Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/8e1ee2353c3511fb6b66cb1b53d5bb295a160d12.roa
File:                     8e1ee2353c3511fb6b66cb1b53d5bb295a160d12.roa (raw, json)
Hash identifier:          i71SfSkdg55ykC77/mWforvXDg49YMws3mV3NLGyR8U=
Subject key identifier:   FD:19:40:AF:97:24:F5:26:B0:94:D3:39:63:A4:F1:FA:A9:51:D2:58
Certificate issuer:       /CN=05ae69d2f111c794165a01a865fe187b8831227d
Certificate serial:       22E206
Authority key identifier: 82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/8e1ee2353c3511fb6b66cb1b53d5bb295a160d12.roa
Signing time:             Tue 20 Jun 2023 15:45:23 +0000
ROA not before:           Mon 19 Jun 2023 15:45:21 +0000
ROA not after:            Fri 20 Jun 2025 15:45:21 +0000
asID:                     27841
IP address blocks:        190.15.128.0/20 maxlen: 24
                          2800:68::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2286086 (0x22e206)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ae69d2f111c794165a01a865fe187b8831227d
        Validity
            Not Before: Jun 19 15:45:21 2023 GMT
            Not After : Jun 20 15:45:21 2025 GMT
        Subject: CN=8e1ee2353c3511fb6b66cb1b53d5bb295a160d12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b2:25:88:97:1e:f4:ee:cd:04:29:04:3e:0d:
                    98:1f:ff:cb:af:23:67:4a:6c:90:da:72:df:7c:ba:
                    1e:46:0b:5f:57:34:f2:5c:9e:49:9f:bf:b6:b8:d9:
                    02:95:48:ab:e6:ab:46:d5:f9:7e:0e:ff:2e:23:63:
                    9c:f0:b8:f4:0b:7a:37:69:83:81:df:26:86:fd:c3:
                    7d:9a:53:b9:67:6c:d9:d3:a7:a0:68:f9:49:1d:5d:
                    ef:4a:ac:d9:d1:7e:c4:16:dd:d2:61:28:2c:e1:66:
                    09:15:8e:71:d1:ac:39:d5:17:28:f6:3d:c3:3c:33:
                    0c:dc:64:8b:66:bc:3e:9f:c9:25:61:31:9d:85:ee:
                    7b:6d:83:bd:41:62:94:04:8a:2a:80:4e:5a:b0:fa:
                    41:f8:bc:f2:77:4e:bb:7f:b5:d4:9e:fc:4d:6d:09:
                    67:8b:6e:69:db:29:a3:f2:18:03:f7:d2:3d:2b:47:
                    b4:2b:ee:2a:fa:df:28:31:6b:07:50:09:28:15:df:
                    4d:56:e3:9e:ca:57:c1:40:98:1b:41:72:aa:cd:dc:
                    75:ff:ac:c3:19:8f:a7:64:07:af:2b:a4:0c:31:ea:
                    6e:6c:7b:f6:71:45:1d:3c:10:43:fe:73:62:b0:58:
                    80:35:f6:c9:e0:ee:26:d0:52:5f:21:1e:b7:9f:99:
                    69:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:19:40:AF:97:24:F5:26:B0:94:D3:39:63:A4:F1:FA:A9:51:D2:58
            X509v3 Authority Key Identifier:
                keyid:82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/8e1ee2353c3511fb6b66cb1b53d5bb295a160d12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/05ae69d2f111c794165a01a865fe187b8831227d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.15.128.0/20
                IPv6:
                  2800:68::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:af:3f:29:46:65:8a:4d:89:75:58:5c:37:5f:25:b5:5a:e4:
         de:1a:42:03:f2:2f:34:75:b7:1c:4e:44:65:94:9a:e1:94:38:
         18:00:25:04:f9:c8:58:e3:6c:52:02:b5:20:b6:93:de:01:ee:
         48:e0:22:28:f9:60:31:33:34:0b:91:8b:08:ec:bc:63:55:a4:
         0e:0f:fc:7f:e3:53:34:dd:58:49:bb:d5:3d:48:7f:ea:5c:f4:
         d0:7d:fb:e7:89:93:c6:4a:fa:d8:a5:1c:b9:e9:d9:cc:ce:71:
         4b:dc:ea:ac:fa:31:e7:6f:24:22:e0:6f:c7:b8:2e:bc:8d:dd:
         a2:f2:d9:d3:2c:d3:59:58:9f:ee:33:14:e7:c1:a9:9f:12:98:
         64:32:9f:b1:c6:bb:ea:48:5d:ad:56:8b:2f:e3:23:78:91:3b:
         3b:11:90:6c:8d:67:3e:45:f9:c7:28:1a:13:a8:11:6a:2b:b1:
         9c:7d:13:50:34:e9:db:63:a5:6b:71:e3:ef:b1:94:0a:4d:c2:
         a0:fd:b6:f6:98:3d:c4:b1:23:1c:80:a9:42:46:f4:08:48:08:
         23:10:1c:8a:b9:41:29:f8:2b:21:d2:f9:9d:d5:2a:c6:b9:ed:
         0f:39:c2:85:2b:9f:14:b6:af:e6:d8:74:c4:de:13:0a:f2:59:
         70:eb:09:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----