Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68835589-a6e4-4be1-9ddc-bf212c3e410a/2c006cbdb65892cc5b1eee0372221f523cc647da.roa
File:                     2c006cbdb65892cc5b1eee0372221f523cc647da.roa (raw, json)
Hash identifier:          KJoFTR6PBK6GK0hLw3/NhGoEM7ClOQosisaO4dSAngE=
Subject key identifier:   B9:3E:BC:D5:4E:4C:08:57:87:A1:3F:4A:BC:D0:E7:C9:BD:60:FA:DB
Certificate issuer:       /CN=44abde35adbcf04fb85f8b032b43e458648b74b4
Certificate serial:       271D4A
Authority key identifier: 0E:93:05:9C:CA:D0:F9:E1:47:B5:E4:FF:AE:97:62:A2:76:DF:87:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44abde35adbcf04fb85f8b032b43e458648b74b4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/68835589-a6e4-4be1-9ddc-bf212c3e410a/2c006cbdb65892cc5b1eee0372221f523cc647da.roa
Signing time:             Mon 22 Jan 2024 20:05:37 +0000
ROA not before:           Mon 22 Jan 2024 20:05:37 +0000
ROA not after:            Thu 22 Jan 2026 20:05:37 +0000
asID:                     262589
IP address blocks:        190.211.168.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2563402 (0x271d4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44abde35adbcf04fb85f8b032b43e458648b74b4
        Validity
            Not Before: Jan 22 20:05:37 2024 GMT
            Not After : Jan 22 20:05:37 2026 GMT
        Subject: CN=2c006cbdb65892cc5b1eee0372221f523cc647da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:22:24:08:7d:2d:27:f4:37:aa:47:db:03:db:
                    3e:ea:98:e7:2b:38:9a:ad:57:8d:a6:c8:e3:69:8b:
                    ba:95:20:51:35:60:d4:77:a1:3e:a5:d2:eb:19:e7:
                    60:78:a3:04:be:85:b5:9e:15:54:f8:f4:e1:c3:62:
                    23:b2:cf:2c:bd:34:b5:2a:c7:5f:8b:fc:1d:53:e9:
                    5e:3c:d9:f5:60:19:6a:bd:4f:06:2e:2d:59:7c:6d:
                    78:d8:32:c6:98:22:bc:91:c6:9b:f7:41:b8:e9:08:
                    f2:3d:32:d2:82:8c:52:d0:d4:1d:cd:b6:c6:cd:c6:
                    1f:8a:72:0e:5a:c6:0c:14:9a:01:be:c3:62:3d:d6:
                    d5:6e:5d:f5:dd:bb:90:42:44:af:83:f3:d3:ee:08:
                    a4:b5:16:3c:fd:0e:7a:4c:46:64:2a:c4:56:ba:73:
                    cf:e5:3a:75:87:89:ba:29:af:7c:cb:48:7c:d3:87:
                    85:e6:52:60:36:b5:bb:ae:09:d3:b3:7b:9c:f0:8a:
                    49:5c:9d:39:53:45:9a:61:28:d0:97:04:c8:5e:44:
                    d8:30:c3:21:55:6a:1d:e7:47:fe:90:2f:d0:5b:21:
                    1c:7e:37:83:2b:72:44:35:bb:84:94:05:b2:d7:3f:
                    fb:f4:b6:2b:66:a9:01:f7:65:86:e0:70:82:9a:ba:
                    74:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:3E:BC:D5:4E:4C:08:57:87:A1:3F:4A:BC:D0:E7:C9:BD:60:FA:DB
            X509v3 Authority Key Identifier:
