Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/19e9135518afcf2930eff9e598342d0bcecfbb04.roa
File:                     19e9135518afcf2930eff9e598342d0bcecfbb04.roa (raw, json)
Hash identifier:          Iok07UhAAPwqt85pALvSItENSzh+Mg+y0fuAAzT9Icw=
Subject key identifier:   CF:30:89:01:DA:C1:07:A2:1F:91:F5:CB:B3:87:6A:A1:CE:55:EC:0D
Certificate issuer:       /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial:       03A313
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/19e9135518afcf2930eff9e598342d0bcecfbb04.roa
Signing time:             Tue 11 Jul 2023 13:09:49 +0000
ROA not before:           Mon 10 Jul 2023 13:09:49 +0000
ROA not after:            Fri 11 Jul 2025 13:09:49 +0000
asID:                     16629
IP address blocks:        191.112.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238355 (0x3a313)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
        Validity
            Not Before: Jul 10 13:09:49 2023 GMT
            Not After : Jul 11 13:09:49 2025 GMT
        Subject: CN=19e9135518afcf2930eff9e598342d0bcecfbb04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6a:37:a8:0b:cb:db:02:7d:f4:f0:c0:2d:f0:
                    f5:71:fb:77:7a:27:98:28:e6:27:9c:cc:87:64:3d:
                    7a:9f:ad:b0:40:ab:12:eb:4f:e5:d7:e9:37:27:c5:
                    0c:c3:bd:86:5b:1f:9d:66:58:2d:0a:7f:ef:d3:07:
                    43:91:fc:e7:f5:b6:84:ea:d7:7c:35:12:39:26:49:
                    5c:bb:eb:e0:6a:c0:5e:03:6b:3e:c8:9a:b7:7b:2a:
                    17:49:1f:89:c6:09:02:0f:9c:c3:d8:ef:fc:2a:62:
                    8c:e5:8f:28:48:54:74:02:ac:31:cc:5f:a5:8a:0c:
                    bf:2c:9d:cf:b7:96:08:fa:ca:d0:ea:49:42:2f:68:
                    c2:05:16:93:21:e2:a7:d0:2a:8e:50:4b:e9:1b:23:
                    dd:1e:bd:b7:ab:d2:37:28:0e:3c:aa:fe:66:f9:96:
                    98:e1:0d:37:d5:52:77:cf:6b:0c:3b:8a:3a:02:0a:
                    ab:44:00:45:f4:8d:b4:77:ca:be:b6:f2:3b:cd:ca:
                    68:5c:32:d9:57:dd:d4:f1:f2:16:28:d3:c1:8d:2e:
                    09:aa:88:8e:34:4f:35:9b:14:7a:3a:a9:7d:fa:3a:
                    5b:e4:08:77:b5:22:d9:7b:9f:12:94:5c:b7:52:0d:
                    e7:1f:76:fc:e1:e8:1d:58:ed:53:f9:df:a6:20:16:
                    5e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:30:89:01:DA:C1:07:A2:1F:91:F5:CB:B3:87:6A:A1:CE:55:EC:0D
            X509v3 Authority Key Identifier:
                keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/19e9135518afcf2930eff9e598342d0bcecfbb04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.112.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         84:0d:a6:b6:4a:55:51:77:f2:b8:47:2c:15:7c:2e:ab:0e:a6:
