Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/b5bc22d38a68a11ee19e35fd2fc308d77d777e2b.roa
File:                     b5bc22d38a68a11ee19e35fd2fc308d77d777e2b.roa (raw, json)
Hash identifier:          ioRrIybf0VfmAoQehEePqwsBWagBOZE0Sdvm+sp1Sjg=
Subject key identifier:   E1:4E:31:A6:8B:76:A6:C7:82:D9:6A:8D:BC:22:D4:69:9B:F3:5E:E5
Certificate issuer:       /CN=a5db578ddaaedcf4375740e85f5f51db4e193706
Certificate serial:       287923
Authority key identifier: 77:12:68:55:B2:AC:ED:4F:18:E8:4D:88:E8:D2:AF:63:B0:18:27:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5db578ddaaedcf4375740e85f5f51db4e193706.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/b5bc22d38a68a11ee19e35fd2fc308d77d777e2b.roa
Signing time:             Mon 25 Mar 2024 14:40:50 +0000
ROA not before:           Mon 25 Mar 2024 14:40:49 +0000
ROA not after:            Wed 25 Mar 2026 14:40:49 +0000
asID:                     263761
IP address blocks:        138.117.142.0/23 maxlen: 24
                          190.99.116.0/24 maxlen: 24
                          190.99.119.0/24 maxlen: 24
                          2803:5100::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2652451 (0x287923)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5db578ddaaedcf4375740e85f5f51db4e193706
        Validity
            Not Before: Mar 25 14:40:49 2024 GMT
            Not After : Mar 25 14:40:49 2026 GMT
        Subject: CN=b5bc22d38a68a11ee19e35fd2fc308d77d777e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e9:cc:1b:19:a8:3d:56:60:05:0e:b0:f5:3c:
                    0e:ec:49:ea:bc:c9:14:68:84:d5:55:60:ad:42:89:
                    23:cf:d7:75:bc:9e:bf:b1:eb:d4:77:d9:b2:c5:9f:
                    ce:e0:98:9d:0e:10:21:4b:cb:86:01:8f:55:76:0f:
                    fb:d4:10:00:fd:30:9a:29:be:4c:9e:8d:eb:7b:85:
                    40:d0:fb:c7:29:a7:5f:a5:86:3e:6d:16:bb:77:86:
                    97:d4:04:b2:4e:49:20:98:40:95:4a:a7:82:55:b5:
                    b1:a9:2f:5d:5a:df:77:1d:0e:7a:a2:e1:63:c7:dc:
                    59:97:97:57:13:a2:72:af:3d:cc:05:94:06:96:cc:
                    ee:d7:eb:63:9b:6b:d1:8a:d3:97:3b:56:2f:6d:06:
                    fc:11:35:a6:be:63:01:c2:e7:2b:3c:63:72:2c:72:
                    bb:9a:37:e7:6b:70:2a:5f:29:26:eb:3d:bc:be:b4:
                    74:38:1e:8b:30:7a:10:01:f4:ac:4f:a2:18:43:0a:
                    cb:66:a2:7c:44:49:96:6a:5e:bd:e4:09:46:77:74:
                    99:c4:de:b1:2a:0a:5d:61:48:46:2d:56:a5:0a:64:
                    72:90:6e:f3:a4:12:15:c8:6b:4f:d5:57:4a:ae:05:
                    cd:fc:fe:6f:98:82:76:ec:0e:cd:56:35:46:ab:b6:
                    57:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:4E:31:A6:8B:76:A6:C7:82:D9:6A:8D:BC:22:D4:69:9B:F3:5E:E5
            X509v3 Authority Key Identifier:
                keyid:77:12:68:55:B2:AC:ED:4F:18:E8:4D:88:E8:D2:AF:63:B0:18:27:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5db578ddaaedcf4375740e85f5f51db4e193706.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/b5bc22d38a68a11ee19e35fd2fc308d77d777e2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/a5db578ddaaedcf4375740e85f5f51db4e193706.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.142.0/23
