authority Key Identifier:
                keyid:5D:2B:36:FF:65:7C:14:4D:98:23:0E:ED:9B:0E:07:38:4F:8A:8F:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/632e9a2ff72a8398731612b91d77d2040365c4a2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5e41f8e0-767b-4f81-8908-a853d15adc64/e28a6d4590e91e6f7551a6256ef76759d91d3811.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5e41f8e0-767b-4f81-8908-a853d15adc64/632e9a2ff72a8398731612b91d77d2040365c4a2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.32.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         20:4f:d0:e9:9a:de:12:8e:29:bd:c1:d0:05:79:53:a7:af:10:
         1e:74:87:17:aa:c9:67:25:15:d0:d4:95:a8:fe:04:2e:7b:13:
         8c:73:c3:14:7b:2e:8c:10:0b:41:46:b2:74:ce:21:56:62:b9:
         4e:a3:61:8c:18:c1:8c:f2:1f:81:56:1f:62:76:9d:8a:cb:c6:
         ec:c0:44:a4:56:78:1d:1c:cf:1c:3c:da:21:b6:b9:6b:08:72:
         2e:2b:1b:db:4c:7f:ac:3b:aa:b4:83:4b:b7:ab:14:ff:ee:22:
         58:3e:a3:1a:c6:0f:5d:13:b1:74:9b:22:89:4e:c7:68:c9:92:
         68:53:93:a5:3e:49:9c:f3:58:ae:51:39:b9:0c:ba:dd:0a:22:
         04:97:89:43:87:72:91:29:7d:3a:c1:a9:77:2b:d7:79:c1:af:
         c7:80:0e:50:21:03:bd:ca:57:fe:b1:df:10:24:2f:c1:fe:8d:
         2a:7c:41:e8:6f:c6:26:63:86:18:44:56:aa:95:f7:93:a4:31:
         16:99:50:01:b6:d0:9f:d6:76:84:0e:c0:d1:6f:dd:55:5e:95:
         44:70:dd:d3:cb:b2:0e:44:b8:08:86:d7:95:81:2f:16:a9:03:
         8e:c8:3f:99:de:05:af:69:85:a3:a1:b9:35:5d:65:af:1a:b4:
         96:b8:ae:d2
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDB3QJMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDYz
MmU5YTJmZjcyYTgzOTg3MzE2MTJiOTFkNzdkMjA0MDM2NWM0YTIwHhcNMjQwMjE1
MTUwNjQ3WhcNMjYwMjE1MTUwNjQ3WjAzMTEwLwYDVQQDEyhlMjhhNmQ0NTkwZTkx
ZTZmNzU1MWE2MjU2ZWY3Njc1OWQ5MWQzODExMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkOz6ZqcTHWYoDqytpaXWVo2nZEh9uR2HTtEkiXApJe8E+cNN
qVUpPrYhxnkvEe9iCNUeBqqXjH7bXTGOemUyCPbJM1eHPodc+WLrzXTp2WVTsxSe
V/dbIAckew+3vhCnnqRsu3RLMBp1q7INbAlewtyi8WE4iMIB7IM7DlODqAkEj7Op
FXYLdbiwfHqlcT4GUnLTSjvIqx5sv7Qo1r6vYdYGNXGzzLr3H/lEXcjKUQp4gwVT
uUSCuRL0HOnBXe8dZDPton9Y1kykX3rH/tdo8Xt3rtSMPEKmzLIGokHz41CR+tub
pyaThuv93tnKpRxMDHqbwD+zN4S0i5cWhtEE+QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFDq2mWf5KmlLJ+R+hmtNllxcvrnZMB8GA1UdIwQYMBaAFF0rNv9lfBRNmCMO
7ZsOBzhPio9uMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjMyZTlh
MmZmNzJhODM5ODczMTYxMmI5MWQ3N2QyMDQwMzY1YzRhMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWU0MWY4ZTAtNzY3Yi00ZjgxLTg5MDgtYTg1M2Qx
NWFkYzY0L2UyOGE2ZDQ1OTBlOTFlNmY3NTUxYTYyNTZlZjc2NzU5ZDkxZDM4MTEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZTQxZjhlMC03NjdiLTRmODEtODkwOC1hODUz
ZDE1YWRjNjQvNjMyZTlhMmZmNzJhODM5ODczMTYxMmI5MWQ3N2QyMDQwMzY1YzRh
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEBcQgIDANBgkqhkiG9w0BAQsFAAOCAQEAIE/Q6ZreEo4pvcHQ
BXlTp68QHnSHF6rJZyUV0NSVqP4ELnsTjHPDFHsujBALQUaydM4hVmK5TqNhjBjB
jPIfgVYfYnadisvG7MBEpFZ4HRzPHDzaIba5awhyLisb20x/rDuqtINLt6sU/+4i
WD6jGsYPXROxdJsiiU7HaMmSaFOTpT5JnPNYrlE5uQy63QoiBJeJQ4dykSl9OsGp
dyvXecGvx4AOUCEDvcpX/rHfECQvwf6NKnxB6G/GJmOGGERWqpX3k6QxFplQAbbQ
n9Z2hA7A0W/dVV6VRHDd08uyDkS4CIbXlYEvFqkDjsg/md4Fr2mFo6G5NV1lrxq0
lriu0g==
-----END CERTIFICATE-----