Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/782742ab-a0ac-4004-8b80-91162b8201a0/fa3166c238a56f09488714330d2e844b61a04515.roa
File:                     fa3166c238a56f09488714330d2e844b61a04515.roa (raw, json)
Hash identifier:          bgAQ+SlW99GwLQGSSk1oiDi7CG7GmzmvYdOc+F3QbRo=
Subject key identifier:   90:00:6B:70:9D:CB:52:44:13:B8:FC:EC:C3:30:D7:F1:B7:45:3F:48
Certificate issuer:       /CN=9b55f937c3d99228fd4f412f3cb2937c2fdef79f
Certificate serial:       1B3D
Authority key identifier: DF:9D:03:3A:63:EE:C4:F9:E0:0F:68:55:42:A7:3C:1C:3D:78:63:CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b55f937c3d99228fd4f412f3cb2937c2fdef79f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/782742ab-a0ac-4004-8b80-91162b8201a0/fa3166c238a56f09488714330d2e844b61a04515.roa
Signing time:             Thu 13 Apr 2023 13:05:21 +0000
ROA not before:           Wed 12 Apr 2023 13:01:39 +0000
ROA not after:            Sun 13 Apr 2025 13:01:39 +0000
asID:                     269996
IP address blocks:        190.103.88.0/22 maxlen: 24
                          2800:ca0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6973 (0x1b3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b55f937c3d99228fd4f412f3cb2937c2fdef79f
        Validity
            Not Before: Apr 12 13:01:39 2023 GMT
            Not After : Apr 13 13:01:39 2025 GMT
        Subject: CN=fa3166c238a56f09488714330d2e844b61a04515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:83:89:15:23:3b:90:60:18:09:46:55:81:a6:
                    3d:fa:18:ed:46:0c:52:3c:ae:db:11:92:31:81:07:
                    1a:7d:73:d2:55:32:80:26:c4:61:4b:fe:2a:de:8e:
                    01:dc:e3:9a:7a:b1:fd:39:ab:ef:1e:f5:29:a7:ec:
                    17:21:f0:0c:cc:29:2f:46:48:55:63:92:2b:b7:3a:
                    e2:dd:c8:ef:dc:8f:74:d6:49:e6:28:f1:2a:24:76:
                    bf:e6:f7:63:50:1d:80:71:3a:9f:66:ce:b6:70:a2:
                    3e:d1:6b:4b:74:45:35:3d:a0:f1:d7:1b:ca:9f:76:
                    ac:80:eb:84:3e:8f:79:27:7c:ef:d0:5a:81:c5:4c:
                    2d:de:a6:8a:95:55:d7:4c:a8:06:7c:da:6f:72:b8:
                    b2:a9:ff:36:c6:65:ba:3d:67:d1:66:c9:6e:d1:50:
                    bf:95:38:45:28:8c:4e:59:d6:29:dd:f3:bb:2d:16:
                    db:18:05:d2:22:bc:2a:d9:22:6e:4b:53:e4:03:65:
                    17:30:86:e8:48:de:fb:d9:d0:9d:54:91:76:28:d1:
                    0a:72:41:07:bd:37:92:0e:78:d2:27:8d:72:34:1d:
                    38:d9:8c:1d:4d:98:fc:5e:3c:03:48:e5:06:93:79:
                    9c:12:80:54:44:2b:47:10:e0:3a:ff:e8:48:82:6c:
                    45:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:00:6B:70:9D:CB:52:44:13:B8:FC:EC:C3:30:D7:F1:B7:45:3F:48
            X509v3 Authority Key Identifier:
