Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/851f3860-cec2-4096-988f-00e0156570ac/b7851e4d406ee5a6388a1be059027bf0d19b3a05.roa
File:                     b7851e4d406ee5a6388a1be059027bf0d19b3a05.roa (raw, json)
Hash identifier:          +uiKJUt5emR/k9EhN30PitpzgcslxvxDw2jyeGLOmPI=
Subject key identifier:   E4:5A:42:2B:D5:34:8E:27:E7:A3:8C:D9:37:CE:13:60:3D:32:5E:EC
Certificate issuer:       /CN=f04c66e47b3a8a66f313f04f07882f394b836678
Certificate serial:       13131F
Authority key identifier: F0:04:EF:80:58:90:50:4B:5F:78:F3:09:6F:2A:3B:28:C5:7C:F5:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f04c66e47b3a8a66f313f04f07882f394b836678.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/851f3860-cec2-4096-988f-00e0156570ac/b7851e4d406ee5a6388a1be059027bf0d19b3a05.roa
Signing time:             Wed 13 Dec 2023 14:02:41 +0000
ROA not before:           Wed 13 Dec 2023 14:02:41 +0000
ROA not after:            Sat 13 Dec 2025 14:02:41 +0000
asID:                     52235
IP address blocks:        190.99.64.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1250079 (0x13131f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04c66e47b3a8a66f313f04f07882f394b836678
        Validity
            Not Before: Dec 13 14:02:41 2023 GMT
            Not After : Dec 13 14:02:41 2025 GMT
        Subject: CN=b7851e4d406ee5a6388a1be059027bf0d19b3a05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f7:99:af:e7:7a:d1:7f:37:eb:10:bb:8c:49:
                    35:21:0c:d1:58:1b:f7:70:b7:fc:0c:f0:d3:7d:bd:
                    f9:3b:a0:18:89:bc:eb:c9:35:de:f0:2c:b7:fa:92:
                    3c:f1:1b:32:96:68:5b:6d:77:df:29:6d:d5:b8:76:
                    0b:f5:cd:a4:dc:84:99:c8:a7:b3:47:d6:d6:98:59:
                    b5:5b:f9:6b:fd:30:f1:ff:52:cf:63:cb:98:3b:55:
                    4d:00:8b:46:0a:3c:1e:27:98:47:4e:f6:0c:d6:b2:
                    da:a7:81:f2:31:9b:af:c0:cb:ea:ce:48:ef:74:4a:
                    17:e6:95:d2:5d:30:f2:87:25:76:c6:97:a6:95:6d:
                    59:ae:0b:79:21:3d:e9:2d:7f:91:32:0e:44:97:a1:
                    84:6a:57:25:0d:d6:5d:51:fc:97:2b:9e:b7:44:75:
                    f0:80:91:9f:76:cc:70:1a:fe:8d:6d:45:a3:92:9a:
                    91:27:76:7b:ac:77:e4:ac:e1:35:33:06:98:b5:b3:
                    65:df:b5:1c:d6:76:f2:2b:78:d6:f3:19:7a:1c:10:
                    80:43:db:0b:0c:cb:16:93:d5:66:7d:91:1a:7f:ec:
                    52:c9:d9:c1:69:0a:e5:d7:af:f5:43:96:23:1f:90:
                    ea:e1:30:a6:16:ce:2a:18:af:48:01:62:b1:ff:6a:
                    1b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:5A:42:2B:D5:34:8E:27:E7:A3:8C:D9:37:CE:13:60:3D:32:5E:EC
            X509v3 Authority Key Identifier:
