Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6c28f8a0-7607-4ee7-807a-08a8e3284d14/ae36ce9b7650edb46650bfabbc03dfe56c6df545.roa
File:                     ae36ce9b7650edb46650bfabbc03dfe56c6df545.roa (raw, json)
Hash identifier:          lLNcxYgxOxicvTrvkKlnRUVR0uy+xZc/HuLI2FmTamc=
Subject key identifier:   B9:8F:96:05:E8:46:AF:80:E4:98:E0:FA:87:26:E5:DC:C3:81:CA:23
Certificate issuer:       /CN=c29986287f685f9081ace4b62c221822c6408fc1
Certificate serial:       22BDE4
Authority key identifier: C4:4D:2B:96:0A:8F:CC:13:50:1C:C5:84:81:B1:76:47:60:F9:AA:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c29986287f685f9081ace4b62c221822c6408fc1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6c28f8a0-7607-4ee7-807a-08a8e3284d14/ae36ce9b7650edb46650bfabbc03dfe56c6df545.roa
Signing time:             Sat 12 Aug 2023 16:52:31 +0000
ROA not before:           Fri 11 Aug 2023 16:52:31 +0000
ROA not after:            Tue 12 Aug 2025 16:52:31 +0000
asID:                     263769
IP address blocks:        179.60.248.0/21 maxlen: 24
                          168.90.128.0/22 maxlen: 24
                          170.238.20.0/22 maxlen: 24
                          2803:7880::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2276836 (0x22bde4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c29986287f685f9081ace4b62c221822c6408fc1
        Validity
            Not Before: Aug 11 16:52:31 2023 GMT
            Not After : Aug 12 16:52:31 2025 GMT
        Subject: CN=ae36ce9b7650edb46650bfabbc03dfe56c6df545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2c:e3:59:f1:60:e7:21:ba:e8:9b:54:88:a3:
                    e1:54:69:c1:23:e7:8f:fc:00:a5:0c:03:40:11:03:
                    40:11:c2:e7:6f:0d:1a:2f:f4:a6:3e:8e:a3:b8:47:
                    e0:66:8f:a5:ba:7b:2e:b4:81:f2:3d:08:81:5f:6b:
                    0a:83:41:a2:de:f2:85:a1:ae:d7:c4:e7:43:06:2a:
                    e8:5d:8e:5f:9c:3a:df:5a:14:30:ab:f4:b6:19:16:
                    a4:70:7d:e3:72:00:03:38:94:3c:37:78:06:cd:3c:
                    13:1d:ac:12:3a:77:a9:41:48:c2:e1:d4:c3:44:79:
                    f6:e0:08:e4:b4:94:f2:da:92:a2:5f:36:a8:9e:a4:
                    e4:a5:3f:b8:30:bd:28:59:19:72:b8:44:9c:18:c3:
                    46:89:a8:42:f5:81:90:43:e1:b0:88:95:df:65:a5:
                    1f:fa:b0:e6:42:6b:64:1e:82:92:51:6f:50:32:fe:
                    c2:64:d0:d2:aa:fe:a2:b5:d0:79:d5:a1:9a:0a:66:
                    69:69:02:e3:92:41:4c:8c:11:41:6f:19:b3:f7:dd:
                    ba:e9:75:69:46:3f:13:01:a2:a6:34:5b:c0:8f:57:
                    a4:7f:67:21:01:df:5d:12:4e:20:24:38:8e:16:2b:
                    df:b7:a0:c5:31:f1:1d:d6:57:dc:a0:15:f3:89:b0:
                    30:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:8F:96:05:E8:46:AF:80:E4:98:E0:FA:87:26:E5:DC:C3:81:CA:23
            X509v3 Authority Key Identifier:
                keyid:C4:4D:2B:96:0A:8F:CC:13:50:1C:C5:84:81:B1:76:47:60:F9:AA:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c29986287f685f9081ace4b62c221822c6408fc1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6c28f8a0-7607-4ee7-807a-08a8e3284d14/ae36ce9b7650edb46650bfabbc03dfe56c6df545.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6c28f8a0-7607-4ee7-807a-08a8e3284d14/c29986287f685f9081ace4b62c221822c6408fc1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.128.0/22
                  170.238.20.0/22
                  179.60.248.0/21
                IPv6:
                  2803:7880::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:5e:67:88:4e:d7:18:93:84:94:57:44:94:74:93:15:78:ea:
         9a:57:b1:af:1e:23:92:fe:99:b3:0a:7c:28:d6:92:d8:c2:74:
         1f:03:0e:08:85:de:c0:9e:f4:75:14:64:67:9e:be:b1:12:c7:
         6c:6b:e4:31:74:f3:b9:49:7a:d2:f7:d6:a6:d6:10:fa:8b:a7:
         97:ee:df:c8:1d:5b:83:24:10:67:62:48:65:9c:41:73:b6:b9:
         21:76:ff:ad:18:f8:cf:6e:aa:07:74:93:ce:83:15:1b:45:f2:
         83:1d:3f:31:92:6c:20:d1:3d:47:4f:93:72:a8:98:5f:6c:29:
         eb:21:16:7d:50:18:9b:b9:83:b2:81:4b:1a:46:e7:02:89:5b:
         d8:32:99:0c:aa:a8:7c:07:0e:a1:7a:56:d6:13:41:c6:5b:c3:
         1e:56:d0:31:00:20:30:4f:08:38:19:83:b7:98:fe:e6:f2:18:
         3f:c7:29:a0:4d:b7:df:91:67:a2:b0:de:e4:3c:ce:8e:2a:96:
         f5:c4:a6:b0:03:5f:41:a2:1f:e6:bf:5f:e1:79:78:76:20:e7:
         8e:19:3e:74:d8:02:f7:d0:89:85:08:0e:5d:84:1b:67:96:0c:
         9c:15:6d:29:9e:b8:2d:29:c6:00:c8:fc:d0:1d:9a:64:2b:da:
         63:b7:49:36
-----BEGIN CERTIFICATE-----
MIIFWzCCBEOgAwIBAgIDIr3kMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMy
OTk4NjI4N2Y2ODVmOTA4MWFjZTRiNjJjMjIxODIyYzY0MDhmYzEwHhcNMjMwODEx
MTY1MjMxWhcNMjUwODEyMTY1MjMxWjAzMTEwLwYDVQQDEyhhZTM2Y2U5Yjc2NTBl
ZGI0NjY1MGJmYWJiYzAzZGZlNTZjNmRmNTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA2SzjWfFg5yG66JtUiKPhVGnBI+eP/AClDANAEQNAEcLnbw0a
L/SmPo6juEfgZo+lunsutIHyPQiBX2sKg0Gi3vKFoa7XxOdDBiroXY5fnDrfWhQw
q/S2GRakcH3jcgADOJQ8N3gGzTwTHawSOnepQUjC4dTDRHn24AjktJTy2pKiXzao
nqTkpT+4ML0oWRlyuEScGMNGiahC9YGQQ+GwiJXfZaUf+rDmQmtkHoKSUW9QMv7C
ZNDSqv6itdB51aGaCmZpaQLjkkFMjBFBbxmz99266XVpRj8TAaKmNFvAj1ekf2ch
Ad9dEk4gJDiOFivft6DFMfEd1lfcoBXzibAwLQIDAQABo4ICdjCCAnIwHQYDVR0O
BBYEFLmPlgXoRq+A5Jjg+ocm5dzDgcojMB8GA1UdIwQYMBaAFMRNK5YKj8wTUBzF
hIGxdkdg+areMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzI5OTg2
Mjg3ZjY4NWY5MDgxYWNlNGI2MmMyMjE4MjJjNjQwOGZjMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmMyOGY4YTAtNzYwNy00ZWU3LTgwN2EtMDhhOGUz
Mjg0ZDE0L2FlMzZjZTliNzY1MGVkYjQ2NjUwYmZhYmJjMDNkZmU1NmM2ZGY1NDUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82YzI4ZjhhMC03NjA3LTRlZTctODA3YS0wOGE4
ZTMyODRkMTQvYzI5OTg2Mjg3ZjY4NWY5MDgxYWNlNGI2MmMyMjE4MjJjNjQwOGZj
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6BggrBgEFBQcBBwEB/wQr
MCkwGAQCAAEwEgMEAqhagAMEAqruFAMEA7M8+DANBAIAAjAHAwUAKAN4gDANBgkq
hkiG9w0BAQsFAAOCAQEAIV5niE7XGJOElFdElHSTFXjqmlexrx4jkv6Zswp8KNaS
2MJ0HwMOCIXewJ70dRRkZ56+sRLHbGvkMXTzuUl60vfWptYQ+ounl+7fyB1bgyQQ
Z2JIZZxBc7a5IXb/rRj4z26qB3STzoMVG0Xygx0/MZJsINE9R0+TcqiYX2wp6yEW
fVAYm7mDsoFLGkbnAolb2DKZDKqofAcOoXpW1hNBxlvDHlbQMQAgME8IOBmDt5j+
5vIYP8cpoE2335FnorDe5DzOjiqW9cSmsANfQaIf5r9f4Xl4diDnjhk+dNgC99CJ
hQgOXYQbZ5YMnBVtKZ64LSnGAMj80B2aZCvaY7dJNg==
-----END CERTIFICATE-----