                keyid:0E:93:05:9C:CA:D0:F9:E1:47:B5:E4:FF:AE:97:62:A2:76:DF:87:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44abde35adbcf04fb85f8b032b43e458648b74b4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68835589-a6e4-4be1-9ddc-bf212c3e410a/2c006cbdb65892cc5b1eee0372221f523cc647da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/68835589-a6e4-4be1-9ddc-bf212c3e410a/44abde35adbcf04fb85f8b032b43e458648b74b4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5c:fd:a6:d8:e4:3c:a9:54:4b:01:10:41:1e:e6:ca:55:54:24:
         b3:6c:3d:c7:55:d5:7c:fb:8b:fe:09:b9:cd:21:ce:85:f1:cd:
         22:ec:33:0a:b6:e5:9f:68:85:36:6c:ff:9c:14:53:77:a4:93:
         f3:df:dc:83:99:87:8d:86:d0:8f:48:bc:cb:39:85:3b:20:a5:
         15:0a:3e:83:3b:54:60:0c:a2:c3:98:1b:74:ef:25:ec:de:b7:
         28:16:d6:56:16:a5:f6:d3:4c:40:31:db:66:ed:d7:3f:a9:c4:
         12:84:3f:d0:f4:20:d3:90:3a:4d:dc:76:a9:a4:be:c7:86:7d:
         1d:db:bb:8a:5a:b5:b2:b4:ef:29:a2:37:dd:14:6b:77:59:94:
         60:b2:a1:70:bf:52:21:1c:13:33:09:09:82:14:85:dc:2f:cd:
         f8:60:3f:66:7c:7f:58:b9:68:d4:43:dc:ca:35:00:81:ef:89:
         f4:50:4e:78:9f:1b:f6:84:0b:ec:d4:ff:ce:90:5c:2d:86:ec:
         e4:5c:fa:8e:df:03:e0:77:7b:f8:99:ca:c0:35:3c:81:37:63:
         e4:49:15:aa:68:58:f0:2c:60:b3:7a:9b:1d:d8:c0:d9:2d:f9:
         27:5d:d7:56:a4:15:61:53:d0:61:a3:72:16:d2:d5:fd:92:fe:
         02:5e:bb:81
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJx1KMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ0
YWJkZTM1YWRiY2YwNGZiODVmOGIwMzJiNDNlNDU4NjQ4Yjc0YjQwHhcNMjQwMTIy
MjAwNTM3WhcNMjYwMTIyMjAwNTM3WjAzMTEwLwYDVQQDEygyYzAwNmNiZGI2NTg5
MmNjNWIxZWVlMDM3MjIyMWY1MjNjYzY0N2RhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsCIkCH0tJ/Q3qkfbA9s+6pjnKziarVeNpsjjaYu6lSBRNWDU
d6E+pdLrGedgeKMEvoW1nhVU+PThw2Ijss8svTS1Ksdfi/wdU+lePNn1YBlqvU8G
Li1ZfG142DLGmCK8kcab90G46QjyPTLSgoxS0NQdzbbGzcYfinIOWsYMFJoBvsNi
PdbVbl313buQQkSvg/PT7giktRY8/Q56TEZkKsRWunPP5Tp1h4m6Ka98y0h804eF
5lJgNrW7rgnTs3uc8IpJXJ05U0WaYSjQlwTIXkTYMMMhVWod50f+kC/QWyEcfjeD
K3JENbuElAWy1z/79LYrZqkB92WG4HCCmrp0mwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLk+vNVOTAhXh6E/SrzQ58m9YPrbMB8GA1UdIwQYMBaAFA6TBZzK0PnhR7Xk
/66XYqJ234cCMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDRhYmRl
MzVhZGJjZjA0ZmI4NWY4YjAzMmI0M2U0NTg2NDhiNzRiNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjg4MzU1ODktYTZlNC00YmUxLTlkZGMtYmYyMTJj
M2U0MTBhLzJjMDA2Y2JkYjY1ODkyY2M1YjFlZWUwMzcyMjIxZjUyM2NjNjQ3ZGEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82ODgzNTU4OS1hNmU0LTRiZTEtOWRkYy1iZjIx
MmMzZTQxMGEvNDRhYmRlMzVhZGJjZjA0ZmI4NWY4YjAzMmI0M2U0NTg2NDhiNzRi
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEA77TqDANBgkqhkiG9w0BAQsFAAOCAQEAXP2m2OQ8qVRLARBB
HubKVVQks2w9x1XVfPuL/gm5zSHOhfHNIuwzCrbln2iFNmz/nBRTd6ST89/cg5mH
jYbQj0i8yzmFOyClFQo+gztUYAyiw5gbdO8l7N63KBbWVhal9tNMQDHbZu3XP6nE
EoQ/0PQg05A6Tdx2qaS+x4Z9Hdu7ilq1srTvKaI33RRrd1mUYLKhcL9SIRwTMwkJ
ghSF3C/N+GA/Znx/WLlo1EPcyjUAge+J9FBOeJ8b9oQL7NT/zpBcLYbs5Fz6jt8D
4Hd7+JnKwDU8gTdj5EkVqmhY8Cxgs3qbHdjA2S35J13XVqQVYVPQYaNyFtLV/ZL+
Al67gQ==
-----END CERTIFICATE-----