Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/53219102c518ce7d1991f754d6023b4a46f78ad2.roa
File:                     53219102c518ce7d1991f754d6023b4a46f78ad2.roa (raw, json)
Hash identifier:          9zCZwKhF+MQ3t+Z8iT/yVrPHFOONnSq4ZEz0Yv7dHyc=
Subject key identifier:   1B:4F:EC:F1:1A:71:0D:F8:45:0E:85:A4:94:C7:8F:C1:E5:BD:39:7F
Certificate issuer:       /CN=05ae69d2f111c794165a01a865fe187b8831227d
Certificate serial:       22DB9C
Authority key identifier: 82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/53219102c518ce7d1991f754d6023b4a46f78ad2.roa
Signing time:             Tue 20 Jun 2023 15:45:22 +0000
ROA not before:           Mon 19 Jun 2023 15:45:21 +0000
ROA not after:            Fri 20 Jun 2025 15:45:21 +0000
asID:                     262212
IP address blocks:        190.15.139.0/24 maxlen: 24
                          2800:68:11::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2284444 (0x22db9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ae69d2f111c794165a01a865fe187b8831227d
        Validity
            Not Before: Jun 19 15:45:21 2023 GMT
            Not After : Jun 20 15:45:21 2025 GMT
        Subject: CN=53219102c518ce7d1991f754d6023b4a46f78ad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9a:a3:40:4a:fd:5f:71:76:d3:dd:79:83:f2:
                    dc:8b:77:73:3b:79:92:b7:ee:64:0b:0b:30:36:54:
                    ac:09:e3:f0:e2:de:98:fe:37:3c:40:bf:15:79:0d:
                    6e:7b:17:70:9c:0b:06:01:e4:4f:96:ff:a4:e2:76:
                    33:d6:6b:51:d7:e1:c2:32:ef:fb:a0:47:d6:4f:50:
                    56:1e:2c:68:f8:81:ee:ef:e0:40:e6:61:41:58:b9:
                    45:bd:93:6b:b7:1c:99:ff:97:d9:3e:b3:95:0b:92:
                    01:48:c1:1e:3a:d7:68:8d:34:6e:86:e4:52:69:e5:
                    56:c1:47:6b:f1:2c:9a:b3:f9:d4:cd:4a:92:e4:e6:
                    ca:f3:7b:ba:40:3c:73:dd:6b:c4:fb:4c:24:cf:ba:
                    eb:34:b6:43:ad:cf:3e:43:47:ee:f1:38:00:1f:51:
                    c3:8e:4c:b0:a3:78:91:61:c3:b7:31:c3:94:d9:42:
                    6b:42:23:d6:3d:81:d7:12:b2:74:e5:c6:ca:38:bb:
                    1b:3a:d5:c3:4c:fa:41:ee:a5:12:47:02:85:34:8d:
                    8f:27:ab:fb:ef:44:4a:e5:3d:8c:2a:51:44:10:54:
                    3b:be:14:e2:73:2e:f6:27:f7:73:02:3f:bd:6d:88:
                    1b:1b:ed:fe:de:e5:dc:4c:35:7e:83:ca:cf:3c:64:
                    9a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:4F:EC:F1:1A:71:0D:F8:45:0E:85:A4:94:C7:8F:C1:E5:BD:39:7F
            X509v3 Authority Key Identifier:
                keyid:82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/53219102c518ce7d1991f754d6023b4a46f78ad2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/05ae69d2f111c794165a01a865fe187b8831227d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.15.139.0/24
