Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6b1c4414-35bb-4cf5-8a3b-71ad6a70f29e/112359a0fda76a18e3b52f68748e474d55e639b2.roa
File:                     112359a0fda76a18e3b52f68748e474d55e639b2.roa (raw, json)
Hash identifier:          /TCKsUmKa5kDAVQ5+z1RQ+c4ZqE4ZX0eMrER8FCNn3k=
Subject key identifier:   AD:A5:34:A4:58:9D:5F:0C:5E:C4:BE:D6:93:55:A1:2F:65:87:BE:6F
Certificate issuer:       /CN=ca706f4fdac7e7a59a881ac85a8f4ab07ade751d
Certificate serial:       0476
Authority key identifier: 3B:94:49:D1:FE:8A:37:9A:EB:42:6F:B1:EF:F2:73:E9:EB:47:4F:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca706f4fdac7e7a59a881ac85a8f4ab07ade751d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6b1c4414-35bb-4cf5-8a3b-71ad6a70f29e/112359a0fda76a18e3b52f68748e474d55e639b2.roa
Signing time:             Mon 28 Nov 2022 14:27:20 +0000
ROA not before:           Sun 27 Nov 2022 14:25:04 +0000
ROA not after:            Thu 28 Nov 2024 14:25:04 +0000
asID:                     263181
IP address blocks:        186.177.192.0/19 maxlen: 24
                          2803:4c80::/32 maxlen: 56

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1142 (0x476)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca706f4fdac7e7a59a881ac85a8f4ab07ade751d
        Validity
            Not Before: Nov 27 14:25:04 2022 GMT
            Not After : Nov 28 14:25:04 2024 GMT
        Subject: CN=112359a0fda76a18e3b52f68748e474d55e639b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:6d:16:a7:7c:53:49:37:f8:3d:e9:1f:9e:8e:
                    77:b0:e7:2d:0a:d3:6e:e8:36:64:44:4b:4c:b5:bb:
                    e1:8d:f7:ed:81:ed:25:3f:d6:42:81:92:70:94:9b:
                    35:d4:85:62:b2:67:fc:91:45:a3:ce:e4:2a:70:9f:
                    e9:ff:9a:15:c6:5a:15:4b:7f:21:ee:9b:f6:9b:32:
                    75:0c:20:0a:c7:c5:58:48:0a:42:b8:0b:92:71:0b:
                    48:e8:9e:c4:ee:9d:9b:68:39:7b:13:89:33:fb:90:
                    1f:9a:6a:79:5d:39:ac:86:a8:16:c8:36:b6:4a:3b:
                    6c:75:9c:a6:23:54:88:c1:87:98:e1:55:45:ac:93:
                    fd:e6:3c:3f:ca:bc:4e:44:9f:50:5b:dc:52:54:d7:
                    69:54:1c:b2:cc:19:ce:0c:e4:bb:f3:14:7d:32:b8:
                    95:c3:58:7e:f4:26:fb:40:f3:22:4c:4e:90:5a:e1:
                    52:61:e0:c6:d3:57:66:f5:d8:77:c6:d5:9d:30:eb:
                    66:4d:7b:46:bd:40:2c:d4:b0:2a:8a:15:07:1e:21:
                    34:d3:61:49:a7:56:0f:c4:53:c1:d5:84:12:06:a7:
                    05:00:de:dc:c7:9f:50:c0:cc:6d:e0:08:81:27:a7:
                    72:b3:ac:60:6b:3e:de:58:bb:6d:6b:63:fa:4d:0d:
                    37:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A5:34:A4:58:9D:5F:0C:5E:C4:BE:D6:93:55:A1:2F:65:87:BE:6F
            X509v3 Authority Key Identifier:
                keyid:3B:94:49:D1:FE:8A:37:9A:EB:42:6F:B1:EF:F2:73:E9:EB:47:4F:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca706f4fdac7e7a59a881ac85a8f4ab07ade751d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6b1c4414-35bb-4cf5-8a3b-71ad6a70f29e/112359a0fda76a18e3b52f68748e474d55e639b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6b1c4414-35bb-4cf5-8a3b-71ad6a70f29e/ca706f4fdac7e7a59a881ac85a8f4ab07ade751d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.177.192.0/19
                IPv6:
                  2803:4c80::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:42:5f:a8:6f:a6:f8:3c:92:d8:5c:a2:43:39:d7:d2:0c:d7:
         b3:20:e0:14:83:e4:77:fc:07:4d:2b:a8:54:f6:bb:3f:f3:23:
         76:3e:b9:f8:b9:a4:49:ae:84:36:7d:84:54:db:7a:c7:1c:df:
         c5:dd:f2:7a:3a:86:61:0e:9f:1b:af:3f:fe:b7:08:da:8e:f7:
         95:02:32:cd:c1:22:12:d7:ad:34:28:92:35:1c:66:96:5b:cc:
         4a:5e:88:9d:0e:0f:f2:f0:28:30:fd:e7:b9:1b:29:4c:3a:56:
         72:35:aa:be:d6:62:9e:72:d7:65:c7:ea:f2:56:6e:2d:bb:67:
         28:b1:dc:ee:b7:f8:f7:2a:9c:9d:79:9c:9d:6b:a4:8a:28:4f:
         d6:a1:37:65:da:c9:29:0d:4f:f4:71:89:d2:05:f3:fd:02:a7:
         ce:67:e4:45:a2:ef:a0:ea:74:e3:bc:b9:93:49:eb:0a:1f:ea:
         e5:8f:1f:57:cc:da:69:df:e1:d1:9c:86:61:f5:e5:f6:43:31:
         29:2b:38:6d:81:aa:5a:2f:45:ce:67:65:5c:39:7b:86:9d:de:
         68:c3:a8:b8:f2:41:76:58:02:80:99:54:35:ec:ac:45:2c:b1:
         33:a0:3e:3c:52:97:23:95:3f:dd:40:7d:4c:16:e5:db:bb:40:
         2e:de:32:f2
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICBHYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoY2E3
MDZmNGZkYWM3ZTdhNTlhODgxYWM4NWE4ZjRhYjA3YWRlNzUxZDAeFw0yMjExMjcx
NDI1MDRaFw0yNDExMjgxNDI1MDRaMDMxMTAvBgNVBAMTKDExMjM1OWEwZmRhNzZh
MThlM2I1MmY2ODc0OGU0NzRkNTVlNjM5YjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCAbRanfFNJN/g96R+ejnew5y0K027oNmRES0y1u+GN9+2B7SU/
1kKBknCUmzXUhWKyZ/yRRaPO5Cpwn+n/mhXGWhVLfyHum/abMnUMIArHxVhICkK4
C5JxC0jonsTunZtoOXsTiTP7kB+aanldOayGqBbINrZKO2x1nKYjVIjBh5jhVUWs
k/3mPD/KvE5En1Bb3FJU12lUHLLMGc4M5LvzFH0yuJXDWH70JvtA8yJMTpBa4VJh
4MbTV2b12HfG1Z0w62ZNe0a9QCzUsCqKFQceITTTYUmnVg/EU8HVhBIGpwUA3tzH
n1DAzG3gCIEnp3KzrGBrPt5Yu21rY/pNDTcTAgMBAAGjggJqMIICZjAdBgNVHQ4E
FgQUraU0pFidXwxexL7Wk1WhL2WHvm8wHwYDVR0jBBgwFoAUO5RJ0f6KN5rrQm+x
7/Jz6etHTzMwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9jYTcwNmY0
ZmRhYzdlN2E1OWE4ODFhYzg1YThmNGFiMDdhZGU3NTFkLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy82YjFjNDQxNC0zNWJiLTRjZjUtOGEzYi03MWFkNmE3
MGYyOWUvMTEyMzU5YTBmZGE3NmExOGUzYjUyZjY4NzQ4ZTQ3NGQ1NWU2MzliMi5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzZiMWM0NDE0LTM1YmItNGNmNS04YTNiLTcxYWQ2
YTcwZjI5ZS9jYTcwNmY0ZmRhYzdlN2E1OWE4ODFhYzg1YThmNGFiMDdhZGU3NTFk
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8w
HTAMBAIAATAGAwQFurHAMA0EAgACMAcDBQAoA0yAMA0GCSqGSIb3DQEBCwUAA4IB
AQARQl+ob6b4PJLYXKJDOdfSDNezIOAUg+R3/AdNK6hU9rs/8yN2Prn4uaRJroQ2
fYRU23rHHN/F3fJ6OoZhDp8brz/+twjajveVAjLNwSIS1600KJI1HGaWW8xKXoid
Dg/y8Cgw/ee5GylMOlZyNaq+1mKectdlx+ryVm4tu2cosdzut/j3KpydeZyda6SK
KE/WoTdl2skpDU/0cYnSBfP9AqfOZ+RFou+g6nTjvLmTSesKH+rljx9XzNpp3+HR
nIZh9eX2QzEpKzhtgapaL0XOZ2VcOXuGnd5ow6i48kF2WAKAmVQ17KxFLLEzoD48
UpcjlT/dQH1MFuXbu0Au3jLy
-----END CERTIFICATE-----