Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/fb7273c120dc9e5071a1ad68b4628bca9d9527ac.roa
File:                     fb7273c120dc9e5071a1ad68b4628bca9d9527ac.roa (raw, json)
Hash identifier:          tAV6Uh3m3uAIPADpt5PR89eFGWZwrJkNcEDj8YyRLCs=
Subject key identifier:   AB:24:21:59:17:93:EC:83:7F:C0:19:CC:61:5B:5C:CD:BF:ED:47:D5
Certificate issuer:       /CN=5a0945c72ff878d76abd9c449f2d3e64afb61ba1
Certificate serial:       2120CE
Authority key identifier: BA:F4:C5:18:0C:1F:B9:B3:86:C0:F6:59:C4:AB:77:58:B5:3D:52:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a0945c72ff878d76abd9c449f2d3e64afb61ba1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/fb7273c120dc9e5071a1ad68b4628bca9d9527ac.roa
Signing time:             Thu 27 Apr 2023 06:15:15 +0000
ROA not before:           Wed 26 Apr 2023 06:15:13 +0000
ROA not after:            Sun 27 Apr 2025 06:15:13 +0000
asID:                     262172
IP address blocks:        190.143.128.0/18 maxlen: 24
                          190.143.192.0/19 maxlen: 24
                          190.143.224.0/20 maxlen: 24
                          200.119.128.0/20 maxlen: 24
                          200.119.144.0/22 maxlen: 24
                          200.119.148.0/23 maxlen: 24
                          200.119.150.0/24 maxlen: 24
                          200.119.154.0/23 maxlen: 24
                          200.119.156.0/22 maxlen: 24
                          200.119.160.0/20 maxlen: 24
                          200.119.176.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2171086 (0x2120ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a0945c72ff878d76abd9c449f2d3e64afb61ba1
        Validity
            Not Before: Apr 26 06:15:13 2023 GMT
            Not After : Apr 27 06:15:13 2025 GMT
        Subject: CN=fb7273c120dc9e5071a1ad68b4628bca9d9527ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ff:18:55:12:3d:48:85:9a:5f:e0:6b:a2:88:
                    7e:08:6b:f2:a4:4d:2d:5e:7d:7e:61:77:9f:65:ab:
                    9e:cb:c9:7e:35:64:f3:63:a3:a0:09:0f:76:47:58:
                    a2:37:8b:af:85:ca:71:35:97:00:2e:ef:2a:80:8c:
                    d3:71:f2:5d:1c:8e:86:df:c6:a0:1a:62:85:d1:30:
                    9b:aa:23:38:f9:f4:58:81:3c:b6:6b:7f:8c:79:8a:
                    ed:cb:ba:6d:e6:fa:1f:07:19:9e:ee:f1:3d:13:11:
                    34:bd:4f:4f:49:a6:b5:ff:11:02:89:13:63:54:e0:
                    39:f1:1c:16:e9:38:b8:cd:ce:2c:87:57:b7:97:d4:
                    83:b4:78:2c:8b:21:b9:44:c7:17:01:f1:7c:c1:28:
                    3e:d6:46:c6:1b:5c:c4:4a:a3:34:53:07:07:6a:84:
                    ff:6b:f9:33:1c:85:01:93:f7:d3:c5:4a:95:94:58:
                    6b:a0:32:f7:f3:50:49:db:4b:94:fd:46:b8:6a:62:
                    b0:ae:36:33:52:df:50:ab:3f:8f:c1:05:62:02:ed:
                    7a:15:38:26:1b:73:1f:e4:40:61:24:be:94:32:49:
                    9e:98:b8:f4:db:76:1c:d6:d8:22:87:8a:82:bc:99:
                    b9:8d:ef:f3:83:b4:d2:89:60:84:e1:b8:a1:c2:18:
                    14:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:24:21:59:17:93:EC:83:7F:C0:19:CC:61:5B:5C:CD:BF:ED:47:D5
            X509v3 Authority Key Identifier:
                keyid:BA:F4:C5:18:0C:1F:B9:B3:86:C0:F6:59:C4:AB:77:58:B5:3D:52:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a0945c72ff878d76abd9c449f2d3e64afb61ba1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/fb7273c120dc9e5071a1ad68b4628bca9d9527ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/5a0945c72ff878d76abd9c449f2d3e64afb61ba1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.143.128.0-190.143.239.255
                  200.119.128.0-200.119.150.255
                  200.119.154.0-200.119.183.255

    Signature Algorithm: sha256WithRSAEncryption
         23:26:c3:d5:5b:c8:19:00:b6:66:cb:e7:56:8c:17:41:8f:ad:
         01:87:e5:e7:d3:5d:e8:80:f9:26:d3:ea:3b:cf:dd:15:c4:3b:
         d1:5a:16:b9:d4:64:7f:2e:0d:e7:ea:00:bb:db:75:9d:6e:28:
         e0:dc:74:05:64:f7:11:52:b0:9f:da:65:94:81:d6:cc:db:b2:
         b9:95:86:3a:aa:db:2d:88:20:26:79:c1:62:7b:c0:71:12:11:
         e9:c4:8b:4d:a7:31:a2:33:0b:43:30:3b:ca:54:c1:b2:c6:20:
         7b:b5:d9:46:21:1f:39:3a:39:98:e2:44:21:9f:da:0a:e3:e0:
         ca:94:b9:09:06:2b:39:ec:7f:1a:49:87:37:cd:7d:4a:be:3f:
         de:cd:e9:02:7a:01:d0:1e:08:80:ea:cb:db:26:af:a5:e1:b1:
         43:86:c7:67:f0:c8:8a:65:3a:89:35:d0:ab:61:cc:b9:59:f8:
         68:ab:c6:57:fd:25:25:5f:bd:a0:75:04:a0:ff:c5:1d:68:56:
         f0:e6:ce:48:6f:7c:d5:f8:e8:a9:38:d9:26:ae:f2:5f:cf:ee:
         a8:8f:d2:6d:71:e1:a8:99:ad:f2:c1:77:02:9a:f8:cf:3d:6f:
         54:53:74:b1:26:0f:50:fd:f4:21:64:34:04:b2:fd:63:23:3e:
         d6:ed:df:58
-----BEGIN CERTIFICATE-----
MIIFZDCCBEygAwIBAgIDISDOMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVh
MDk0NWM3MmZmODc4ZDc2YWJkOWM0NDlmMmQzZTY0YWZiNjFiYTEwHhcNMjMwNDI2
MDYxNTEzWhcNMjUwNDI3MDYxNTEzWjAzMTEwLwYDVQQDEyhmYjcyNzNjMTIwZGM5
ZTUwNzFhMWFkNjhiNDYyOGJjYTlkOTUyN2FjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAj/8YVRI9SIWaX+Brooh+CGvypE0tXn1+YXefZauey8l+NWTz
Y6OgCQ92R1iiN4uvhcpxNZcALu8qgIzTcfJdHI6G38agGmKF0TCbqiM4+fRYgTy2
a3+MeYrty7pt5vofBxme7vE9ExE0vU9PSaa1/xECiRNjVOA58RwW6Ti4zc4sh1e3
l9SDtHgsiyG5RMcXAfF8wSg+1kbGG1zESqM0UwcHaoT/a/kzHIUBk/fTxUqVlFhr
oDL381BJ20uU/Ua4amKwrjYzUt9Qqz+PwQViAu16FTgmG3Mf5EBhJL6UMkmemLj0
23Yc1tgih4qCvJm5je/zg7TSiWCE4bihwhgUxQIDAQABo4ICfzCCAnswHQYDVR0O
BBYEFKskIVkXk+yDf8AZzGFbXM2/7UfVMB8GA1UdIwQYMBaAFLr0xRgMH7mzhsD2
WcSrd1i1PVKaMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWEwOTQ1
YzcyZmY4NzhkNzZhYmQ5YzQ0OWYyZDNlNjRhZmI2MWJhMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTZiYjBjOTQtYTIzOS00ZjdhLWFmZjItNGE0YTM1
MmVlZDQ5L2ZiNzI3M2MxMjBkYzllNTA3MWExYWQ2OGI0NjI4YmNhOWQ5NTI3YWMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hNmJiMGM5NC1hMjM5LTRmN2EtYWZmMi00YTRh
MzUyZWVkNDkvNWEwOTQ1YzcyZmY4NzhkNzZhYmQ5YzQ0OWYyZDNlNjRhZmI2MWJh
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBDBggrBgEFBQcBBwEB/wQ0
MDIwMAQCAAEwKjAMAwQHvo+AAwQEvo/gMAwDBAfId4ADBADId5YwDAMEAch3mgME
A8h3sDANBgkqhkiG9w0BAQsFAAOCAQEAIybD1VvIGQC2ZsvnVowXQY+tAYfl59Nd
6ID5JtPqO8/dFcQ70VoWudRkfy4N5+oAu9t1nW4o4Nx0BWT3EVKwn9pllIHWzNuy
uZWGOqrbLYggJnnBYnvAcRIR6cSLTacxojMLQzA7ylTBssYge7XZRiEfOTo5mOJE
IZ/aCuPgypS5CQYrOex/GkmHN819Sr4/3s3pAnoB0B4IgOrL2yavpeGxQ4bHZ/DI
imU6iTXQq2HMuVn4aKvGV/0lJV+9oHUEoP/FHWhW8ObOSG981fjoqTjZJq7yX8/u
qI/SbXHhqJmt8sF3Apr4zz1vVFN0sSYPUP30IWQ0BLL9YyM+1u3fWA==
-----END CERTIFICATE-----