                IPv6:
                  2800:68:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:94:52:fd:28:8c:96:bb:17:f9:76:4c:03:de:11:16:17:66:
         d0:aa:e3:4a:d4:d3:7e:1a:3d:71:f5:1f:5c:6a:94:f2:65:cb:
         64:50:aa:bb:eb:b0:af:b1:71:37:4f:29:0b:c4:70:b5:87:ab:
         cc:8f:3b:3e:cf:cb:0f:79:1b:cc:df:a3:ef:79:e7:79:f2:9e:
         5f:66:8f:d9:70:66:da:ce:fd:bc:16:65:40:fe:23:a9:ff:a8:
         6d:94:88:09:81:de:6a:7d:e0:2f:af:e7:89:18:32:34:ea:26:
         01:db:f9:9f:d8:4c:c2:4f:42:4e:10:49:b2:a6:bc:ed:f1:e6:
         e1:70:ca:f7:54:14:14:41:7d:01:5f:14:c9:82:9e:7e:f1:01:
         ed:b0:35:50:14:eb:2d:bf:08:80:88:5c:4f:56:95:4f:a6:96:
         91:b8:ad:e4:cd:44:c9:14:7d:a9:4c:7a:eb:bb:80:e1:bf:8d:
         b6:48:9f:f7:ef:a2:8b:45:8c:15:ce:7d:da:68:9a:62:59:aa:
         c0:1a:46:2b:69:2f:67:c7:70:c7:dc:e5:b9:c8:2f:e9:31:b8:
         bf:66:0f:6d:3b:64:d7:a3:13:fe:5f:6d:9f:5b:d9:e8:ae:f6:
         71:5e:a0:9f:50:b8:63:07:61:27:aa:31:4f:ae:74:f7:fe:ba:
         10:c8:c9:07
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIDItucMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA1
YWU2OWQyZjExMWM3OTQxNjVhMDFhODY1ZmUxODdiODgzMTIyN2QwHhcNMjMwNjE5
MTU0NTIxWhcNMjUwNjIwMTU0NTIxWjAzMTEwLwYDVQQDEyg1MzIxOTEwMmM1MThj
ZTdkMTk5MWY3NTRkNjAyM2I0YTQ2Zjc4YWQyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmZqjQEr9X3F20915g/Lci3dzO3mSt+5kCwswNlSsCePw4t6Y
/jc8QL8VeQ1uexdwnAsGAeRPlv+k4nYz1mtR1+HCMu/7oEfWT1BWHixo+IHu7+BA
5mFBWLlFvZNrtxyZ/5fZPrOVC5IBSMEeOtdojTRuhuRSaeVWwUdr8Syas/nUzUqS
5ObK83u6QDxz3WvE+0wkz7rrNLZDrc8+Q0fu8TgAH1HDjkywo3iRYcO3McOU2UJr
QiPWPYHXErJ05cbKOLsbOtXDTPpB7qUSRwKFNI2PJ6v770RK5T2MKlFEEFQ7vhTi
cy72J/dzAj+9bYgbG+3+3uXcTDV+g8rPPGSagwIDAQABo4ICbDCCAmgwHQYDVR0O
BBYEFBtP7PEacQ34RQ6FpJTHj8HlvTl/MB8GA1UdIwQYMBaAFIIUXtq2WB5z5L1U
YAk+zsl2C8SfMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDVhZTY5
ZDJmMTExYzc5NDE2NWEwMWE4NjVmZTE4N2I4ODMxMjI3ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOGM3OTRiZDAtN2Q5NC00NDVmLTgyMzMtMTIwMGM5
YzZmMmVjLzUzMjE5MTAyYzUxOGNlN2QxOTkxZjc1NGQ2MDIzYjRhNDZmNzhhZDIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84Yzc5NGJkMC03ZDk0LTQ0NWYtODIzMy0xMjAw
YzljNmYyZWMvMDVhZTY5ZDJmMTExYzc5NDE2NWEwMWE4NjVmZTE4N2I4ODMxMjI3
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAL4PizAPBAIAAjAJAwcAKAAAaAARMA0GCSqGSIb3DQEBCwUA
A4IBAQBvlFL9KIyWuxf5dkwD3hEWF2bQquNK1NN+Gj1x9R9capTyZctkUKq767Cv
sXE3TykLxHC1h6vMjzs+z8sPeRvM36Pveed58p5fZo/ZcGbazv28FmVA/iOp/6ht
lIgJgd5qfeAvr+eJGDI06iYB2/mf2EzCT0JOEEmyprzt8ebhcMr3VBQUQX0BXxTJ
gp5+8QHtsDVQFOstvwiAiFxPVpVPppaRuK3kzUTJFH2pTHrru4Dhv422SJ/376KL
RYwVzn3aaJpiWarAGkYraS9nx3DH3OW5yC/pMbi/Zg9tO2TXoxP+X22fW9norvZx
XqCfULhjB2EnqjFPrnT3/roQyMkH
-----END CERTIFICATE-----