                keyid:F0:04:EF:80:58:90:50:4B:5F:78:F3:09:6F:2A:3B:28:C5:7C:F5:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f04c66e47b3a8a66f313f04f07882f394b836678.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/851f3860-cec2-4096-988f-00e0156570ac/b7851e4d406ee5a6388a1be059027bf0d19b3a05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/851f3860-cec2-4096-988f-00e0156570ac/f04c66e47b3a8a66f313f04f07882f394b836678.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         29:2c:d5:dc:74:23:d6:e7:67:4c:57:e8:0a:85:82:7f:3a:26:
         f3:d3:e9:fb:f7:6d:39:e6:fb:99:7a:5a:a0:a3:09:d0:8e:ba:
         41:d6:53:4f:55:5c:9e:c2:11:3e:e2:85:4a:56:b0:1b:a9:f8:
         32:ec:fb:87:0e:dd:79:4a:60:d3:9a:e9:87:84:36:5f:66:84:
         1a:90:07:f8:ad:c6:c9:e5:fc:5a:92:53:71:3e:78:9b:91:18:
         a2:9a:27:9e:76:e4:63:b3:65:df:65:63:17:0e:8c:3c:0c:a0:
         b8:91:36:0c:de:ad:67:65:50:96:9c:eb:fd:5c:2d:7b:9a:74:
         cd:4f:e8:40:ed:89:76:8b:b4:36:4f:f2:7d:e5:64:83:e9:4c:
         6a:34:53:3e:be:3f:55:f9:02:b9:72:dd:23:10:73:56:e1:da:
         16:fc:2b:1b:8d:cf:70:14:94:2e:32:ed:6d:be:9e:db:05:aa:
         23:b8:0a:54:55:76:ba:37:99:5d:3b:44:49:7a:be:0b:31:fa:
         5d:f6:a6:51:0d:a0:79:89:1a:7d:53:c1:b2:ca:d4:fd:1e:3f:
         c6:8d:3f:92:90:1b:07:8a:32:2b:ca:34:36:05:12:4e:46:5c:
         05:ca:85:fb:a0:bb:2e:0b:80:8a:bd:e0:8a:08:ef:c6:f2:19:
         0d:95:2c:a2
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDExMfMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGYw
NGM2NmU0N2IzYThhNjZmMzEzZjA0ZjA3ODgyZjM5NGI4MzY2NzgwHhcNMjMxMjEz
MTQwMjQxWhcNMjUxMjEzMTQwMjQxWjAzMTEwLwYDVQQDEyhiNzg1MWU0ZDQwNmVl
NWE2Mzg4YTFiZTA1OTAyN2JmMGQxOWIzYTA1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAifeZr+d60X836xC7jEk1IQzRWBv3cLf8DPDTfb35O6AYibzr
yTXe8Cy3+pI88RsylmhbbXffKW3VuHYL9c2k3ISZyKezR9bWmFm1W/lr/TDx/1LP
Y8uYO1VNAItGCjweJ5hHTvYM1rLap4HyMZuvwMvqzkjvdEoX5pXSXTDyhyV2xpem
lW1Zrgt5IT3pLX+RMg5El6GEalclDdZdUfyXK563RHXwgJGfdsxwGv6NbUWjkpqR
J3Z7rHfkrOE1MwaYtbNl37Uc1nbyK3jW8xl6HBCAQ9sLDMsWk9VmfZEaf+xSydnB
aQrl16/1Q5YjH5Dq4TCmFs4qGK9IAWKx/2obNQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFORaQivVNI4n56OM2TfOE2A9Ml7sMB8GA1UdIwQYMBaAFPAE74BYkFBLX3jz
CW8qOyjFfPUvMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjA0YzY2
ZTQ3YjNhOGE2NmYzMTNmMDRmMDc4ODJmMzk0YjgzNjY3OC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODUxZjM4NjAtY2VjMi00MDk2LTk4OGYtMDBlMDE1
NjU3MGFjL2I3ODUxZTRkNDA2ZWU1YTYzODhhMWJlMDU5MDI3YmYwZDE5YjNhMDUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NTFmMzg2MC1jZWMyLTQwOTYtOTg4Zi0wMGUw
MTU2NTcwYWMvZjA0YzY2ZTQ3YjNhOGE2NmYzMTNmMDRmMDc4ODJmMzk0YjgzNjY3
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEA75jQDANBgkqhkiG9w0BAQsFAAOCAQEAKSzV3HQj1udnTFfo
CoWCfzom89Pp+/dtOeb7mXpaoKMJ0I66QdZTT1VcnsIRPuKFSlawG6n4Muz7hw7d
eUpg05rph4Q2X2aEGpAH+K3GyeX8WpJTcT54m5EYoponnnbkY7Nl32VjFw6MPAyg
uJE2DN6tZ2VQlpzr/Vwte5p0zU/oQO2Jdou0Nk/yfeVkg+lMajRTPr4/VfkCuXLd
IxBzVuHaFvwrG43PcBSULjLtbb6e2wWqI7gKVFV2ujeZXTtESXq+CzH6XfamUQ2g
eYkafVPBssrU/R4/xo0/kpAbB4oyK8o0NgUSTkZcBcqF+6C7LguAir3gigjvxvIZ
DZUsog==
-----END CERTIFICATE-----