                  190.99.116.0/24
                  190.99.119.0/24
                IPv6:
                  2803:5100::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:07:40:e1:c0:86:34:43:34:98:98:79:b9:4f:50:fc:de:8a:
         2b:2a:14:94:76:35:96:0b:51:0d:0f:73:1b:1c:44:b7:69:72:
         db:6b:2d:e1:b8:87:40:b1:9b:1a:db:6f:d2:90:84:65:23:dc:
         ee:ee:cb:3d:9c:60:d7:e7:78:f2:23:2c:cf:d9:9e:5a:17:b6:
         df:66:8a:ff:31:80:71:59:1a:f1:30:41:e3:f0:02:5f:54:f5:
         2f:33:a1:a8:c7:1a:16:ff:14:4f:9e:ee:75:b4:05:42:62:95:
         e2:c1:3c:b1:91:2a:84:4e:64:9d:21:a6:66:b7:b7:b9:2f:da:
         fa:04:7a:f2:11:27:5d:9d:d4:e7:8b:34:6d:f7:5b:be:05:37:
         85:d9:f3:c1:cf:e6:ba:ee:1e:58:60:e3:88:00:e1:aa:a2:a4:
         c0:2e:be:2e:f7:26:fd:e5:54:8c:16:f9:e8:c4:e1:0e:63:44:
         f1:21:6b:f1:fa:07:1c:8c:67:9d:6c:6d:7d:bf:c2:0c:10:05:
         28:c7:9a:57:f4:2c:b0:6e:9a:42:57:f1:72:5f:de:87:9b:29:
         95:e8:55:5f:48:6d:ec:20:45:d4:47:19:34:fe:ee:fb:d7:67:
         50:de:81:72:64:6d:6a:36:92:b7:bf:65:1f:b6:8c:c3:bc:39:
         32:25:bf:09
-----BEGIN CERTIFICATE-----
MIIFWzCCBEOgAwIBAgIDKHkjMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE1
ZGI1NzhkZGFhZWRjZjQzNzU3NDBlODVmNWY1MWRiNGUxOTM3MDYwHhcNMjQwMzI1
MTQ0MDQ5WhcNMjYwMzI1MTQ0MDQ5WjAzMTEwLwYDVQQDEyhiNWJjMjJkMzhhNjhh
MTFlZTE5ZTM1ZmQyZmMzMDhkNzdkNzc3ZTJiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjunMGxmoPVZgBQ6w9TwO7EnqvMkUaITVVWCtQokjz9d1vJ6/
sevUd9myxZ/O4JidDhAhS8uGAY9Vdg/71BAA/TCaKb5Mno3re4VA0PvHKadfpYY+
bRa7d4aX1ASyTkkgmECVSqeCVbWxqS9dWt93HQ56ouFjx9xZl5dXE6Jyrz3MBZQG
lszu1+tjm2vRitOXO1YvbQb8ETWmvmMBwucrPGNyLHK7mjfna3AqXykm6z28vrR0
OB6LMHoQAfSsT6IYQwrLZqJ8REmWal695AlGd3SZxN6xKgpdYUhGLValCmRykG7z
pBIVyGtP1VdKrgXN/P5vmIJ27A7NVjVGq7ZXHwIDAQABo4ICdjCCAnIwHQYDVR0O
BBYEFOFOMaaLdqbHgtlqjbwi1Gmb817lMB8GA1UdIwQYMBaAFHcSaFWyrO1PGOhN
iOjSr2OwGCeCMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTVkYjU3
OGRkYWFlZGNmNDM3NTc0MGU4NWY1ZjUxZGI0ZTE5MzcwNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjM0M2EyNDUtN2VhZi00OTU1LTkwZmEtOGU2ZDZm
ZDQzYWI4L2I1YmMyMmQzOGE2OGExMWVlMTllMzVmZDJmYzMwOGQ3N2Q3NzdlMmIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iMzQzYTI0NS03ZWFmLTQ5NTUtOTBmYS04ZTZk
NmZkNDNhYjgvYTVkYjU3OGRkYWFlZGNmNDM3NTc0MGU4NWY1ZjUxZGI0ZTE5Mzcw
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6BggrBgEFBQcBBwEB/wQr
MCkwGAQCAAEwEgMEAYp1jgMEAL5jdAMEAL5jdzANBAIAAjAHAwUAKANRADANBgkq
hkiG9w0BAQsFAAOCAQEAMAdA4cCGNEM0mJh5uU9Q/N6KKyoUlHY1lgtRDQ9zGxxE
t2ly22st4biHQLGbGttv0pCEZSPc7u7LPZxg1+d48iMsz9meWhe232aK/zGAcVka
8TBB4/ACX1T1LzOhqMcaFv8UT57udbQFQmKV4sE8sZEqhE5knSGmZre3uS/a+gR6
8hEnXZ3U54s0bfdbvgU3hdnzwc/muu4eWGDjiADhqqKkwC6+Lvcm/eVUjBb56MTh
DmNE8SFr8foHHIxnnWxtfb/CDBAFKMeaV/QssG6aQlfxcl/eh5splehVX0ht7CBF
1EcZNP7u+9dnUN6BcmRtajaSt79lH7aMw7w5MiW/CQ==
-----END CERTIFICATE-----