                keyid:DF:9D:03:3A:63:EE:C4:F9:E0:0F:68:55:42:A7:3C:1C:3D:78:63:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b55f937c3d99228fd4f412f3cb2937c2fdef79f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/782742ab-a0ac-4004-8b80-91162b8201a0/fa3166c238a56f09488714330d2e844b61a04515.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/782742ab-a0ac-4004-8b80-91162b8201a0/9b55f937c3d99228fd4f412f3cb2937c2fdef79f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.88.0/22
                IPv6:
                  2800:ca0::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:57:46:ae:bc:2d:0c:66:28:1e:6e:db:f9:96:36:b1:0b:6a:
         18:f1:7f:73:a9:bb:99:37:f1:63:a0:d0:be:e4:cc:4d:fb:b6:
         ef:0e:3b:9a:5a:ff:b2:b0:f3:0c:10:c9:ae:ff:28:31:e5:08:
         4e:26:4a:32:a2:9b:65:74:33:e8:3b:3b:10:ad:9c:ad:96:bb:
         1c:e7:28:85:e5:20:80:8e:c1:57:f9:ca:de:8a:f2:62:25:a2:
         b3:26:e8:32:ad:8c:c4:07:4c:78:16:9c:6d:36:88:8d:15:77:
         d7:a6:f7:fa:0c:b3:e1:44:7a:31:6f:53:22:bc:49:a0:d8:1a:
         5f:3b:64:f8:4c:3c:ab:75:eb:47:db:e7:e9:27:47:1b:bf:38:
         8b:d9:5a:98:46:f5:bf:b1:c1:50:30:0f:a9:68:24:64:20:54:
         29:4b:61:8c:7b:86:ab:b2:7e:21:55:a4:df:3b:df:0b:26:58:
         ab:c6:75:3e:27:ac:ce:88:b8:99:6a:f9:d7:c3:22:56:1b:07:
         41:19:a3:9c:8f:f8:1f:ff:f5:bf:f2:d5:0d:92:0f:d0:b3:1b:
         ef:ef:50:22:72:d7:d6:78:4a:8e:21:25:81:c4:57:0b:29:12:
         8d:a3:11:65:49:10:95:ce:1a:ec:fd:7c:ac:c7:56:57:27:a0:
         2f:10:a6:7e
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICGz0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOWI1
NWY5MzdjM2Q5OTIyOGZkNGY0MTJmM2NiMjkzN2MyZmRlZjc5ZjAeFw0yMzA0MTIx
MzAxMzlaFw0yNTA0MTMxMzAxMzlaMDMxMTAvBgNVBAMTKGZhMzE2NmMyMzhhNTZm
MDk0ODg3MTQzMzBkMmU4NDRiNjFhMDQ1MTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCyg4kVIzuQYBgJRlWBpj36GO1GDFI8rtsRkjGBBxp9c9JVMoAm
xGFL/irejgHc45p6sf05q+8e9Smn7Bch8AzMKS9GSFVjkiu3OuLdyO/cj3TWSeYo
8Sokdr/m92NQHYBxOp9mzrZwoj7Ra0t0RTU9oPHXG8qfdqyA64Q+j3knfO/QWoHF
TC3epoqVVddMqAZ82m9yuLKp/zbGZbo9Z9FmyW7RUL+VOEUojE5Z1ind87stFtsY
BdIivCrZIm5LU+QDZRcwhuhI3vvZ0J1UkXYo0QpyQQe9N5IOeNInjXI0HTjZjB1N
mPxePANI5QaTeZwSgFREK0cQ4Dr/6EiCbEU5AgMBAAGjggJqMIICZjAdBgNVHQ4E
FgQUkABrcJ3LUkQTuPzswzDX8bdFP0gwHwYDVR0jBBgwFoAU350DOmPuxPngD2hV
Qqc8HD14Y84wDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS85YjU1Zjkz
N2MzZDk5MjI4ZmQ0ZjQxMmYzY2IyOTM3YzJmZGVmNzlmLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy83ODI3NDJhYi1hMGFjLTQwMDQtOGI4MC05MTE2MmI4
MjAxYTAvZmEzMTY2YzIzOGE1NmYwOTQ4ODcxNDMzMGQyZTg0NGI2MWEwNDUxNS5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzc4Mjc0MmFiLWEwYWMtNDAwNC04YjgwLTkxMTYy
YjgyMDFhMC85YjU1ZjkzN2MzZDk5MjI4ZmQ0ZjQxMmYzY2IyOTM3YzJmZGVmNzlm
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8w
HTAMBAIAATAGAwQCvmdYMA0EAgACMAcDBQAoAAygMA0GCSqGSIb3DQEBCwUAA4IB
AQBVV0auvC0MZigebtv5ljaxC2oY8X9zqbuZN/FjoNC+5MxN+7bvDjuaWv+ysPMM
EMmu/ygx5QhOJkoyoptldDPoOzsQrZytlrsc5yiF5SCAjsFX+creivJiJaKzJugy
rYzEB0x4FpxtNoiNFXfXpvf6DLPhRHoxb1MivEmg2BpfO2T4TDyrdetH2+fpJ0cb
vziL2VqYRvW/scFQMA+paCRkIFQpS2GMe4arsn4hVaTfO98LJlirxnU+J6zOiLiZ
avnXwyJWGwdBGaOcj/gf//W/8tUNkg/Qsxvv71AictfWeEqOISWBxFcLKRKNoxFl
SRCVzhrs/Xysx1ZXJ6AvEKZ+
-----END CERTIFICATE-----