         9c:00:71:0a:27:70:30:99:fc:52:43:c1:ed:7b:a8:6f:88:72:
         29:d6:cd:88:00:2e:cc:6e:00:f6:4d:61:ae:c8:d8:de:2a:d9:
         81:17:85:c6:8a:0e:8c:be:18:8a:bd:c2:69:e3:ae:9b:ba:10:
         01:49:89:6c:fe:69:17:4f:74:f9:a8:38:77:42:83:fa:51:13:
         e7:5b:18:90:0d:fb:a1:a5:4e:cd:5f:7f:51:ec:ee:52:29:d0:
         fa:99:26:be:b0:17:e9:9a:2f:8d:4f:b6:ea:b0:85:d0:0d:07:
         ba:a4:33:d2:37:ca:98:17:89:b7:6f:3f:ba:22:07:57:10:6e:
         1d:57:36:ff:e4:f6:78:b3:1b:31:69:45:55:de:96:d6:18:48:
         86:f8:7e:9f:57:84:1d:7f:d7:8d:c1:93:0d:4e:4f:75:bd:f5:
         da:17:35:41:65:cc:f0:fc:61:53:a2:61:98:16:ec:f1:01:cf:
         a5:97:ff:20:c7:ad:84:f6:59:41:1e:48:74:f9:56:10:cb:30:
         7e:28:ee:c3:1e:67:36:10:4b:ae:ef:70:18:f5:9b:18:08:04:
         39:fb:f6:42:e3:f5:41:32:8e:83:7d:de:5a:e0:50:86:5e:83:
         c3:04:2f:05
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIDA6MTMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRm
MjZkNmY0MmZmY2E2MjkxYzZjNWM2MTYwMWY5MTZkN2U1OWEyZDMwHhcNMjMwNzEw
MTMwOTQ5WhcNMjUwNzExMTMwOTQ5WjAzMTEwLwYDVQQDEygxOWU5MTM1NTE4YWZj
ZjI5MzBlZmY5ZTU5ODM0MmQwYmNlY2ZiYjA0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtGo3qAvL2wJ99PDALfD1cft3eieYKOYnnMyHZD16n62wQKsS
60/l1+k3J8UMw72GWx+dZlgtCn/v0wdDkfzn9baE6td8NRI5Jklcu+vgasBeA2s+
yJq3eyoXSR+JxgkCD5zD2O/8KmKM5Y8oSFR0AqwxzF+ligy/LJ3Pt5YI+srQ6klC
L2jCBRaTIeKn0CqOUEvpGyPdHr23q9I3KA48qv5m+ZaY4Q031VJ3z2sMO4o6Agqr
RABF9I20d8q+tvI7zcpoXDLZV93U8fIWKNPBjS4JqoiONE81mxR6Oql9+jpb5Ah3
tSLZe58SlFy3Ug3nH3b84egdWO1T+d+mIBZelQIDAQABo4ICWjCCAlYwHQYDVR0O
BBYEFM8wiQHawQeiH5H1y7OHaqHOVewNMB8GA1UdIwQYMBaAFM2qHwCJ05renW3b
eH+AQ9p8hu5IMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGYyNmQ2
ZjQyZmZjYTYyOTFjNmM1YzYxNjAxZjkxNmQ3ZTU5YTJkMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjVkYjQxNWItYjNkZC00ZjQxLWJlZTMtMjg0ZWRh
MWQ3ZTU5LzE5ZTkxMzU1MThhZmNmMjkzMGVmZjllNTk4MzQyZDBiY2VjZmJiMDQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NWRiNDE1Yi1iM2RkLTRmNDEtYmVlMy0yODRl
ZGExZDdlNTkvZGYyNmQ2ZjQyZmZjYTYyOTFjNmM1YzYxNjAxZjkxNmQ3ZTU5YTJk
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQP
MA0wCwQCAAEwBQMDAr9wMA0GCSqGSIb3DQEBCwUAA4IBAQCEDaa2SlVRd/K4RywV
fC6rDqacAHEKJ3AwmfxSQ8Hte6hviHIp1s2IAC7MbgD2TWGuyNjeKtmBF4XGig6M
vhiKvcJp466buhABSYls/mkXT3T5qDh3QoP6URPnWxiQDfuhpU7NX39R7O5SKdD6
mSa+sBfpmi+NT7bqsIXQDQe6pDPSN8qYF4m3bz+6IgdXEG4dVzb/5PZ4sxsxaUVV
3pbWGEiG+H6fV4Qdf9eNwZMNTk91vfXaFzVBZczw/GFTomGYFuzxAc+ll/8gx62E
9llBHkh0+VYQyzB+KO7DHmc2EEuu73AY9ZsYCAQ5+/ZC4/VBMo6Dfd5a4FCGXoPD
BC8F
-----END CERTIFICATE-----