Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a23c971f-2262-44e6-b309-3f59bfc2d0f5/ca26ad3bd5d8e9822f034eb4c20e0198b1817060.roa
File:                     ca26ad3bd5d8e9822f034eb4c20e0198b1817060.roa (raw, json)
Hash identifier:          GHGfZFNiDat0/9oW/Kk+8NeUqt2J+I9roC9lEUUxPvw=
Subject key identifier:   3E:2D:FC:71:63:A3:1A:89:66:20:B4:1E:20:1E:FF:CE:BD:F9:0E:FD
Certificate issuer:       /CN=b937c1111990e7b39c1f43b075333acd225a29b1
Certificate serial:       22F634
Authority key identifier: 1E:DA:A3:9E:B6:3D:C0:32:7D:77:BB:5F:91:84:2D:3E:3B:A2:51:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b937c1111990e7b39c1f43b075333acd225a29b1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a23c971f-2262-44e6-b309-3f59bfc2d0f5/ca26ad3bd5d8e9822f034eb4c20e0198b1817060.roa
Signing time:             Thu 17 Aug 2023 12:23:40 +0000
ROA not before:           Wed 16 Aug 2023 12:23:40 +0000
ROA not after:            Sun 17 Aug 2025 12:23:40 +0000
asID:                     28103
IP address blocks:        131.161.252.0/22 maxlen: 24
                          201.222.48.0/21 maxlen: 24
                          179.189.218.0/23 maxlen: 24
                          138.186.60.0/22 maxlen: 24
                          190.110.226.0/23 maxlen: 24
                          190.211.240.0/22 maxlen: 24
                          2803:c100::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2291252 (0x22f634)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b937c1111990e7b39c1f43b075333acd225a29b1
        Validity
            Not Before: Aug 16 12:23:40 2023 GMT
            Not After : Aug 17 12:23:40 2025 GMT
        Subject: CN=ca26ad3bd5d8e9822f034eb4c20e0198b1817060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1b:6f:a1:52:8a:17:e0:8b:2b:b8:3d:65:49:
                    d7:40:a8:49:e7:93:08:35:3e:20:38:43:51:3d:40:
                    7c:7f:46:a1:14:7c:51:19:9e:1c:9b:a8:c2:01:23:
                    ac:f8:e9:2d:2a:b4:f9:dc:90:78:e4:89:d0:32:a0:
                    18:17:46:a2:11:bb:85:c1:57:b5:45:55:9a:bf:2f:
                    22:59:8b:0e:00:90:c0:f1:f8:7f:5c:9e:64:1f:56:
                    88:7b:6b:49:8c:e9:78:4c:77:99:b0:7c:61:97:75:
                    39:37:17:e3:57:86:d3:09:85:0a:47:c3:d7:2f:8c:
                    70:55:3a:28:e9:69:8e:be:9d:de:2d:24:d3:f5:7b:
                    68:0d:f4:81:bd:f3:eb:03:a7:ee:2c:2b:01:4e:27:
                    31:c2:81:e1:2b:42:98:30:59:8a:a1:54:a2:c9:bb:
                    2a:4e:db:d3:5b:d2:88:dc:7c:8c:79:ea:45:66:8d:
                    36:bd:f4:ff:30:41:e4:0a:8c:eb:ed:e3:b5:cf:ca:
                    e9:c6:96:0f:5a:2b:94:42:45:a9:72:76:ca:56:f7:
                    2a:91:1d:11:bf:91:bb:e3:64:4c:70:7c:fd:51:4b:
                    5a:88:57:75:26:99:e3:cc:da:f3:3a:38:65:28:7b:
                    69:b9:1b:7d:8d:9a:02:a0:24:f8:a9:a2:61:1b:58:
                    4a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:2D:FC:71:63:A3:1A:89:66:20:B4:1E:20:1E:FF:CE:BD:F9:0E:FD
            X509v3 Authority Key Identifier:
                keyid:1E:DA:A3:9E:B6:3D:C0:32:7D:77:BB:5F:91:84:2D:3E:3B:A2:51:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b937c1111990e7b39c1f43b075333acd225a29b1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a23c971f-2262-44e6-b309-3f59bfc2d0f5/ca26ad3bd5d8e9822f034eb4c20e0198b1817060.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a23c971f-2262-44e6-b309-3f59bfc2d0f5/b937c1111990e7b39c1f43b075333acd225a29b1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.252.0/22
                  138.186.60.0/22
                  179.189.218.0/23
                  190.110.226.0/23
                  190.211.240.0/22
                  201.222.48.0/21
                IPv6:
                  2803:c100::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:9f:1e:18:46:de:4d:61:a7:87:fb:18:27:9e:36:0f:2f:f1:
         46:89:77:ba:a6:57:a6:16:ca:c6:27:b7:82:bd:b7:cc:51:60:
         08:18:b4:e2:09:03:23:25:e5:fd:57:7c:04:65:b9:7c:1a:f3:
         99:46:9f:7f:ec:87:b3:1a:29:17:e1:3e:f8:73:8f:6b:3b:09:
         e0:2f:23:16:17:f1:f3:78:d1:73:e4:a5:c9:2d:fd:3f:2e:69:
         2f:12:fa:23:5f:b1:00:15:d9:70:b8:e4:1e:72:f1:8b:b0:b3:
         40:c5:60:45:9c:03:a6:51:ea:e4:69:1c:ff:f9:ec:63:17:92:
         d6:a3:cf:8b:9e:87:1e:b4:2e:ca:a0:5a:f3:51:b9:1a:7b:94:
         01:fe:c6:e8:57:a2:76:80:f9:03:54:4f:4d:b1:47:a2:5b:d2:
         bf:fa:63:a0:e9:2d:d8:a7:09:e8:9d:cc:33:0c:a7:49:78:0d:
         5e:ef:19:48:53:14:61:76:75:ee:76:b8:b0:86:73:48:25:1e:
         42:eb:87:76:1b:a8:92:c7:3c:d6:9a:77:2e:af:9c:1f:64:02:
         e1:cc:41:7a:4f:3a:a6:5a:40:73:9e:45:c0:8e:c7:5b:2c:3c:
         52:10:18:99:50:bb:9e:0b:cc:e2:86:b5:53:ee:63:5a:db:6c:
         08:3e:e9:5a
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIDIvY0MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGI5
MzdjMTExMTk5MGU3YjM5YzFmNDNiMDc1MzMzYWNkMjI1YTI5YjEwHhcNMjMwODE2
MTIyMzQwWhcNMjUwODE3MTIyMzQwWjAzMTEwLwYDVQQDEyhjYTI2YWQzYmQ1ZDhl
OTgyMmYwMzRlYjRjMjBlMDE5OGIxODE3MDYwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtxtvoVKKF+CLK7g9ZUnXQKhJ55MINT4gOENRPUB8f0ahFHxR
GZ4cm6jCASOs+OktKrT53JB45InQMqAYF0aiEbuFwVe1RVWavy8iWYsOAJDA8fh/
XJ5kH1aIe2tJjOl4THeZsHxhl3U5NxfjV4bTCYUKR8PXL4xwVToo6WmOvp3eLSTT
9XtoDfSBvfPrA6fuLCsBTicxwoHhK0KYMFmKoVSiybsqTtvTW9KI3HyMeepFZo02
vfT/MEHkCozr7eO1z8rpxpYPWiuUQkWpcnbKVvcqkR0Rv5G742RMcHz9UUtaiFd1
JpnjzNrzOjhlKHtpuRt9jZoCoCT4qaJhG1hKfQIDAQABo4ICiDCCAoQwHQYDVR0O
BBYEFD4t/HFjoxqJZiC0HiAe/869+Q79MB8GA1UdIwQYMBaAFB7ao562PcAyfXe7
X5GELT47olGvMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjkzN2Mx
MTExOTkwZTdiMzljMWY0M2IwNzUzMzNhY2QyMjVhMjliMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTIzYzk3MWYtMjI2Mi00NGU2LWIzMDktM2Y1OWJm
YzJkMGY1L2NhMjZhZDNiZDVkOGU5ODIyZjAzNGViNGMyMGUwMTk4YjE4MTcwNjAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMjNjOTcxZi0yMjYyLTQ0ZTYtYjMwOS0zZjU5
YmZjMmQwZjUvYjkzN2MxMTExOTkwZTdiMzljMWY0M2IwNzUzMzNhY2QyMjVhMjli
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBMBggrBgEFBQcBBwEB/wQ9
MDswKgQCAAEwJAMEAoOh/AMEAoq6PAMEAbO92gMEAb5u4gMEAr7T8AMEA8neMDAN
BAIAAjAHAwUAKAPBADANBgkqhkiG9w0BAQsFAAOCAQEASJ8eGEbeTWGnh/sYJ542
Dy/xRol3uqZXphbKxie3gr23zFFgCBi04gkDIyXl/Vd8BGW5fBrzmUaff+yHsxop
F+E++HOPazsJ4C8jFhfx83jRc+SlyS39Py5pLxL6I1+xABXZcLjkHnLxi7CzQMVg
RZwDplHq5Gkc//nsYxeS1qPPi56HHrQuyqBa81G5GnuUAf7G6FeidoD5A1RPTbFH
olvSv/pjoOkt2KcJ6J3MMwynSXgNXu8ZSFMUYXZ17na4sIZzSCUeQuuHdhuoksc8
1pp3Lq+cH2QC4cxBek86plpAc55FwI7HWyw8UhAYmVC7ngvM4oa1U+5jWttsCD7p
Wg==
-----END CERTIFICATE-----