Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/60301754-5ae7-4eb9-ae7b-93cb9761ab48/93963601a550298384c424fa9c0a7e1c331f9fcb.roa
File:                     93963601a550298384c424fa9c0a7e1c331f9fcb.roa (raw, json)
Hash identifier:          JnRBUAM2ztjDK7JUr8Luq5orkw+hpA+e1a5wEo2ge5Y=
Subject key identifier:   E6:71:A9:63:3B:26:13:C2:5C:2D:68:70:1B:0B:64:9D:49:ED:72:E4
Certificate issuer:       /CN=604a67651b9e118bdc8f447e80ce77e1326a75c0
Certificate serial:       B50B
Authority key identifier: 01:B5:81:D5:80:05:4B:8E:F4:D4:0B:9D:04:09:2A:26:77:6C:B7:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/604a67651b9e118bdc8f447e80ce77e1326a75c0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/60301754-5ae7-4eb9-ae7b-93cb9761ab48/93963601a550298384c424fa9c0a7e1c331f9fcb.roa
Signing time:             Wed 24 May 2023 05:49:01 +0000
ROA not before:           Tue 23 May 2023 05:49:01 +0000
ROA not after:            Sat 24 May 2025 05:49:01 +0000
asID:                     270222
IP address blocks:        186.26.75.0/24 maxlen: 24
                          2806:3c3::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46347 (0xb50b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=604a67651b9e118bdc8f447e80ce77e1326a75c0
        Validity
            Not Before: May 23 05:49:01 2023 GMT
            Not After : May 24 05:49:01 2025 GMT
        Subject: CN=93963601a550298384c424fa9c0a7e1c331f9fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6d:56:89:25:59:a1:82:12:fa:13:4d:88:d5:
                    ce:9c:11:2e:ff:b1:43:c6:43:a3:8f:54:92:2d:d3:
                    43:4f:37:cd:af:70:b4:38:db:74:57:26:69:b0:bd:
                    89:82:b0:fd:df:52:53:64:3d:7b:39:41:2d:8c:7c:
                    92:23:f9:0b:cd:55:d3:cf:d1:fd:07:05:4f:0d:e0:
                    ce:89:66:5c:bf:bd:0f:f4:15:9e:52:c3:ff:fa:f4:
                    8e:e1:e3:6b:21:f9:9d:6a:3d:53:eb:91:a8:ab:25:
                    16:2a:eb:4c:6f:67:6f:bb:c8:19:05:bb:f8:1e:93:
                    17:ab:3f:f8:be:81:e3:0c:27:f0:d6:28:eb:5e:1e:
                    23:55:d0:97:16:54:73:ac:5c:0d:7a:22:82:fd:7b:
                    e0:f0:5a:81:c3:fb:33:92:50:63:90:a1:92:e6:e4:
                    3d:58:2e:ae:14:10:62:39:bb:ef:e4:ee:c3:2a:32:
                    a1:9e:55:07:e0:d3:d7:30:54:6e:fd:ed:5f:60:89:
                    bc:e6:d5:06:30:b9:79:1b:29:d1:0e:04:8d:37:29:
                    4f:dc:72:b9:93:59:3c:a8:0c:49:9a:d4:b4:61:c9:
                    38:47:85:c0:a6:5f:7e:00:46:5e:df:48:37:c1:76:
                    6d:7c:ab:9e:55:f0:7f:60:29:ff:10:33:72:f5:36:
                    d6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:71:A9:63:3B:26:13:C2:5C:2D:68:70:1B:0B:64:9D:49:ED:72:E4
            X509v3 Authority Key Identifier:
                keyid:01:B5:81:D5:80:05:4B:8E:F4:D4:0B:9D:04:09:2A:26:77:6C:B7:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/604a67651b9e118bdc8f447e80ce77e1326a75c0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/60301754-5ae7-4eb9-ae7b-93cb9761ab48/93963601a550298384c424fa9c0a7e1c331f9fcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/60301754-5ae7-4eb9-ae7b-93cb9761ab48/604a67651b9e118bdc8f447e80ce77e1326a75c0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.26.75.0/24
                IPv6:
                  2806:3c3::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:51:9d:30:3a:cf:bf:65:a3:a7:d0:60:44:26:a2:c4:c1:50:
         4b:1c:e5:5e:07:04:cd:b2:99:d6:d2:2a:84:f4:f9:59:33:80:
         f5:5c:b4:e0:ae:8f:18:54:4d:21:77:cf:c9:14:5b:69:67:09:
         55:ec:ce:9d:4a:1a:d3:60:52:99:de:15:9e:d6:9a:eb:c3:5f:
         a3:f6:c1:30:28:cc:8f:e9:12:a2:4c:66:b2:26:7d:10:1c:a7:
         f7:f6:0d:5c:cc:8f:e8:a4:10:bf:bb:7d:09:df:c5:26:0b:5e:
         5e:a2:6d:06:bc:04:2f:a4:88:ab:21:96:5d:1a:94:03:8c:f0:
         36:ba:9c:e1:fd:e5:d4:bf:d9:64:2b:c2:56:f7:07:2d:35:a8:
         f3:b1:a5:e0:8d:53:12:63:ba:60:e9:1a:6f:57:d4:b1:10:2f:
         f8:d0:c8:e5:ed:fb:21:76:a7:70:07:a9:a0:7e:6d:16:3c:56:
         9a:fa:e1:45:7d:91:7f:f1:87:18:25:13:52:ee:e1:54:5f:4a:
         f0:32:f0:98:9e:62:37:a5:ae:33:d1:3b:41:2d:cc:ed:80:c7:
         37:42:d4:6e:38:69:0c:ad:b2:84:b8:40:bd:19:8f:e3:72:15:
         75:32:cd:ad:67:26:11:1f:a8:6f:41:ee:ca:e0:6c:4d:19:dc:
         db:b6:30:ef
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDALULMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDYw
NGE2NzY1MWI5ZTExOGJkYzhmNDQ3ZTgwY2U3N2UxMzI2YTc1YzAwHhcNMjMwNTIz
MDU0OTAxWhcNMjUwNTI0MDU0OTAxWjAzMTEwLwYDVQQDEyg5Mzk2MzYwMWE1NTAy
OTgzODRjNDI0ZmE5YzBhN2UxYzMzMWY5ZmNiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmW1WiSVZoYIS+hNNiNXOnBEu/7FDxkOjj1SSLdNDTzfNr3C0
ONt0VyZpsL2JgrD931JTZD17OUEtjHySI/kLzVXTz9H9BwVPDeDOiWZcv70P9BWe
UsP/+vSO4eNrIfmdaj1T65GoqyUWKutMb2dvu8gZBbv4HpMXqz/4voHjDCfw1ijr
Xh4jVdCXFlRzrFwNeiKC/Xvg8FqBw/szklBjkKGS5uQ9WC6uFBBiObvv5O7DKjKh
nlUH4NPXMFRu/e1fYIm85tUGMLl5GynRDgSNNylP3HK5k1k8qAxJmtS0Yck4R4XA
pl9+AEZe30g3wXZtfKueVfB/YCn/EDNy9TbWlwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFOZxqWM7JhPCXC1ocBsLZJ1J7XLkMB8GA1UdIwQYMBaAFAG1gdWABUuO9NQL
nQQJKiZ3bLdzMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjA0YTY3
NjUxYjllMTE4YmRjOGY0NDdlODBjZTc3ZTEzMjZhNzVjMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjAzMDE3NTQtNWFlNy00ZWI5LWFlN2ItOTNjYjk3
NjFhYjQ4LzkzOTYzNjAxYTU1MDI5ODM4NGM0MjRmYTljMGE3ZTFjMzMxZjlmY2Iu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MDMwMTc1NC01YWU3LTRlYjktYWU3Yi05M2Ni
OTc2MWFiNDgvNjA0YTY3NjUxYjllMTE4YmRjOGY0NDdlODBjZTc3ZTEzMjZhNzVj
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEALoaSzANBAIAAjAHAwUAKAYDwzANBgkqhkiG9w0BAQsFAAOC
AQEAA1GdMDrPv2Wjp9BgRCaixMFQSxzlXgcEzbKZ1tIqhPT5WTOA9Vy04K6PGFRN
IXfPyRRbaWcJVezOnUoa02BSmd4Vntaa68Nfo/bBMCjMj+kSokxmsiZ9EByn9/YN
XMyP6KQQv7t9Cd/FJgteXqJtBrwEL6SIqyGWXRqUA4zwNrqc4f3l1L/ZZCvCVvcH
LTWo87Gl4I1TEmO6YOkab1fUsRAv+NDI5e37IXancAepoH5tFjxWmvrhRX2Rf/GH
GCUTUu7hVF9K8DLwmJ5iN6WuM9E7QS3M7YDHN0LUbjhpDK2yhLhAvRmP43IVdTLN
rWcmER+ob0HuyuBsTRnc27Yw7w==
-----END CERTIFICATE-----